$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft File: Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json) Hash identifier: J1fF7MmD0WN6hETXPex6J1NoqlKLnM2edyMiS+Jv/7E= Subject key identifier: D6:EC:E0:42:30:E3:80:E5:8F:03:29:48:29:AD:0F:8E:81:B4:0D:08 Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E Certificate issuer: /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft Manifest number: 06A2 Signing time: Thu 02 May 2024 23:22:17 +0000 Manifest this update: Thu 02 May 2024 23:22:17 +0000 Manifest next update: Thu 09 May 2024 23:22:17 +0000 Files and hashes: 1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: ykYEimCbYOP8zzk0nTZWxhUnou0RDe2CfRJQN9rFJB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E Validity Not Before: May 2 23:22:17 2024 GMT Not After : May 9 23:22:17 2024 GMT Subject: CN=66342029-e58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:8b:12:05:74:f2:2c:a7:7a:81:b1:72:bb: 26:6f:6b:5e:b7:6f:a9:8e:3c:1b:d5:4b:e3:f5:5d: 1e:16:18:92:8d:12:89:49:15:da:20:8d:56:6d:16: 3f:d4:52:d9:6a:d0:12:12:16:81:fe:bf:02:08:9a: 81:4a:ec:ba:ff:34:29:4b:f1:3f:34:9b:b9:e4:90: 01:3b:ec:dc:cb:a0:9a:f7:b5:e9:70:53:b5:b6:1d: b9:a6:78:9f:24:f7:34:8a:98:7b:18:aa:1d:b0:a2: 6d:b5:91:c9:64:55:e3:df:56:d4:e3:87:fd:72:a3: 7d:22:64:7f:56:15:e0:9e:c7:22:c2:10:86:0e:f7: 3a:be:af:40:24:04:b3:a0:c2:00:de:d9:45:92:4a: 77:22:c7:fc:09:97:74:10:9e:08:c0:79:08:ad:68: 2f:2c:05:81:04:d9:6e:ce:1f:16:90:05:db:bc:42: 82:5b:97:9a:b6:c0:53:da:e0:cc:ce:8a:68:01:1b: 69:f4:a5:7e:6a:8b:14:f3:15:2d:bb:86:da:ee:f1: 82:ab:f7:1e:4f:f4:8c:d6:34:4f:18:5c:7b:0e:27: 43:41:6a:a5:c9:85:d9:87:12:9a:68:d8:24:6c:c9: da:2b:5b:1d:89:92:b0:8a:8f:97:c9:ef:f4:45:83: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:E0:42:30:E3:80:E5:8F:03:29:48:29:AD:0F:8E:81:B4:0D:08 X509v3 Authority Key Identifier: keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:90:c8:32:58:a2:50:66:95:13:8d:99:43:45:68:e7:11:13: af:95:83:1e:73:56:f0:d7:3a:a1:92:24:a2:84:31:89:68:02: 48:eb:38:33:7d:b8:41:77:fa:30:01:7c:7a:00:bb:aa:ca:d6: f0:f1:8e:f8:63:6e:cd:bb:d1:92:b2:cd:50:52:66:77:58:cf: 60:84:92:4b:79:11:0b:7f:a9:e8:f9:4c:55:e5:c2:ca:45:c6: b9:3e:7a:42:69:5d:c6:52:37:e8:c1:58:49:37:9a:51:7c:84: ee:58:7b:7f:41:f2:1a:35:ff:1d:2a:92:3a:b4:53:3a:0f:11: 43:43:fc:72:4b:4f:6e:ab:c4:46:79:65:d3:e9:27:42:61:a8: ed:5e:5d:f4:2a:a9:53:f3:df:56:76:c8:38:35:e7:e4:9a:7d: ae:44:a6:d6:4c:6d:cd:2a:0f:6a:b1:08:db:e6:5a:d9:c9:7e: ba:55:05:1f:39:53:86:5a:5e:2e:6b:4f:06:4d:69:8f:f9:d3: dc:1e:7d:a0:8c:c8:58:cc:a0:aa:96:85:4f:6d:c1:74:31:49: f8:49:ee:03:5d:0f:e9:9d:d2:49:61:f9:e1:5b:0e:fb:2a:e4: 5c:1a:13:81:2e:21:26:ba:4f:5b:99:90:e3:43:9a:3f:92:08: f8:66:f7:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDU2MEJCRDYwMDZDRUNENzMwMEQxNTI0QzhBMjc0MzlB QkJGMTU5N0UwHhcNMjQwNTAyMjMyMjE3WhcNMjQwNTA5MjMyMjE3WjAYMRYwFAYD VQQDEw02NjM0MjAyOS1lNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoyLEgV08iyneoGxcrsmb2tet2+pjjwb1Uvj9V0eFhiSjRKJSRXaII1WbRY/ 1FLZatASEhaB/r8CCJqBSuy6/zQpS/E/NJu55JABO+zcy6Ca97XpcFO1th25pnif JPc0iph7GKodsKJttZHJZFXj31bU44f9cqN9ImR/VhXgnsciwhCGDvc6vq9AJASz oMIA3tlFkkp3Isf8CZd0EJ4IwHkIrWgvLAWBBNluzh8WkAXbvEKCW5eatsBT2uDM zopoARtp9KV+aosU8xUtu4ba7vGCq/ceT/SM1jRPGFx7DidDQWqlyYXZhxKaaNgk bMnaK1sdiZKwio+Xye/0RYNbdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbs4EIw 44DljwMpSCmtD46BtA0IMB8GA1UdIwQYMBaAFFYLvWAGzs1zANFSTIonQ5q78Vl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84ODZCOUExQzE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9WZ3U5WUFiT3pYTUEwVkpNaWlkRG1ydnhX WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZndTlZQWJPelhNQTBWSk1paWREbXJ2eFdYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84ODZCOUExQzE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9WZ3U5WUFiT3pY TUEwVkpNaWlkRG1ydnhXWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCskMgyWKJQZpUTjZlDRWjnEROvlYMec1bw1zqhkiSihDGJaAJI6zgz fbhBd/owAXx6ALuqytbw8Y74Y27Nu9GSss1QUmZ3WM9ghJJLeRELf6no+UxV5cLK Rca5PnpCaV3GUjfowVhJN5pRfITuWHt/QfIaNf8dKpI6tFM6DxFDQ/xyS09uq8RG eWXT6SdCYajtXl30KqlT899Wdsg4Nefkmn2uRKbWTG3NKg9qsQjb5lrZyX66VQUf OVOGWl4ua08GTWmP+dPcHn2gjMhYzKCqloVPbcF0MUn4Se4DXQ/pndJJYfnhWw77 KuRcGhOBLiEmuk9bmZDjQ5o/kgj4Zvfs -----END CERTIFICATE-----Generated at Fri May 3 00:07:12 2024 by rpki-client on console-ams.rpki-client.org