$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: weSPO6lcGgyuguLwvQCqOlTXjWSYKWIEF8nMH3QIDMg= Subject key identifier: 0D:C1:B9:1E:86:72:2F:32:93:97:F3:72:7B:29:7F:63:2B:14:BB:A2 Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 93 Signing time: Wed 15 May 2024 07:06:31 +0000 Manifest this update: Wed 15 May 2024 07:06:31 +0000 Manifest next update: Wed 22 May 2024 07:06:31 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: J0tUT5/zJ0qbL8kVjZpFwfFBiAanmSylFweFcgcF90g=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: TB0ahidYQ0xA6hV80HfI0pKz2Rs6lS2yc9sRvFWm5fM=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: rsCbbM2tRTk90LXW35QYw6yMV2rL7FbVaUSFW5YPqYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: May 15 07:06:31 2024 GMT Not After : May 22 07:06:31 2024 GMT Subject: CN=66445ef7-1423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:22:05:fe:3c:bf:8a:f4:e6:ca:4a:bb:70: 53:1d:ac:91:a5:f8:4e:70:36:7f:05:30:a3:09:b0: 76:74:6e:9a:4a:fd:e1:78:ad:95:e3:fe:d3:9c:ea: 4b:fe:ed:30:fc:4a:b1:46:79:fc:81:28:ee:2e:bc: 93:f7:c9:87:07:45:3a:4c:7f:63:df:5b:f2:02:ef: 6f:64:ce:ee:f9:2e:4e:10:c1:f8:fe:e1:2d:e2:83: 3a:6f:8e:95:2c:5d:fd:09:89:77:95:dc:06:47:03: 66:55:c5:88:a7:01:1f:fe:9e:68:b3:f4:3d:4e:4d: c6:e6:76:87:5e:27:47:69:62:cc:7c:2d:b5:ad:1f: 9d:f6:93:92:1f:1f:a5:6b:4a:a5:be:fd:2b:f6:aa: fc:2a:43:d3:7a:60:64:ae:b1:a0:67:09:b7:50:bf: 94:63:9c:a5:a3:1f:9a:07:06:11:72:2b:8e:49:8a: 15:80:08:48:18:d7:c4:fd:17:95:7d:a5:46:eb:65: fe:f1:0f:a1:1a:e4:b3:d4:51:74:aa:b2:48:3b:4f: 33:81:9b:2e:52:3a:8d:64:56:4d:dc:d1:85:37:55: aa:02:e9:c6:b2:3f:65:5b:5d:79:9f:66:c5:bd:b3: d5:ee:c0:b8:f0:91:f0:e7:5b:02:da:cc:52:c2:c2: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C1:B9:1E:86:72:2F:32:93:97:F3:72:7B:29:7F:63:2B:14:BB:A2 X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:37:48:d4:42:2f:f8:60:98:d5:46:ea:22:0c:33:fd:7d:6e: 16:ac:22:a2:1d:aa:20:37:43:98:e1:3a:4c:bc:a3:c3:26:f5: 72:33:2d:16:ed:ec:e4:1c:59:c4:c9:ee:93:3e:a7:85:21:ab: a8:b5:99:9e:15:ea:c3:f5:2e:e6:f1:a9:0f:49:e5:9e:f3:0a: b6:54:94:08:c5:c5:c8:46:39:50:cd:9f:62:7b:c3:aa:77:85: 40:6d:b9:49:40:08:87:72:82:f1:c4:98:66:13:21:b3:83:16: 2f:19:3b:1e:9a:27:52:1a:90:d2:a6:d0:f2:17:cb:b3:ec:fb: ff:81:38:ca:7a:8c:1d:69:5b:ce:ee:f9:ab:cc:09:f6:f8:0c: 04:68:27:13:bd:cb:a6:ae:31:fe:4e:38:3f:07:a6:1f:e8:8c: ba:a4:29:36:a4:b5:d5:c3:b0:2b:34:d7:ab:fb:58:ca:e5:ce: ce:2b:a2:31:21:27:f2:84:76:ef:ca:3b:a0:eb:bd:01:f4:cc: d4:35:85:ac:5f:25:14:95:2c:3e:03:a0:30:80:1e:9e:e2:6b: 96:57:9c:fa:20:1d:0d:78:49:04:d1:b1:36:ab:0b:c2:fa:48: 09:c4:62:f2:2b:06:43:77:f1:cb:c9:e5:43:6b:28:b4:41:72: 3e:64:a2:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjQwNTE1MDcwNjMxWhcNMjQwNTIyMDcwNjMxWjAYMRYwFAYD VQQDEw02NjQ0NWVmNy0xNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9AiBf48v4r05spKu3BTHayRpfhOcDZ/BTCjCbB2dG6aSv3heK2V4/7TnOpL /u0w/EqxRnn8gSjuLryT98mHB0U6TH9j31vyAu9vZM7u+S5OEMH4/uEt4oM6b46V LF39CYl3ldwGRwNmVcWIpwEf/p5os/Q9Tk3G5naHXidHaWLMfC21rR+d9pOSHx+l a0qlvv0r9qr8KkPTemBkrrGgZwm3UL+UY5ylox+aBwYRciuOSYoVgAhIGNfE/ReV faVG62X+8Q+hGuSz1FF0qrJIO08zgZsuUjqNZFZN3NGFN1WqAunGsj9lW115n2bF vbPV7sC48JHw51sC2sxSwsKv9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3BuR6G ci8yk5fzcnspf2MrFLuiMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfN0jUQi/4YJjVRuoiDDP9fW4WrCKiHaogN0OY4TpMvKPDJvVyMy0W 7ezkHFnEye6TPqeFIauotZmeFerD9S7m8akPSeWe8wq2VJQIxcXIRjlQzZ9ie8Oq d4VAbblJQAiHcoLxxJhmEyGzgxYvGTsemidSGpDSptDyF8uz7Pv/gTjKeowdaVvO 7vmrzAn2+AwEaCcTvcumrjH+Tjg/B6Yf6Iy6pCk2pLXVw7ArNNer+1jK5c7OK6Ix ISfyhHbvyjug670B9MzUNYWsXyUUlSw+A6AwgB6e4muWV5z6IB0NeEkE0bE2qwvC +kgJxGLyKwZDd/HLyeVDayi0QXI+ZKIf -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org