$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: crArzvkXfph9g95yuSmiAeOQhQRO+01Tg9rPRZ0xZ1M= Subject key identifier: 13:33:D8:6A:8A:4C:F7:66:70:FA:C8:2E:1E:B2:5B:FA:85:3F:66:72 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0F81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 0F4E Signing time: Thu 02 May 2024 18:36:57 +0000 Manifest this update: Thu 02 May 2024 18:36:56 +0000 Manifest next update: Thu 09 May 2024 18:36:56 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: 5HO8he3Mctv+HFoxSTz2K12zhQ1lpvQGvQEy01w/WuY=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: g84xEJ5ykZMjzZgZWIb8W4X/zoO3Um4FhYPpDKCVB8E=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: 3yyD1jgucgucm90eBkzwGN8pA1GaVvywFk7br5+2pIo=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4=) 6: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: +BIl0WRLfLsKpfnz3iZ4Rc3b06FaqG+le22fYJBc22s=) 7: 6007188446B111E98B793856C4F9AE02.roa (hash: mPz8p2CrH2JmH3Sb725igNrTRG19saMQGzxs8VfAHPE=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: l97Qx+I5/FSi2nPuMo4C+TzlRFSgb0mZdEVP8fFlEzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3969 (0xf81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 18:36:56 2024 GMT Not After : May 9 18:36:56 2024 GMT Subject: CN=6633dd48-29a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:7c:22:4e:37:08:9b:de:d3:94:0c:f1:8a: ec:db:4e:36:78:85:ee:e1:76:fd:92:ca:02:69:8c: 5b:e0:6a:03:37:54:e1:c6:33:aa:2b:29:27:24:28: 53:38:7b:53:91:b8:62:26:00:ae:5a:39:ce:08:a8: 8d:9b:32:b5:a8:2f:ea:c1:59:db:64:08:77:e5:91: b7:7b:ec:f3:87:fb:3f:04:fe:b9:59:06:7f:1f:e9: aa:ce:a3:8b:f1:e8:c9:43:39:d5:3e:34:71:16:70: 6b:c3:82:43:c0:3f:1f:5d:6f:dc:54:7a:da:7f:51: 90:ba:ab:65:e8:29:69:e0:a8:4c:dc:e4:4d:3d:79: f5:52:75:0e:ce:07:17:16:9a:78:6f:d9:87:d2:01: fc:07:41:f8:01:4a:8f:69:02:68:45:38:30:59:83: b0:5d:45:4f:d6:70:01:3a:71:f2:77:83:2b:f7:ae: 87:bb:3c:c0:6a:c3:d9:13:39:b3:12:cb:4a:23:38: 19:10:41:82:ee:73:83:d1:ab:61:84:11:80:41:d4: 94:8a:7f:44:47:2c:bd:d2:38:90:4b:a4:8f:4f:4c: 87:61:cf:e8:72:81:37:2c:ec:13:8a:ae:fa:f4:c7: c9:19:2c:f9:0a:ff:86:6a:c8:a9:2f:d6:99:6c:94: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:33:D8:6A:8A:4C:F7:66:70:FA:C8:2E:1E:B2:5B:FA:85:3F:66:72 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1f:cf:a4:53:84:cc:25:4a:62:77:bd:b0:dd:94:12:ff:6f: 4e:a1:7c:3a:e0:79:67:38:5d:6a:58:34:6e:55:fa:f4:d7:f0: 9b:4b:a5:80:97:20:0b:ad:28:0b:0b:99:8c:c2:9b:64:17:03: f3:5e:f3:a5:fc:d9:8a:1e:5c:76:04:41:70:bd:ff:41:f8:ff: 2e:d3:af:71:c1:6c:fa:3f:38:1e:6f:32:98:1e:fd:a4:ed:39: 36:18:f3:c3:9e:47:2f:b8:49:8b:1d:70:d2:5b:4d:9f:69:ef: 0f:bb:61:bd:95:28:58:1e:5b:82:ed:b3:51:97:9b:44:82:b1: 3f:97:97:a5:9a:00:01:2b:1c:8d:f9:a8:ea:b0:9c:5f:7b:76: 18:70:d7:d0:23:b1:e6:4d:a6:7b:e7:c9:b6:34:66:08:f0:f5: 24:71:9d:5f:14:13:e6:b4:9e:1a:53:55:d1:63:51:3e:32:97: 03:22:25:fa:7a:58:b8:4f:50:05:fa:f1:bf:1b:c0:66:88:44: 30:f7:a8:a0:af:0e:a2:d6:98:5a:ea:bb:fa:48:77:02:fc:dd: 43:c2:f5:9b:26:97:af:a2:f3:b3:fe:bf:f1:09:e8:62:7b:24: a4:c7:1e:81:7c:3b:b2:17:b8:5e:52:31:b0:ab:4c:4a:07:75: 4c:86:80:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQwNTAyMTgzNjU2WhcNMjQwNTA5MTgzNjU2WjAYMRYwFAYD VQQDEw02NjMzZGQ0OC0yOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDB8Ik43CJve05QM8Yrs2042eIXu4Xb9ksoCaYxb4GoDN1ThxjOqKyknJChT OHtTkbhiJgCuWjnOCKiNmzK1qC/qwVnbZAh35ZG3e+zzh/s/BP65WQZ/H+mqzqOL 8ejJQznVPjRxFnBrw4JDwD8fXW/cVHraf1GQuqtl6Clp4KhM3ORNPXn1UnUOzgcX Fpp4b9mH0gH8B0H4AUqPaQJoRTgwWYOwXUVP1nABOnHyd4Mr966HuzzAasPZEzmz EstKIzgZEEGC7nOD0athhBGAQdSUin9ERyy90jiQS6SPT0yHYc/ocoE3LOwTiq76 9MfJGSz5Cv+GasipL9aZbJQqdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMz2GqK TPdmcPrILh6yW/qFP2ZyMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBH8+kU4TMJUpid72w3ZQS/29OoXw64HlnOF1qWDRuVfr01/CbS6WA lyALrSgLC5mMwptkFwPzXvOl/NmKHlx2BEFwvf9B+P8u069xwWz6PzgebzKYHv2k 7Tk2GPPDnkcvuEmLHXDSW02fae8Pu2G9lShYHluC7bNRl5tEgrE/l5elmgABKxyN +ajqsJxfe3YYcNfQI7HmTaZ758m2NGYI8PUkcZ1fFBPmtJ4aU1XRY1E+MpcDIiX6 eli4T1AF+vG/G8BmiEQw96igrw6i1pha6rv6SHcC/N1DwvWbJpevovOz/r/xCehi eySkxx6BfDuyF7heUjGwq0xKB3VMhoBH -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org