$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: Z3ZbFshFUFne0RpkSi2fIERsry+S8qP4thAmGgERhiY= Subject key identifier: 14:37:F1:D5:BF:3D:71:53:99:E1:CB:99:4D:43:D9:00:E3:DF:81:4A Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 0128 Signing time: Wed 01 May 2024 05:20:17 +0000 Manifest this update: Wed 01 May 2024 05:20:16 +0000 Manifest next update: Wed 08 May 2024 05:20:16 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: 1a7OxTC121IKI2vRUfsImGLqB7cQGCIuNHWEqR+lCsA=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: q88iDvfHyMdqbD5BXUq67Yr5e/Q1hxt8Ea09IqII9+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: May 1 05:20:16 2024 GMT Not After : May 8 05:20:16 2024 GMT Subject: CN=6631d111-d1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:01:50:a6:fd:9f:a8:90:87:da:f3:49:ff:b3: 61:bc:b3:9f:5b:52:39:01:50:fa:3a:cd:ee:cf:85: 3e:af:83:fd:09:28:65:9d:98:4d:af:eb:43:6d:e9: 50:e4:ff:17:2b:85:cc:25:9b:45:f2:3b:c0:3d:6f: bc:03:75:d4:25:d2:e0:94:d5:63:a3:d6:18:ba:c1: 80:15:4a:5a:cf:1d:f0:ae:05:96:f5:ff:07:69:aa: 1e:5e:00:f7:f7:c6:3d:d7:90:9d:e0:5a:b3:84:11: 68:fe:d0:26:3a:b7:76:4f:9a:bf:09:70:ed:c9:c4: 25:2d:f9:cc:54:9c:d5:e1:f7:af:fd:ef:ea:90:20: ae:4e:1a:20:8d:b6:77:bb:f3:cd:8a:5f:bb:15:0c: ff:75:67:bb:2b:0e:43:50:d7:24:27:ca:e8:49:6c: 61:19:38:22:5c:69:a8:07:4b:20:ab:f3:6f:c0:6b: dc:f0:03:4f:e8:a7:98:3d:5a:e7:60:dd:f2:52:8b: b4:2b:13:e0:91:e7:5c:86:af:6f:ba:2b:c3:e9:54: 4b:ea:a9:87:02:cc:41:71:1f:d8:6d:fd:26:f4:3a: 36:98:85:01:bb:9e:e4:5f:41:60:6c:89:06:d6:d4: 3b:12:c9:f8:38:81:95:7c:42:62:81:67:5a:48:f5: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:F1:D5:BF:3D:71:53:99:E1:CB:99:4D:43:D9:00:E3:DF:81:4A X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3b:34:a5:d0:3f:85:56:ad:d7:d6:39:e1:d8:dd:b9:56:19: c6:38:1d:d5:33:ff:1f:e4:ef:95:9c:81:5f:44:27:b4:6a:a7: d8:28:3f:6b:6f:f2:11:75:32:12:63:17:61:5c:62:37:86:2f: c1:b5:5a:dd:5e:98:99:31:c0:2f:3e:b9:1f:e9:0e:9e:e1:d6: a2:00:ef:29:01:e0:4f:93:e6:fe:3b:0c:49:34:90:94:5f:e0: 17:2d:18:39:1c:66:33:72:70:de:53:a4:6e:07:15:2e:49:bf: 97:11:1c:d8:64:8b:c2:dd:7a:bb:03:51:06:63:eb:ea:e9:fd: 18:73:4b:df:17:ea:d3:ba:23:63:57:a7:4f:9f:03:34:10:ed: c2:ee:36:85:e2:c1:0c:d7:8e:ad:12:12:4e:7f:b0:c1:b5:6f: f4:82:4c:f0:2b:1b:d0:ab:b5:78:65:25:b3:53:65:2d:c5:1a: f0:b0:a5:a5:fb:b4:ee:4c:7c:a1:59:ce:ee:13:e7:0c:3d:4f: be:95:c3:b9:e1:df:37:63:eb:10:06:c5:20:9d:be:6c:ab:37: 87:a2:57:37:a0:31:6d:94:8d:d9:81:e4:2f:8f:69:a8:7a:2f: db:fb:4f:35:a7:12:dd:33:3a:00:42:47:8c:f3:e9:3e:bb:07: c5:83:f9:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjQwNTAxMDUyMDE2WhcNMjQwNTA4MDUyMDE2WjAYMRYwFAYD VQQDEw02NjMxZDExMS1kMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AFQpv2fqJCH2vNJ/7NhvLOfW1I5AVD6Os3uz4U+r4P9CShlnZhNr+tDbelQ 5P8XK4XMJZtF8jvAPW+8A3XUJdLglNVjo9YYusGAFUpazx3wrgWW9f8HaaoeXgD3 98Y915Cd4FqzhBFo/tAmOrd2T5q/CXDtycQlLfnMVJzV4fev/e/qkCCuThogjbZ3 u/PNil+7FQz/dWe7Kw5DUNckJ8roSWxhGTgiXGmoB0sgq/NvwGvc8ANP6KeYPVrn YN3yUou0KxPgkedchq9vuivD6VRL6qmHAsxBcR/Ybf0m9Do2mIUBu57kX0FgbIkG 1tQ7Esn4OIGVfEJigWdaSPXptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ38dW/ PXFTmeHLmU1D2QDj34FKMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKOzSl0D+FVq3X1jnh2N25VhnGOB3VM/8f5O+VnIFfRCe0aqfYKD9r b/IRdTISYxdhXGI3hi/BtVrdXpiZMcAvPrkf6Q6e4daiAO8pAeBPk+b+OwxJNJCU X+AXLRg5HGYzcnDeU6RuBxUuSb+XERzYZIvC3Xq7A1EGY+vq6f0Yc0vfF+rTuiNj V6dPnwM0EO3C7jaF4sEM146tEhJOf7DBtW/0gkzwKxvQq7V4ZSWzU2UtxRrwsKWl +7TuTHyhWc7uE+cMPU++lcO54d83Y+sQBsUgnb5sqzeHolc3oDFtlI3ZgeQvj2mo ei/b+081pxLdMzoAQkeM8+k+uwfFg/my -----END CERTIFICATE-----Generated at Wed May 1 05:55:43 2024 by rpki-client on console-ams.rpki-client.org