$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft File: _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json) Hash identifier: 6rTuAmJ/5XxGob3Wav3Br3z/UOGLNTVwumY7TKzi0Mo= Subject key identifier: 50:52:D5:9E:F7:79:5E:AB:39:9A:D1:D0:1F:D5:71:74:0D:69:52:9F Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 Certificate issuer: /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft Manifest number: 05A6 Signing time: Tue 07 May 2024 00:18:17 +0000 Manifest this update: Tue 07 May 2024 00:18:16 +0000 Manifest next update: Tue 14 May 2024 00:18:16 +0000 Files and hashes: 1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: y7l8sS/cFDIIrhGg9DDV/IsVx2eO6wYg4l7/SJQGVkE=) 2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: XqG7svytmwCG4dRxsfTehopGd5ecJio414jpm8b973E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Validity Not Before: May 7 00:18:16 2024 GMT Not After : May 14 00:18:16 2024 GMT Subject: CN=66397348-f417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:2b:67:e1:8e:14:ba:38:15:cc:fa:96:71: 5c:5d:23:66:44:1f:32:ec:2c:06:cc:1a:5e:8d:10: 88:01:7d:46:9d:b7:0e:6a:87:5b:18:10:d0:63:0a: 48:dd:7f:5d:ae:f7:da:0d:bd:b6:38:cc:a1:8b:bb: 56:9d:9f:18:0e:08:ed:e3:d3:b4:2b:c7:23:d9:5d: 59:da:36:b6:bb:e6:66:4e:9c:c2:5e:de:fb:36:ee: 1b:a8:5b:75:a8:11:2c:21:84:6e:ed:73:69:46:b3: 09:63:66:f0:34:9c:8b:f3:3d:3a:03:2f:0f:20:37: ad:f5:cd:4f:bd:fb:aa:8c:7d:a9:43:e9:27:08:6b: 15:ca:bc:6a:d7:1b:f3:f9:1a:43:2b:19:da:f7:c6: 44:6c:35:93:99:c1:43:61:bc:ed:5b:20:c9:d1:e7: f2:90:9a:5c:1c:e7:29:a8:69:c8:7a:ce:ec:b8:be: e2:0c:ef:d6:90:ee:40:0a:7e:9c:2a:e9:57:13:38: cc:63:ca:28:fc:ae:d8:0a:de:87:68:7b:14:c9:90: 24:40:88:a0:ae:07:e1:90:a8:e9:f6:e0:1a:5d:c1: 53:fb:7b:a5:23:4e:ee:6a:fc:18:15:c7:e7:2f:10: 5d:47:ac:62:b5:af:c0:93:83:ed:83:df:bb:98:b4: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:52:D5:9E:F7:79:5E:AB:39:9A:D1:D0:1F:D5:71:74:0D:69:52:9F X509v3 Authority Key Identifier: keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ed:22:98:22:63:7e:04:ae:6f:c0:dd:fe:5a:e4:b0:82:f9: fa:c9:fa:6c:e9:80:af:1f:c3:2b:c1:5b:70:57:95:b4:1a:cc: 24:37:02:3b:4b:f1:14:f7:35:ed:a4:ee:1e:ae:39:d6:82:7a: 9e:3b:44:9f:b7:bc:db:d4:b8:5b:43:7d:75:f3:cb:62:4a:e1: 4d:04:28:cb:b5:a0:33:9a:6f:20:33:a6:ae:c9:c7:1c:2e:ce: c9:37:a1:bb:e8:3d:66:ac:7a:34:3d:68:76:b4:fb:ea:e4:42: a7:dd:a4:73:c5:46:54:9c:63:a3:cf:dd:3c:0b:ac:41:f3:2b: 20:8a:c1:36:76:12:6f:c1:52:e4:d6:39:c8:5c:aa:ad:f8:62: 28:52:4e:90:7f:84:23:46:fe:c7:38:2e:32:90:a9:76:69:51: 2c:6f:7c:a2:ce:57:b6:7c:b8:b2:9d:34:cc:ff:bc:5a:25:de: 29:bd:f0:af:8e:d5:e3:d4:d6:e3:38:cc:12:53:28:c0:e3:2d: e7:4c:4d:f2:a9:2e:d7:43:61:1d:b9:19:db:a9:72:3c:a5:57: 12:5d:90:c3:bd:8f:3d:2d:c3:dd:d6:2f:36:83:ea:a4:62:e6: 33:ee:d7:5d:79:1b:1f:b2:7f:d6:33:0c:67:72:dc:34:bd:76: 43:a0:ec:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMjcxMTAvBgNVBAUTKEZENUM3ODlCMUFENjhFMDg3NDNEODZDRUEwQzk5RkM3 ODc2QkRCOTMwHhcNMjQwNTA3MDAxODE2WhcNMjQwNTE0MDAxODE2WjAYMRYwFAYD VQQDEw02NjM5NzM0OC1mNDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLMrZ+GOFLo4Fcz6lnFcXSNmRB8y7CwGzBpejRCIAX1GnbcOaodbGBDQYwpI 3X9drvfaDb22OMyhi7tWnZ8YDgjt49O0K8cj2V1Z2ja2u+ZmTpzCXt77Nu4bqFt1 qBEsIYRu7XNpRrMJY2bwNJyL8z06Ay8PIDet9c1PvfuqjH2pQ+knCGsVyrxq1xvz +RpDKxna98ZEbDWTmcFDYbztWyDJ0efykJpcHOcpqGnIes7suL7iDO/WkO5ACn6c KulXEzjMY8oo/K7YCt6HaHsUyZAkQIigrgfhkKjp9uAaXcFT+3ulI07uavwYFcfn LxBdR6xita/Ak4Ptg9+7mLSIswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBS1Z73 eV6rOZrR0B/VcXQNaVKfMB8GA1UdIwQYMBaAFP1ceJsa1o4IdD2GzqDJn8eHa9uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIyNy85RTI0MjkxMDdD QjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pnaDBQWWJPb01tZng0ZHIy NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19WeDRteHJXamdoMFBZYk9vTW1meDRkcjI1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIyNy85RTI0MjkxMDdDQjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pn aDBQWWJPb01tZng0ZHIyNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS7SKYImN+BK5vwN3+WuSwgvn6yfps6YCvH8MrwVtwV5W0GswkNwI7 S/EU9zXtpO4erjnWgnqeO0Sft7zb1LhbQ31188tiSuFNBCjLtaAzmm8gM6auyccc Ls7JN6G76D1mrHo0PWh2tPvq5EKn3aRzxUZUnGOjz908C6xB8ysgisE2dhJvwVLk 1jnIXKqt+GIoUk6Qf4QjRv7HOC4ykKl2aVEsb3yizle2fLiynTTM/7xaJd4pvfCv jtXj1NbjOMwSUyjA4y3nTE3yqS7XQ2EduRnbqXI8pVcSXZDDvY89LcPd1i82g+qk YuYz7tddeRsfsn/WMwxnctw0vXZDoOzJ -----END CERTIFICATE-----Generated at Tue May 7 01:58:24 2024 by rpki-client on console-fra.rpki-client.org