$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: PLcVUdMblfzU6iEbUdpz6r/Z1BCNyp4qk1jVaeeZUtI= Subject key identifier: 1E:C6:A4:ED:45:C5:C9:45:B3:63:AE:17:43:61:B8:C7:BE:6B:47:23 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 22 Signing time: Wed 15 May 2024 08:42:47 +0000 Manifest this update: Wed 15 May 2024 08:42:47 +0000 Manifest next update: Wed 22 May 2024 08:42:47 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: UIN3t6zt8nGOkHfvnCnHe6z9b1Me/4rnReJlzsCF/WY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: May 15 08:42:47 2024 GMT Not After : May 22 08:42:47 2024 GMT Subject: CN=66447587-4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:ab:b3:b4:2e:99:a0:ad:d7:27:99:cd:69: 51:01:1b:3a:9f:fc:16:c5:73:d5:73:11:9a:b3:7b: 2d:26:94:77:19:1c:c3:b0:a2:bf:8a:72:a5:ec:2a: 50:73:04:c1:a7:5e:dd:f9:73:8e:ce:16:ea:f0:88: 4b:93:64:78:0a:01:1b:fc:a4:e9:b5:85:da:42:65: 6b:f2:32:c7:f6:eb:c6:8a:ba:7d:40:11:f5:e7:33: c4:5b:fe:03:9f:93:9c:f4:b7:c4:32:56:63:cc:75: 6e:80:6d:4d:5e:23:2d:2a:0b:1a:1d:c8:84:da:4c: 67:9f:a3:fd:cb:19:76:4d:f9:c2:85:37:08:92:b1: 58:6f:51:ea:4d:f6:75:74:6a:c2:ab:48:3a:43:cd: a7:45:5b:9c:ff:04:ac:ff:67:bd:40:21:23:38:41: 22:e8:dd:c9:60:ae:a4:61:6b:6d:49:f0:58:25:f3: fd:ef:b4:a5:39:58:0c:f8:e8:82:64:66:99:02:34: 08:65:1b:59:84:48:e0:e4:d8:21:53:f9:50:03:a2: c1:e4:fc:26:03:cd:42:1b:ea:c5:01:c7:85:5e:be: 0f:fd:7c:fb:65:86:f5:6a:33:99:87:a2:1e:08:ea: 70:ea:67:e0:d2:48:35:c3:42:9b:bd:96:2d:37:07: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C6:A4:ED:45:C5:C9:45:B3:63:AE:17:43:61:B8:C7:BE:6B:47:23 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:12:e9:0a:a8:b0:bc:63:49:17:2e:13:ac:a2:8f:49:e4:82: 84:5c:a1:07:56:11:db:4d:77:c0:7c:ca:eb:45:92:85:21:ac: 79:24:67:1e:2d:d7:35:ee:5a:8f:d9:a9:a3:5b:50:46:d4:69: 0e:45:02:3f:48:56:91:c4:00:65:9e:0b:43:0f:82:4b:93:83: 5f:be:4b:7b:ee:ba:2b:7f:c8:f2:1c:80:d7:f0:f9:9c:49:4b: 77:9e:43:a6:c1:c3:1d:5e:08:1b:d6:e5:e3:4e:35:5c:59:31: 4b:4d:97:ef:61:90:1b:64:1d:c0:36:98:08:cf:b5:77:fd:30: 08:9a:a7:14:34:63:33:e4:eb:4b:05:e1:56:8d:05:82:f0:1c: 70:ab:a9:f4:4a:19:8a:22:e2:68:b2:28:34:23:09:90:45:60: 07:63:72:b6:e8:43:21:f0:21:fd:af:96:15:1e:4c:95:fe:91: 6b:21:5d:e6:ca:7b:a3:f6:42:8d:ed:23:dd:a3:00:49:43:9d: 6d:17:0e:35:41:ac:fe:98:ff:7c:d9:06:01:ae:e5:b3:40:25: f2:a1:e4:a1:d8:6f:5a:3a:ab:5f:23:45:4f:fb:b3:4e:b9:49: 15:82:eb:7b:15:99:6c:c4:28:f8:04:01:da:5a:81:8a:e7:27: 00:27:d2:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REFDMDExMC8GA1UEBRMoNTRCOTY2QUQ4QjU3MzE2NDE2NTI5NTA3RjVCQ0E5QzAw RTExODFCOTAeFw0yNDA1MTUwODQyNDdaFw0yNDA1MjIwODQyNDdaMBgxFjAUBgNV BAMTDTY2NDQ3NTg3LTQwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQn6uztC6ZoK3XJ5nNaVEBGzqf/BbFc9VzEZqzey0mlHcZHMOwor+KcqXsKlBz BMGnXt35c47OFurwiEuTZHgKARv8pOm1hdpCZWvyMsf268aKun1AEfXnM8Rb/gOf k5z0t8QyVmPMdW6AbU1eIy0qCxodyITaTGefo/3LGXZN+cKFNwiSsVhvUepN9nV0 asKrSDpDzadFW5z/BKz/Z71AISM4QSLo3clgrqRha21J8Fgl8/3vtKU5WAz46IJk ZpkCNAhlG1mESODk2CFT+VADosHk/CYDzUIb6sUBx4Vevg/9fPtlhvVqM5mHoh4I 6nDqZ+DSSDXDQpu9li03B3RZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHsak7UXF yUWzY64XQ2G4x75rRyMwHwYDVR0jBBgwFoAUVLlmrYtXMWQWUpUH9bypwA4Rgbkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQUMwL0U3NjNBQThBREU4 ODExRUU5M0Q5QTc0NEM0RjlBRTAyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkxsbXJZdFhNV1FXVXBVSDlieXB3QTRSZ2JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE QUMwL0U3NjNBQThBREU4ODExRUU5M0Q5QTc0NEM0RjlBRTAyL1ZMbG1yWXRYTVdR V1VwVUg5Ynlwd0E0Umdiay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYS6QqosLxjSRcuE6yij0nkgoRcoQdWEdtNd8B8yutFkoUhrHkkZx4t 1zXuWo/ZqaNbUEbUaQ5FAj9IVpHEAGWeC0MPgkuTg1++S3vuuit/yPIcgNfw+ZxJ S3eeQ6bBwx1eCBvW5eNONVxZMUtNl+9hkBtkHcA2mAjPtXf9MAiapxQ0YzPk60sF 4VaNBYLwHHCrqfRKGYoi4miyKDQjCZBFYAdjcrboQyHwIf2vlhUeTJX+kWshXebK e6P2Qo3tI92jAElDnW0XDjVBrP6Y/3zZBgGu5bNAJfKh5KHYb1o6q18jRU/7s065 SRWC63sVmWzEKPgEAdpagYrnJwAn0vI= -----END CERTIFICATE-----Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org