$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: B3PZxSLF3FB36cF3rg71RXVdOkp+sZkKo6ZQVgbjLYE= Subject key identifier: 52:BF:02:F3:44:49:99:18:3D:53:FE:2B:BC:A0:17:1A:DF:C8:3F:C4 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 06A3 Signing time: Fri 26 Apr 2024 23:27:12 +0000 Manifest this update: Fri 26 Apr 2024 23:27:12 +0000 Manifest next update: Fri 03 May 2024 23:27:12 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: FhjoZMHA4Wjt4pW9hctZE4cesUHm+W17LF2AKst9XXs=) 2: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: AQgiwzW9jceFccX6zBisJvL/Ao6lPHGS3Rx++rG7HtY=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: j3Mdp3VdpFJP8qi33NyGvoVivwkHNNacPK2sV9tj6Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Apr 26 23:27:12 2024 GMT Not After : May 3 23:27:12 2024 GMT Subject: CN=662c3850-30bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:85:a2:2b:eb:41:e7:b6:65:e5:33:8d:3b: 43:e6:63:6d:97:4c:9c:64:c7:b9:21:e9:90:98:94: fc:26:81:34:55:b2:4f:b8:fe:e4:d7:1d:5c:d1:56: 4e:56:5b:41:10:68:b1:cf:2e:b4:f2:80:41:2b:bd: 92:fa:01:2e:92:cb:ff:d6:6e:e3:c9:1f:7f:a4:a3: 6f:0f:0d:a0:a4:83:e2:57:4c:16:b9:75:92:ed:43: 80:dd:79:5d:3f:39:62:f9:59:3d:72:b5:71:c9:f4: 90:cd:c6:dc:46:28:ff:f5:44:8f:a8:25:b3:e7:db: bb:3e:18:06:a3:f6:c6:28:71:1b:b4:42:82:4e:57: 57:4f:da:95:3f:75:5f:45:c1:1e:ff:86:09:23:91: 79:45:50:3c:f9:0e:8c:5f:d2:9e:69:db:2f:73:89: 74:20:da:9b:68:59:bc:0a:96:a4:17:20:5b:dd:0f: 7d:7f:85:5d:f3:59:91:be:44:81:4d:af:48:de:fb: e5:5f:32:52:f6:9a:a0:ee:c7:07:c7:71:80:b9:1e: bd:7c:6c:5c:37:9b:a3:16:dd:70:60:9e:8a:b8:9d: 9f:14:d7:3f:ef:9c:c5:d0:20:b4:7c:38:da:8b:9e: 02:9d:a3:ff:a1:03:42:24:e3:18:67:cb:80:57:81: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:02:F3:44:49:99:18:3D:53:FE:2B:BC:A0:17:1A:DF:C8:3F:C4 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:77:f7:ac:ee:0f:1b:62:40:93:b7:cb:6e:e7:9c:40:28:d8: a7:2d:94:cf:13:e0:0a:9a:b6:06:24:4a:33:38:e8:a7:7a:3e: 09:3c:3f:90:ec:12:ba:bc:22:2a:9e:51:e3:7f:3a:c6:1b:de: e5:ad:81:c9:a5:61:02:cb:69:2e:f0:96:96:f6:25:55:3d:67: a1:3c:0d:f2:b6:71:6a:5d:6b:93:a1:f1:c7:c3:45:3f:8d:d0: 43:8f:40:36:d4:93:b2:9e:77:cd:2a:0c:b1:89:31:11:4b:c1: 2b:d2:b5:71:db:37:f0:fa:a1:df:cc:25:42:bd:af:22:e1:4f: ea:fd:a7:c6:24:0f:24:81:fc:d6:78:3e:86:f6:8e:2d:50:08: 6d:b1:a2:70:a7:10:13:d0:4c:56:49:5d:21:05:88:25:72:41: e4:db:95:02:d2:8d:a3:e3:75:2f:2c:73:3e:fa:87:c0:a2:17: 41:f4:f1:10:0b:d9:f6:09:2b:86:13:a2:17:b2:c8:15:c2:e6: a8:86:8d:d1:27:7e:32:09:53:89:71:f9:54:91:22:6e:43:bc: b3:3f:ca:a8:f3:bf:49:ef:ce:01:a6:b7:5c:6d:f0:60:71:91: 6d:03:c1:22:ca:8e:5f:81:a4:d4:d2:7a:13:fc:ff:02:68:69: a9:d8:ce:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjQwNDI2MjMyNzEyWhcNMjQwNTAzMjMyNzEyWjAYMRYwFAYD VQQDEw02NjJjMzg1MC0zMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycGFoivrQee2ZeUzjTtD5mNtl0ycZMe5IemQmJT8JoE0VbJPuP7k1x1c0VZO VltBEGixzy608oBBK72S+gEuksv/1m7jyR9/pKNvDw2gpIPiV0wWuXWS7UOA3Xld Pzli+Vk9crVxyfSQzcbcRij/9USPqCWz59u7PhgGo/bGKHEbtEKCTldXT9qVP3Vf RcEe/4YJI5F5RVA8+Q6MX9Keadsvc4l0INqbaFm8CpakFyBb3Q99f4Vd81mRvkSB Ta9I3vvlXzJS9pqg7scHx3GAuR69fGxcN5ujFt1wYJ6KuJ2fFNc/75zF0CC0fDja i54CnaP/oQNCJOMYZ8uAV4EjQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK/AvNE SZkYPVP+K7ygFxrfyD/EMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXd/es7g8bYkCTt8tu55xAKNinLZTPE+AKmrYGJEozOOinej4JPD+Q 7BK6vCIqnlHjfzrGG97lrYHJpWECy2ku8JaW9iVVPWehPA3ytnFqXWuTofHHw0U/ jdBDj0A21JOynnfNKgyxiTERS8Er0rVx2zfw+qHfzCVCva8i4U/q/afGJA8kgfzW eD6G9o4tUAhtsaJwpxAT0ExWSV0hBYglckHk25UC0o2j43UvLHM++ofAohdB9PEQ C9n2CSuGE6IXssgVwuaoho3RJ34yCVOJcflUkSJuQ7yzP8qo879J784BprdcbfBg cZFtA8Eiyo5fgaTU0noT/P8CaGmp2M76 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:19 2024 by rpki-client on console-ams.rpki-client.org