$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: rza4NP/QSGBvsHdPcDiciplFafWWh9DADQvJ7Eq/+aU= Subject key identifier: 0C:D3:86:E2:0B:7C:75:06:E4:A7:61:86:B6:6F:DE:53:FE:00:35:A5 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 1276 Signing time: Thu 02 May 2024 19:33:38 +0000 Manifest this update: Thu 02 May 2024 19:33:38 +0000 Manifest next update: Thu 09 May 2024 19:33:38 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: gTnC4uQlrcgKms2u+Ys/LNdK5Q+DuWxiR36eSY4s0Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2928 (0xb70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: May 2 19:33:38 2024 GMT Not After : May 9 19:33:38 2024 GMT Subject: CN=6633ea92-5fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:ac:f3:d3:57:8d:5d:84:55:43:b7:19:98: f5:7c:ca:8a:98:10:a3:1a:03:82:09:3d:14:51:16: d8:22:1a:6e:65:23:17:68:b9:17:f6:2d:b3:dd:77: 17:c5:0f:5e:dc:c0:0b:5c:e1:c2:68:d6:d6:9a:bd: 63:6c:56:d9:76:1a:c9:b1:11:f9:c1:87:97:1f:9f: 6c:25:22:38:d9:12:53:86:38:3a:e9:f5:99:ca:4d: 70:d0:bf:8a:e2:34:f6:96:47:c9:43:74:59:2b:06: 27:25:ec:59:16:c4:c7:45:a6:f3:e9:af:cb:b3:96: 8b:0d:0e:c4:72:ed:a8:d7:a0:d9:4b:53:38:14:3e: 69:9f:92:d4:52:62:c5:92:7e:89:06:8a:79:94:db: 25:01:b0:c9:18:f9:84:cd:4b:c5:01:52:f4:e4:54: 33:f5:69:c3:43:65:e9:29:7e:a3:b6:09:75:31:ab: 60:87:46:c6:2a:1c:f4:dd:16:39:57:c0:6c:a6:25: 30:5d:7e:e3:34:14:7a:34:5f:87:f2:89:9c:13:c3: 50:2f:63:55:ca:34:1e:ac:4b:c0:e8:88:03:f7:e8: e5:4e:f9:70:62:7e:3b:80:bb:20:5d:d8:d4:e6:6f: 8c:7d:2a:42:a7:80:76:6d:f5:64:d8:69:9e:2a:1f: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D3:86:E2:0B:7C:75:06:E4:A7:61:86:B6:6F:DE:53:FE:00:35:A5 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:67:b1:b2:76:b3:39:c6:1f:fc:f7:90:d2:a8:36:d4:be:e1: da:9e:6c:f2:f4:1f:a1:a7:bc:3c:e3:1e:38:07:65:4b:ba:f5: af:da:65:8d:d1:c7:99:36:ff:d8:a6:79:78:d3:34:86:b0:e0: 30:ea:e6:31:60:9f:cf:ff:fc:32:d9:65:c7:5f:66:80:f1:a3: fb:22:61:dc:fb:7b:73:03:ad:35:24:79:c1:1a:4f:5a:c4:92: 40:01:78:51:9f:0b:08:81:79:46:67:76:0d:4f:a4:f5:ef:f2: 42:bf:b0:03:32:42:6b:72:08:69:a0:30:e1:91:f8:ae:1a:2e: 62:94:71:9e:3e:8a:13:f8:06:83:65:60:76:d3:01:a1:bf:41: 9d:8a:0f:15:d2:67:90:d5:31:37:08:fa:18:2b:69:46:5b:4a: 16:90:22:4d:a5:14:d0:f1:92:b0:0a:0c:07:9c:4a:dd:f8:6c: 50:92:dc:ce:f1:bb:13:ee:54:a5:64:b8:bc:b0:cb:fe:61:ad: ac:a1:2e:dc:3b:1e:52:67:2a:83:62:f6:6b:80:2c:cb:7b:0b: 24:7b:56:70:10:2c:c9:01:2e:15:a5:d6:fe:13:99:48:9c:df: a7:04:04:57:fa:19:99:43:bb:a6:1c:34:68:4b:88:d8:fd:72: ff:32:d8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjQwNTAyMTkzMzM4WhcNMjQwNTA5MTkzMzM4WjAYMRYwFAYD VQQDEw02NjMzZWE5Mi01ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZWs89NXjV2EVUO3GZj1fMqKmBCjGgOCCT0UURbYIhpuZSMXaLkX9i2z3XcX xQ9e3MALXOHCaNbWmr1jbFbZdhrJsRH5wYeXH59sJSI42RJThjg66fWZyk1w0L+K 4jT2lkfJQ3RZKwYnJexZFsTHRabz6a/Ls5aLDQ7Ecu2o16DZS1M4FD5pn5LUUmLF kn6JBop5lNslAbDJGPmEzUvFAVL05FQz9WnDQ2XpKX6jtgl1Matgh0bGKhz03RY5 V8BspiUwXX7jNBR6NF+H8omcE8NQL2NVyjQerEvA6IgD9+jlTvlwYn47gLsgXdjU 5m+MfSpCp4B2bfVk2GmeKh93AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzThuIL fHUG5KdhhrZv3lP+ADWlMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIZ7GydrM5xh/895DSqDbUvuHanmzy9B+hp7w84x44B2VLuvWv2mWN 0ceZNv/Ypnl40zSGsOAw6uYxYJ/P//wy2WXHX2aA8aP7ImHc+3tzA601JHnBGk9a xJJAAXhRnwsIgXlGZ3YNT6T17/JCv7ADMkJrcghpoDDhkfiuGi5ilHGePooT+AaD ZWB20wGhv0Gdig8V0meQ1TE3CPoYK2lGW0oWkCJNpRTQ8ZKwCgwHnErd+GxQktzO 8bsT7lSlZLi8sMv+Ya2soS7cOx5SZyqDYvZrgCzLewske1ZwECzJAS4Vpdb+E5lI nN+nBARX+hmZQ7umHDRoS4jY/XL/MtjT -----END CERTIFICATE-----Generated at Thu May 2 22:28:53 2024 by rpki-client on console-ams.rpki-client.org