$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: g2zxTbUlNNh6Syyd6qTKg7rRNgLiUrLjNc9cFyrKCXU= Subject key identifier: 74:F7:01:B8:28:5F:3B:C8:92:A1:A1:2E:95:F0:53:D8:24:A2:C3:97 Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 12 Signing time: Fri 17 May 2024 08:56:00 +0000 Manifest this update: Fri 17 May 2024 08:55:59 +0000 Manifest next update: Fri 24 May 2024 08:55:59 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: yrJLrC0j6X9355UigKyUKoqQm+13N/l3Jbs+sHoQLyE=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: S/qqaWINFZ4wDr+IpQ0U8AbkYGkGUpN2p85NrVAp8qE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: May 17 08:55:59 2024 GMT Not After : May 24 08:55:59 2024 GMT Subject: CN=66471b9f-c880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:a1:4f:a8:3c:bb:8c:58:fb:df:1b:dd:30: 5b:93:60:38:5b:a3:02:47:ac:bc:ac:2f:d3:c2:70: 38:45:03:4e:fb:43:21:e6:f6:32:89:10:8e:37:7e: 46:d8:be:78:a5:f2:fa:19:0c:24:03:f9:65:04:96: 62:57:99:84:4d:23:f5:35:87:f3:78:28:18:20:71: c5:cd:b0:e4:31:ce:02:53:54:49:6d:12:53:8f:6e: 13:0a:17:61:bd:a6:e6:e1:67:ff:35:45:df:2b:b5: d9:68:d1:0a:ce:29:13:de:05:01:36:a4:af:dd:a7: 3e:bf:c0:56:db:b6:ab:2e:25:41:20:80:df:75:c5: 22:4a:66:c1:e9:3c:7b:db:ef:83:0b:90:0f:9a:dd: a1:6e:48:93:97:a4:cb:1f:d6:93:bc:10:3f:61:10: b8:b7:57:1d:f4:75:e6:8a:a2:5f:74:db:9a:b4:03: d2:23:72:45:38:df:a4:9c:59:79:0f:ed:1e:51:c5: b2:f8:42:f6:73:79:bb:ef:69:b6:6e:04:95:49:03: 13:58:30:f6:c3:57:13:d9:ef:06:4e:0f:03:82:04: f0:f0:6c:0f:22:23:13:01:46:7d:49:de:5f:af:d5: 85:43:bb:25:b7:ea:02:c5:85:1e:f1:8d:82:aa:38: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:01:B8:28:5F:3B:C8:92:A1:A1:2E:95:F0:53:D8:24:A2:C3:97 X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4d:78:6f:86:8c:e0:37:97:16:d0:27:c1:0f:af:00:b7:f4: 9d:30:b1:89:ab:02:13:77:97:67:4e:1a:93:87:64:fe:56:f9: 6b:50:49:fa:dd:bc:db:b6:df:0e:87:02:88:e5:86:f7:f3:71: c6:a6:da:26:c9:c3:24:e7:51:f6:58:73:d5:c3:9b:60:19:12: 32:85:14:c0:fe:6d:fd:5a:6e:6e:c4:52:27:2a:00:02:5a:c8: d9:52:d9:33:79:a6:39:20:b0:e1:80:70:5b:4c:6a:88:1c:93: 62:e1:76:3d:e0:61:47:67:39:56:fd:67:77:28:53:39:e8:d6: 7b:8e:2d:5a:b2:3c:48:52:41:4a:d2:b8:a1:ff:b9:02:2b:be: 76:f3:42:fe:94:12:ef:d8:c7:64:8a:10:3f:5b:a3:97:22:ef: ac:3d:bc:37:25:24:00:73:87:15:da:68:e0:cc:18:80:2a:a2: cf:e2:71:a1:c8:91:d6:ad:14:d8:4b:b1:d2:5f:4d:13:a7:46: e5:a1:bd:92:fa:1e:fc:94:0b:6f:8b:2f:31:0c:5e:c6:49:42: 55:b1:90:01:d1:48:1e:b1:3d:13:55:20:7a:65:92:a3:36:2a: cb:19:97:9a:e1:97:e8:6f:e3:3f:f2:9a:2d:b4:44:e6:41:63: 40:c7:ed:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTQ2OTExMC8GA1UEBRMoQkVDMjgyNDg2RjM3RTMxNkYxN0I1MjBCNDU1Mjg3QkMz MDdGODlFODAeFw0yNDA1MTcwODU1NTlaFw0yNDA1MjQwODU1NTlaMBgxFjAUBgNV BAMTDTY2NDcxYjlmLWM4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpnKFPqDy7jFj73xvdMFuTYDhbowJHrLysL9PCcDhFA077QyHm9jKJEI43fkbY vnil8voZDCQD+WUElmJXmYRNI/U1h/N4KBggccXNsOQxzgJTVEltElOPbhMKF2G9 pubhZ/81Rd8rtdlo0QrOKRPeBQE2pK/dpz6/wFbbtqsuJUEggN91xSJKZsHpPHvb 74MLkA+a3aFuSJOXpMsf1pO8ED9hELi3Vx30deaKol9025q0A9IjckU436ScWXkP 7R5RxbL4QvZzebvvabZuBJVJAxNYMPbDVxPZ7wZODwOCBPDwbA8iIxMBRn1J3l+v 1YVDuyW36gLFhR7xjYKqOAKPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdPcBuChf O8iSoaEulfBT2CSiw5cwHwYDVR0jBBgwFoAUvsKCSG834xbxe1ILRVKHvDB/iegw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNDY5L0Y1ODQzOEZFRjdF MzExRUVCOUExMjkxQUM0RjlBRTAyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2ll Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnNLQ1NHODM0eGJ4ZTFJTFJWS0h2REJfaWVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NDY5L0Y1ODQzOEZFRjdFMzExRUVCOUExMjkxQUM0RjlBRTAyL3ZzS0NTRzgzNHhi eGUxSUxSVktIdkRCX2llZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItNeG+GjOA3lxbQJ8EPrwC39J0wsYmrAhN3l2dOGpOHZP5W+WtQSfrd vNu23w6HAojlhvfzccam2ibJwyTnUfZYc9XDm2AZEjKFFMD+bf1abm7EUicqAAJa yNlS2TN5pjkgsOGAcFtMaogck2Lhdj3gYUdnOVb9Z3coUzno1nuOLVqyPEhSQUrS uKH/uQIrvnbzQv6UEu/Yx2SKED9bo5ci76w9vDclJABzhxXaaODMGIAqos/icaHI kdatFNhLsdJfTROnRuWhvZL6HvyUC2+LLzEMXsZJQlWxkAHRSB6xPRNVIHplkqM2 KssZl5rhl+hv4z/ymi20ROZBY0DH7X0= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org