$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: H2lLmWs0H60Px02G5iD6+1afw/hfbMDyuRRGY7xokFk= Subject key identifier: 86:51:F6:7A:CA:1E:83:EF:AE:D9:3F:27:BE:81:FA:D3:DE:1C:60:51 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: C6 Signing time: Fri 03 May 2024 06:28:15 +0000 Manifest this update: Fri 03 May 2024 06:28:14 +0000 Manifest next update: Fri 10 May 2024 06:28:14 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: Q8kCQRHdaU4M+GORngI8W38pgj5kSCpenPdq83/z9rs=) 2: 766A344489DC11EEA5F50782C4F9AE02.roa (hash: xD1ahEkh70RjJXK8AbB8J4cy1u9l2qQBLxqu+mrLTEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: May 3 06:28:14 2024 GMT Not After : May 10 06:28:14 2024 GMT Subject: CN=663483fe-76e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:a6:22:c4:a9:60:f8:f0:38:22:70:5d:59: d5:eb:b4:26:09:54:05:32:a2:07:f8:cd:40:ab:b9: be:a6:f9:39:ee:31:d3:c7:d2:29:23:0d:c0:d2:92: f5:2a:72:4b:98:67:94:f0:9c:89:fe:bb:cd:4f:e6: eb:e6:12:20:fe:49:c0:69:d2:2b:8e:dd:c7:33:1b: 4d:06:df:7d:08:6f:64:78:54:05:f9:9a:c0:a4:5c: 88:b2:14:69:c5:ba:aa:de:a6:7a:05:c0:2c:34:1c: 6e:89:f3:cb:f5:24:b2:50:7a:13:d6:35:c5:10:f3: 92:20:11:b5:39:81:df:09:47:86:db:41:47:fa:6e: ab:8a:af:1c:7a:a6:cb:1e:3a:e8:ad:e5:18:3a:e5: c8:2a:8f:60:6f:92:9f:6a:1c:0d:5b:82:6a:5a:79: 33:fc:1a:7b:a1:58:b6:80:a5:39:42:33:c0:13:cc: 0f:d7:a6:c8:7e:31:ee:1f:2c:27:75:51:80:d4:ab: b0:9f:a1:d4:67:5b:33:80:dc:d7:38:75:5c:42:ba: 21:98:de:aa:c0:b5:83:cf:f5:7c:dd:43:b0:01:e4: 88:24:06:4a:a5:02:d8:6c:77:58:2d:13:4d:ad:47: 12:8f:6a:ef:e6:7c:5b:05:45:e6:36:c3:28:17:11: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:51:F6:7A:CA:1E:83:EF:AE:D9:3F:27:BE:81:FA:D3:DE:1C:60:51 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:73:5a:25:f1:01:80:72:8c:9f:10:7c:58:a6:a7:19:c2:15: a5:ec:e1:82:49:71:93:59:b2:1d:5c:c5:5b:e0:89:6e:2a:5e: df:3f:38:9f:ad:c1:33:f1:fb:e7:5d:9b:20:b6:e3:ff:a4:de: 12:b4:66:a3:60:a7:ce:d3:d7:9d:9e:ad:af:59:2a:ab:07:06: a9:28:24:f1:47:e9:8a:46:d5:02:71:04:40:ed:91:0a:60:81: 6f:b1:c9:a8:f3:f9:37:98:13:39:a7:95:ff:fa:07:bb:95:82: 37:e9:18:c2:43:e8:43:42:ff:27:92:cf:78:35:48:34:52:f0: eb:89:69:a2:55:cf:4c:56:64:68:82:cc:cd:4c:47:df:f5:7d: 0d:e4:92:13:d9:c6:a7:38:fb:2e:9c:41:7e:b1:c9:a6:96:8e: de:af:8d:a9:7d:96:f4:96:ad:59:1a:e5:e0:3d:c9:17:fd:4f: 13:6e:3d:73:3f:85:40:cd:57:44:09:56:2f:9b:4f:15:92:37: 4b:e7:45:b3:33:89:05:e9:7a:99:ca:e0:2b:2e:4f:a4:f3:af: b7:ee:b2:6e:10:c8:3e:bd:ec:b2:ba:fc:f6:d2:69:f0:9f:0d: 8e:44:5d:40:06:7c:be:e9:31:ed:c6:19:3a:2b:ab:23:91:47: ec:a2:1c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjQwNTAzMDYyODE0WhcNMjQwNTEwMDYyODE0WjAYMRYwFAYD VQQDEw02NjM0ODNmZS03NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRimIsSpYPjwOCJwXVnV67QmCVQFMqIH+M1Aq7m+pvk57jHTx9IpIw3A0pL1 KnJLmGeU8JyJ/rvNT+br5hIg/knAadIrjt3HMxtNBt99CG9keFQF+ZrApFyIshRp xbqq3qZ6BcAsNBxuifPL9SSyUHoT1jXFEPOSIBG1OYHfCUeG20FH+m6riq8ceqbL HjroreUYOuXIKo9gb5KfahwNW4JqWnkz/Bp7oVi2gKU5QjPAE8wP16bIfjHuHywn dVGA1Kuwn6HUZ1szgNzXOHVcQrohmN6qwLWDz/V83UOwAeSIJAZKpQLYbHdYLRNN rUcSj2rv5nxbBUXmNsMoFxHuxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZR9nrK HoPvrtk/J76B+tPeHGBRMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEc1ol8QGAcoyfEHxYpqcZwhWl7OGCSXGTWbIdXMVb4IluKl7fPzif rcEz8fvnXZsgtuP/pN4StGajYKfO09ednq2vWSqrBwapKCTxR+mKRtUCcQRA7ZEK YIFvscmo8/k3mBM5p5X/+ge7lYI36RjCQ+hDQv8nks94NUg0UvDriWmiVc9MVmRo gszNTEff9X0N5JIT2canOPsunEF+scmmlo7er42pfZb0lq1ZGuXgPckX/U8Tbj1z P4VAzVdECVYvm08VkjdL50WzM4kF6XqZyuArLk+k86+37rJuEMg+veyyuvz20mnw nw2ORF1ABny+6THtxhk6K6sjkUfsohya -----END CERTIFICATE-----Generated at Fri May 3 08:21:09 2024 by rpki-client on console-ams.rpki-client.org