$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: IQG7PL+INMNwE+G9qv9rQzTWO3ZQzBr0PG+mSqrl6xI= Subject key identifier: BC:AD:20:71:E4:3C:F8:C6:8B:7B:B6:9A:59:5F:5E:A4:BC:72:81:A0 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 2708 Signing time: Tue 30 Apr 2024 15:57:27 +0000 Manifest this update: Tue 30 Apr 2024 15:57:27 +0000 Manifest next update: Tue 07 May 2024 15:57:27 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: D+N47Cd5hg8RQySI5V6zphtJs2DqVAUQYJ9P0FKHgs0=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: gTG9NiD62jvO4mx9eBXXwEWd8K9Md5xXTHjfxxr4LDI=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: vYdfjmd5sFOJKajtsdhJQ4lUaW6XPw2R+eSDMIJefQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10017 (0x2721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Apr 30 15:57:27 2024 GMT Not After : May 7 15:57:27 2024 GMT Subject: CN=663114e7-1023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:c7:13:fe:cc:4b:a8:af:90:1d:81:76:0e: cd:68:68:57:26:c6:fe:a4:27:89:f5:06:ac:74:a4: dc:65:80:ce:57:35:a8:79:10:7e:e9:cd:04:ac:42: 25:c8:d0:27:30:ba:72:a3:65:2f:27:cd:10:00:11: e4:c7:5d:e7:10:27:5d:6b:5e:7c:95:52:1c:d3:4a: 81:13:a3:b8:28:a0:10:ca:c8:68:38:72:2b:53:c4: c0:a1:a1:cb:00:34:e8:ec:cb:9c:12:c9:42:69:ab: b0:0c:72:e6:66:9c:42:fa:4e:7b:12:22:46:62:17: 79:98:96:78:b9:e1:28:df:09:56:b7:04:a5:7c:a2: 12:9b:ec:1b:aa:da:61:cf:ef:93:7a:3d:f6:60:81: 37:dc:2c:51:89:81:ff:60:59:a3:00:b6:97:38:22: b4:af:97:d2:bc:4f:43:c5:b1:fb:21:e5:f8:d4:69: 68:a2:58:72:91:78:c1:87:d0:1a:16:81:e4:e7:03: 3d:ca:55:66:e2:44:09:16:ff:b1:41:00:d3:5a:24: 3f:05:45:87:80:4d:d6:33:4c:d9:8f:cf:ba:c6:79: 3f:b4:29:2a:d7:2c:c8:1d:d8:8b:03:45:99:14:5e: 5e:99:e3:d8:26:92:8e:6f:18:9d:c5:a4:b6:1e:b4: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:20:71:E4:3C:F8:C6:8B:7B:B6:9A:59:5F:5E:A4:BC:72:81:A0 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c4:8a:7d:33:d9:ee:46:9f:98:35:ff:03:50:77:2a:cf:04: 8b:fa:12:98:a5:d2:0d:6a:63:3f:54:43:a0:1b:d2:2e:08:d8: 27:6d:7f:4b:6c:fb:ac:c8:13:39:1f:5c:09:ab:d3:a7:e5:79: 6d:ae:a8:db:eb:d9:ad:0b:ad:79:3f:98:e0:1b:f6:7d:96:db: 0d:c4:06:92:d1:ec:f1:c3:ea:d7:b5:1f:c7:12:70:f2:9d:57: 97:25:f7:42:a8:41:bb:f6:d5:ef:3c:5d:05:81:0c:6d:90:92: a1:52:4a:10:fc:40:d4:26:7b:ae:6f:29:88:ad:7a:d6:48:42: 76:59:53:b3:ae:60:52:3a:f3:a5:e0:3a:4f:ad:2a:2d:22:5b: a4:df:1f:46:c3:60:98:22:b8:af:c1:19:ed:59:b5:10:40:72: 2b:83:12:98:f8:39:a5:85:b2:ae:68:a6:d1:f5:7e:95:e7:f2: 6c:00:f4:7f:00:8e:0d:44:09:3b:8b:1d:10:fd:b5:2f:51:e0: 12:cc:b9:0e:7d:ad:19:76:25:c5:72:6b:52:dd:c3:83:a2:12: a3:c7:71:09:97:7c:35:ff:e0:85:3d:d8:98:93:e4:d7:37:e0: 6d:36:5a:67:88:d7:dd:81:74:d1:c4:5c:5a:a3:0a:4f:1d:63: c5:b5:97:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjQwNDMwMTU1NzI3WhcNMjQwNTA3MTU1NzI3WjAYMRYwFAYD VQQDEw02NjMxMTRlNy0xMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTnHE/7MS6ivkB2Bdg7NaGhXJsb+pCeJ9QasdKTcZYDOVzWoeRB+6c0ErEIl yNAnMLpyo2UvJ80QABHkx13nECdda158lVIc00qBE6O4KKAQyshoOHIrU8TAoaHL ADTo7MucEslCaauwDHLmZpxC+k57EiJGYhd5mJZ4ueEo3wlWtwSlfKISm+wbqtph z++Tej32YIE33CxRiYH/YFmjALaXOCK0r5fSvE9DxbH7IeX41GloolhykXjBh9Aa FoHk5wM9ylVm4kQJFv+xQQDTWiQ/BUWHgE3WM0zZj8+6xnk/tCkq1yzIHdiLA0WZ FF5emePYJpKObxidxaS2HrRZ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLytIHHk PPjGi3u2mllfXqS8coGgMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKxIp9M9nuRp+YNf8DUHcqzwSL+hKYpdINamM/VEOgG9IuCNgnbX9L bPusyBM5H1wJq9On5Xltrqjb69mtC615P5jgG/Z9ltsNxAaS0ezxw+rXtR/HEnDy nVeXJfdCqEG79tXvPF0FgQxtkJKhUkoQ/EDUJnuubymIrXrWSEJ2WVOzrmBSOvOl 4DpPrSotIluk3x9Gw2CYIrivwRntWbUQQHIrgxKY+DmlhbKuaKbR9X6V5/JsAPR/ AI4NRAk7ix0Q/bUvUeASzLkOfa0ZdiXFcmtS3cODohKjx3EJl3w1/+CFPdiYk+TX N+BtNlpniNfdgXTRxFxaowpPHWPFtZda -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:30 2024 by rpki-client on console-ams.rpki-client.org