$ rpki-client -vvf rpki.apnic.net/member_repository/A9190AC7/7B65D5849E7A11EBA22FFD37C4F9AE02/VluAbn1qaFg1CD0nZYorvYeEinc.mft File: VluAbn1qaFg1CD0nZYorvYeEinc.mft (raw, json) Hash identifier: SXR2C3QIBtpkkoVxAyStuz+ET/uCvUGeY/k5OrNQCpc= Subject key identifier: 50:C0:84:80:E1:BA:88:8B:8A:D5:43:84:02:6E:DA:3F:48:65:DE:93 Authority key identifier: 56:5B:80:6E:7D:6A:68:58:35:08:3D:27:65:8A:2B:BD:87:84:8A:77 Certificate issuer: /CN=A9190AC7/serialNumber=565B806E7D6A685835083D27658A2BBD87848A77 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VluAbn1qaFg1CD0nZYorvYeEinc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190AC7/7B65D5849E7A11EBA22FFD37C4F9AE02/VluAbn1qaFg1CD0nZYorvYeEinc.mft Manifest number: 0558 Signing time: Wed 01 May 2024 01:10:45 +0000 Manifest this update: Wed 01 May 2024 01:10:45 +0000 Manifest next update: Wed 08 May 2024 01:10:45 +0000 Files and hashes: 1: VluAbn1qaFg1CD0nZYorvYeEinc.crl (hash: pA8X+FiRoIc1RJgB5NnrWFrYtHW10ysH2O9zucHkzKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190AC7/7B65D5849E7A11EBA22FFD37C4F9AE02/VluAbn1qaFg1CD0nZYorvYeEinc.crl rsync://rpki.apnic.net/member_repository/A9190AC7/7B65D5849E7A11EBA22FFD37C4F9AE02/VluAbn1qaFg1CD0nZYorvYeEinc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VluAbn1qaFg1CD0nZYorvYeEinc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190AC7/serialNumber=565B806E7D6A685835083D27658A2BBD87848A77 Validity Not Before: May 1 01:10:45 2024 GMT Not After : May 8 01:10:45 2024 GMT Subject: CN=66319695-9d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:8c:e8:06:be:a8:57:13:84:31:32:03:98: 8a:04:b2:0a:78:6a:c0:80:4b:7f:e3:e6:79:28:b9: 64:e2:8a:e4:74:a6:90:79:cc:40:ad:ee:6e:1e:87: c1:9b:25:1d:91:7d:f5:91:1f:42:56:51:0e:ed:bb: 2d:ec:0d:a1:e0:33:58:de:7e:e5:82:0d:8c:fe:82: 04:d3:18:d2:1b:64:83:12:2c:f5:72:3c:23:b1:57: e7:42:5c:6b:2c:9d:75:26:c4:8f:98:40:61:56:fb: e0:af:46:c0:29:e0:56:58:ae:c9:31:e4:92:ed:ff: fb:0c:7a:d3:7b:8f:c4:83:03:15:0a:62:35:1c:7f: 02:60:11:04:f1:10:f2:f1:40:20:51:2d:d4:ed:0b: 0f:2e:ec:1d:7a:e2:53:14:bf:73:a5:3d:a0:ef:7b: 11:83:87:ab:a7:06:58:c7:c1:4e:e9:1b:52:c3:e4: d5:41:41:34:16:48:6b:e7:d6:bf:d0:d9:52:9a:82: 5f:28:88:46:a5:70:74:a0:13:7a:42:51:d7:65:7c: 8d:88:b5:b4:1b:94:69:aa:8a:5b:44:4f:63:5e:8c: 2e:d5:51:2c:74:36:14:d8:1d:11:91:89:33:04:a2: 3c:a4:42:13:f1:6b:e1:7b:69:b6:c0:c9:cf:48:fd: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:84:80:E1:BA:88:8B:8A:D5:43:84:02:6E:DA:3F:48:65:DE:93 X509v3 Authority Key Identifier: keyid:56:5B:80:6E:7D:6A:68:58:35:08:3D:27:65:8A:2B:BD:87:84:8A:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190AC7/7B65D5849E7A11EBA22FFD37C4F9AE02/VluAbn1qaFg1CD0nZYorvYeEinc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VluAbn1qaFg1CD0nZYorvYeEinc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190AC7/7B65D5849E7A11EBA22FFD37C4F9AE02/VluAbn1qaFg1CD0nZYorvYeEinc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:82:30:b8:8b:4a:a1:b0:2f:08:02:d6:b8:03:36:d3:0b:84: 00:66:95:59:be:3f:d6:88:9c:b3:67:8c:95:1d:fc:51:46:ca: 0c:da:68:43:1b:03:a4:5f:96:af:f0:11:f0:36:9d:28:8f:3e: 5c:9c:f8:e9:22:9d:94:ea:e0:6e:49:81:89:2b:5d:3c:35:c3: dd:5a:3e:48:94:ef:7d:f0:67:1e:44:f8:a1:3c:0f:1f:97:d4: 55:f4:40:b6:29:e0:83:31:b1:54:fe:71:f8:e4:4b:f3:26:d7: a1:66:7b:a2:36:7e:4a:39:58:7c:84:36:a6:5b:10:c7:6b:e0: af:f3:58:f0:d4:2d:7b:fb:96:59:54:3c:36:03:8d:11:37:bb: e7:a6:06:ff:73:a4:67:36:03:8f:63:9b:75:33:e6:8e:7a:f2: e5:fa:74:3d:87:02:04:a1:c2:6c:e2:d1:ed:c7:a3:24:bc:b0: 08:14:22:73:72:7f:72:cf:fe:b8:75:a6:7a:18:42:58:78:56: e2:a5:75:a7:15:1c:11:95:5c:cc:fe:15:74:6f:41:6a:99:56: d7:94:6d:a2:0d:b5:bf:80:67:b6:7c:53:fd:37:72:91:23:c2: 48:52:0e:18:e0:96:fa:05:17:25:b0:b9:83:d6:a2:ae:11:0b: bb:00:db:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBBQzcxMTAvBgNVBAUTKDU2NUI4MDZFN0Q2QTY4NTgzNTA4M0QyNzY1OEEyQkJE ODc4NDhBNzcwHhcNMjQwNTAxMDExMDQ1WhcNMjQwNTA4MDExMDQ1WjAYMRYwFAYD VQQDEw02NjMxOTY5NS05ZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2iM6Aa+qFcThDEyA5iKBLIKeGrAgEt/4+Z5KLlk4orkdKaQecxAre5uHofB myUdkX31kR9CVlEO7bst7A2h4DNY3n7lgg2M/oIE0xjSG2SDEiz1cjwjsVfnQlxr LJ11JsSPmEBhVvvgr0bAKeBWWK7JMeSS7f/7DHrTe4/EgwMVCmI1HH8CYBEE8RDy 8UAgUS3U7QsPLuwdeuJTFL9zpT2g73sRg4erpwZYx8FO6RtSw+TVQUE0Fkhr59a/ 0NlSmoJfKIhGpXB0oBN6QlHXZXyNiLW0G5RpqopbRE9jXowu1VEsdDYU2B0RkYkz BKI8pEIT8Wvhe2m2wMnPSP2UAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDAhIDh uoiLitVDhAJu2j9IZd6TMB8GA1UdIwQYMBaAFFZbgG59amhYNQg9J2WKK72HhIp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEFDNy83QjY1RDU4NDlF N0ExMUVCQTIyRkZEMzdDNEY5QUUwMi9WbHVBYm4xcWFGZzFDRDBuWllvcnZZZUVp bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZsdUFibjFxYUZnMUNEMG5aWW9ydlllRWluYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEFDNy83QjY1RDU4NDlFN0ExMUVCQTIyRkZEMzdDNEY5QUUwMi9WbHVBYm4xcWFG ZzFDRDBuWllvcnZZZUVpbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAogjC4i0qhsC8IAta4AzbTC4QAZpVZvj/WiJyzZ4yVHfxRRsoM2mhD GwOkX5av8BHwNp0ojz5cnPjpIp2U6uBuSYGJK108NcPdWj5IlO998GceRPihPA8f l9RV9EC2KeCDMbFU/nH45EvzJtehZnuiNn5KOVh8hDamWxDHa+Cv81jw1C17+5ZZ VDw2A40RN7vnpgb/c6RnNgOPY5t1M+aOevLl+nQ9hwIEocJs4tHtx6MkvLAIFCJz cn9yz/64daZ6GEJYeFbipXWnFRwRlVzM/hV0b0FqmVbXlG2iDbW/gGe2fFP9N3KR I8JIUg4Y4Jb6BRclsLmD1qKuEQu7ANs/ -----END CERTIFICATE-----Generated at Wed May 1 02:46:20 2024 by rpki-client on console-ams.rpki-client.org