$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: ndptV6xlTjIJecysk1vmsp1NdAfRIEcC0iFKLrvApW0= Subject key identifier: 41:F1:6A:BE:05:74:49:59:37:59:91:40:4E:CB:20:3A:6B:63:9A:95 Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 0FEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 0FE4 Signing time: Tue 30 Apr 2024 18:15:33 +0000 Manifest this update: Tue 30 Apr 2024 18:15:32 +0000 Manifest next update: Tue 07 May 2024 18:15:32 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: 494bfTMEgk3XwlLBapwaEsrTkEe2JoOngXVjMPeJbqQ=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: p5WI048j+aa2euJphDqE0g93ye/98v4Qw+eHTYJi4ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4075 (0xfeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Apr 30 18:15:32 2024 GMT Not After : May 7 18:15:32 2024 GMT Subject: CN=66313545-0abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:bd:eb:f2:f6:35:77:0a:63:7d:76:bb:b6: e6:71:7a:87:4a:33:a7:b0:b6:8d:3d:32:1c:d7:14: 80:1e:d5:e6:e2:20:a8:6c:ad:84:f9:fe:13:a7:7a: 94:3c:b8:17:c9:21:c4:8e:bd:a2:0f:35:b4:2f:12: 93:13:dd:d9:29:49:2b:4c:f9:a1:38:00:dd:a5:49: ea:14:17:8d:18:3a:1b:25:da:fa:ec:17:8b:0b:2d: e3:ab:34:7c:28:35:ae:06:6b:99:a5:af:fd:25:96: dd:12:3a:00:e7:03:5d:6f:f7:c5:e0:0e:80:0e:ce: f6:6a:c7:b7:27:13:ab:ec:d5:1f:fc:e4:a6:a8:95: f4:1b:78:85:9d:f4:85:29:1f:8e:9a:ae:73:73:e4: 72:fb:41:0a:36:39:17:87:88:52:23:74:98:71:21: db:81:0d:c5:41:e6:1d:fc:d2:08:3c:61:28:43:39: ed:9f:b5:df:cd:2c:ef:fb:29:20:c4:35:6d:23:c0: 34:45:f5:4b:b0:7c:95:7a:04:3d:3f:bc:60:bc:f6: 58:aa:53:18:a7:12:d1:57:2e:97:74:be:98:fa:57: 8f:bf:c9:8d:06:de:55:f9:f3:9b:4e:e5:31:72:8c: 1d:b1:d4:9e:4f:ec:70:8b:bb:74:2c:9a:8d:e9:e2: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F1:6A:BE:05:74:49:59:37:59:91:40:4E:CB:20:3A:6B:63:9A:95 X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:73:8c:12:98:70:73:36:d1:c8:b8:43:3a:ec:83:e0:d7:f4: 0f:04:c3:e6:e8:c3:0e:11:2f:47:db:07:5f:b6:60:d6:01:e1: 8a:da:e6:8b:03:24:c6:c7:9d:40:18:9c:48:41:b1:84:3a:50: e0:5e:f5:1f:da:82:a7:28:d8:8d:14:e8:cd:ed:30:72:7e:3b: 0d:3f:97:5f:b6:6d:5d:af:19:3b:ca:19:fb:4b:cb:34:9b:33: 25:2c:0e:fd:4c:0c:6f:75:e4:d5:3b:a3:cd:43:6c:73:a1:43: 20:4b:43:73:5d:04:69:78:04:e1:62:3a:95:60:1d:bc:e8:1a: bc:10:41:e3:88:fd:d9:d1:49:df:02:9d:8d:aa:b4:c4:42:62: 14:5e:ac:50:e3:07:3c:3d:61:2f:1c:26:89:ee:13:c5:dc:05: d4:30:bf:42:bc:d4:69:87:9c:2a:2c:a2:67:8a:93:c0:3d:00: f8:a2:be:33:a3:06:43:7f:ee:f5:9c:ea:35:c3:b8:44:93:35: 1a:77:b4:ef:dd:2c:35:1d:2a:f0:23:83:cf:44:af:45:7e:85: 13:28:ef:5a:a9:d2:8c:e4:fd:5d:ad:81:1d:40:5a:58:62:c4: 49:09:9e:c2:da:57:5b:2e:2d:e5:c2:80:96:10:9d:50:19:08: c1:ca:e3:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjQwNDMwMTgxNTMyWhcNMjQwNTA3MTgxNTMyWjAYMRYwFAYD VQQDEw02NjMxMzU0NS0wYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnO96/L2NXcKY312u7bmcXqHSjOnsLaNPTIc1xSAHtXm4iCobK2E+f4Tp3qU PLgXySHEjr2iDzW0LxKTE93ZKUkrTPmhOADdpUnqFBeNGDobJdr67BeLCy3jqzR8 KDWuBmuZpa/9JZbdEjoA5wNdb/fF4A6ADs72ase3JxOr7NUf/OSmqJX0G3iFnfSF KR+Omq5zc+Ry+0EKNjkXh4hSI3SYcSHbgQ3FQeYd/NIIPGEoQzntn7XfzSzv+ykg xDVtI8A0RfVLsHyVegQ9P7xgvPZYqlMYpxLRVy6XdL6Y+lePv8mNBt5V+fObTuUx cowdsdSeT+xwi7t0LJqN6eIL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHxar4F dElZN1mRQE7LIDprY5qVMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9c4wSmHBzNtHIuEM67IPg1/QPBMPm6MMOES9H2wdftmDWAeGK2uaL AyTGx51AGJxIQbGEOlDgXvUf2oKnKNiNFOjN7TByfjsNP5dftm1drxk7yhn7S8s0 mzMlLA79TAxvdeTVO6PNQ2xzoUMgS0NzXQRpeAThYjqVYB286Bq8EEHjiP3Z0Unf Ap2NqrTEQmIUXqxQ4wc8PWEvHCaJ7hPF3AXUML9CvNRph5wqLKJnipPAPQD4or4z owZDf+71nOo1w7hEkzUad7Tv3Sw1HSrwI4PPRK9FfoUTKO9aqdKM5P1drYEdQFpY YsRJCZ7C2ldbLi3lwoCWEJ1QGQjByuOG -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:26 2024 by rpki-client on console-ams.rpki-client.org