$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: ajvhYDeYpnFsAtcSAQEAlR8OYFLXYjJjv7s2BlWyTJk= Subject key identifier: 0E:AE:BA:8F:22:30:81:A3:9C:C6:8D:C0:B9:ED:40:8F:4B:94:20:9A Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0356 Signing time: Sun 05 May 2024 03:02:36 +0000 Manifest this update: Sun 05 May 2024 03:02:35 +0000 Manifest next update: Sun 12 May 2024 03:02:35 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: LJ0ybjMochgDAmnx6EauLbtYSvuxd7URoxfmvPwfc4M=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: yhiI91XkzwkhnhaYNH6zI3a1DeYpIdZabbgvsl7RlxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: May 5 03:02:35 2024 GMT Not After : May 12 03:02:35 2024 GMT Subject: CN=6636f6cc-6880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:ac:c6:2d:13:b7:6f:1b:73:7f:81:51:b5: 8b:dc:b0:55:c4:79:ca:b9:be:bf:ac:1d:cc:a8:09: 8e:a7:7d:4b:e7:4a:d2:15:1d:bb:68:12:84:20:0c: 95:21:21:de:1c:8c:32:44:91:51:f4:69:5d:df:30: d0:3e:91:8f:a6:76:6f:fb:16:ad:7c:07:1d:e4:3c: db:a2:49:8a:af:50:7e:74:7b:67:e4:44:14:69:e0: 62:f6:b7:59:a8:56:2e:2f:2e:88:c3:39:aa:3c:37: 24:ab:fe:6d:8b:c7:94:74:7d:d0:e0:47:b7:71:2e: 8a:3f:33:71:de:11:69:ac:c2:66:b5:b4:73:31:ab: f9:e8:fa:1e:8d:9d:9d:f7:0f:ba:fa:2b:14:de:3f: 57:0d:7c:cb:0e:5e:4f:c3:56:b9:40:81:a1:34:eb: 42:31:53:2e:00:cf:c9:b0:44:f1:65:dd:10:30:73: 05:54:26:e2:3b:2b:e8:11:74:44:9b:04:8c:d6:e2: 2d:7a:28:bb:a3:e9:63:26:17:83:cc:d2:a9:36:c5: 89:87:14:cf:b6:4d:35:bb:1c:4d:d1:27:31:3f:0b: ac:75:11:c9:48:bc:b8:40:91:44:d4:6d:9a:bf:15: 0a:96:0c:55:a2:3b:2e:dc:36:b6:45:5b:b4:94:e2: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:BA:8F:22:30:81:A3:9C:C6:8D:C0:B9:ED:40:8F:4B:94:20:9A X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:2a:ee:ba:ad:69:2f:01:fd:e8:4c:67:18:c5:35:31:c2:0e: 8e:2b:a9:e3:70:e3:c1:30:55:0d:23:72:13:d1:f2:50:b3:f5: e3:fb:75:81:be:08:4f:e8:59:18:cc:d1:49:62:48:bc:55:68: 07:69:7e:4f:98:74:8a:cb:df:cc:4e:05:0b:3b:88:96:9f:bb: f0:37:c7:25:db:18:8f:f4:8b:71:31:7c:8e:68:21:f0:7e:de: c4:40:bb:0e:d0:ef:75:14:da:8e:ea:cb:eb:7f:31:cd:f6:b8: 2f:01:bf:19:c3:c8:a6:53:03:f8:0b:d9:5f:d9:f4:cf:00:23: 08:6b:10:4a:67:c8:3f:23:cc:94:6a:58:d8:70:45:de:32:11: ed:37:2d:95:0d:7d:fd:fd:0c:e3:ab:f1:76:26:cf:21:cf:cb: f1:ae:e5:6e:0a:71:f9:ce:5d:9a:a8:49:0a:4d:f1:08:33:70: 7f:9c:1e:f8:c8:f4:81:3f:b0:f8:39:63:2d:51:b0:ae:21:be: 9d:ed:1a:53:6e:89:a3:31:64:10:c4:b0:0e:7a:f2:1c:01:36: da:58:b6:b5:fb:82:b3:8a:3f:97:8e:6e:7e:f4:d1:f9:7e:7b: d5:ea:9d:3d:d6:3b:b2:2e:fe:e4:58:21:7a:c5:d1:55:bf:a5: 5a:32:71:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjQwNTA1MDMwMjM1WhcNMjQwNTEyMDMwMjM1WjAYMRYwFAYD VQQDEw02NjM2ZjZjYy02ODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgmsxi0Tt28bc3+BUbWL3LBVxHnKub6/rB3MqAmOp31L50rSFR27aBKEIAyV ISHeHIwyRJFR9Gld3zDQPpGPpnZv+xatfAcd5DzbokmKr1B+dHtn5EQUaeBi9rdZ qFYuLy6IwzmqPDckq/5ti8eUdH3Q4Ee3cS6KPzNx3hFprMJmtbRzMav56PoejZ2d 9w+6+isU3j9XDXzLDl5Pw1a5QIGhNOtCMVMuAM/JsETxZd0QMHMFVCbiOyvoEXRE mwSM1uIteii7o+ljJheDzNKpNsWJhxTPtk01uxxN0ScxPwusdRHJSLy4QJFE1G2a vxUKlgxVojsu3Da2RVu0lOJWaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6uuo8i MIGjnMaNwLntQI9LlCCaMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeKu66rWkvAf3oTGcYxTUxwg6OK6njcOPBMFUNI3IT0fJQs/Xj+3WB vghP6FkYzNFJYki8VWgHaX5PmHSKy9/MTgULO4iWn7vwN8cl2xiP9ItxMXyOaCHw ft7EQLsO0O91FNqO6svrfzHN9rgvAb8Zw8imUwP4C9lf2fTPACMIaxBKZ8g/I8yU aljYcEXeMhHtNy2VDX39/Qzjq/F2Js8hz8vxruVuCnH5zl2aqEkKTfEIM3B/nB74 yPSBP7D4OWMtUbCuIb6d7RpTbomjMWQQxLAOevIcATbaWLa1+4Kzij+Xjm5+9NH5 fnvV6p091juyLv7kWCF6xdFVv6VaMnFK -----END CERTIFICATE-----Generated at Sun May 5 03:47:45 2024 by rpki-client on console-fra.rpki-client.org