$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft File: VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json) Hash identifier: NrvTo6ZBU/V8PKZue80zt/GfyHXwscv+ony55MtKjuU= Subject key identifier: B6:16:CA:FA:98:B2:58:1A:C0:F1:7A:56:14:C9:14:8F:ED:EB:E7:A5 Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft Manifest number: 0542 Signing time: Sun 05 May 2024 01:05:42 +0000 Manifest this update: Sun 05 May 2024 01:05:41 +0000 Manifest next update: Sun 12 May 2024 01:05:41 +0000 Files and hashes: 1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: Kk1v7Sl5TPqjtU8XRFgB6fr8OXGx8uWbGQs9wfjweGw=) 2: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: zTeVLsuvGEV9DPP88Klpl+icRwKhLh4A61LFO1HGBow=) 3: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: gPzBbkzGY3oZg7L4NEALzH7o2tLQf4gQ4h3x5NRAkb8=) 4: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: slJ3f3pIvvVRX7GcTNCI3bOu/CdICg8HwQSPLvUVhRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Validity Not Before: May 5 01:05:41 2024 GMT Not After : May 12 01:05:41 2024 GMT Subject: CN=6636db65-6ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:89:60:70:24:e7:fb:31:1a:62:15:3e:0f:1b: e4:fe:3b:d3:e3:64:89:8f:96:f9:91:2a:b8:16:1b: eb:21:cf:fa:2e:e9:90:7e:4c:02:c3:ba:00:8c:4e: 33:b9:e3:d0:35:58:73:2e:07:1f:22:e2:a6:4b:22: a8:f3:41:7d:31:00:03:ff:57:9c:80:47:bb:7e:9d: 6c:d0:3d:03:64:b4:39:34:9f:4b:fb:ea:88:7b:d9: 68:65:a6:98:bb:8e:89:4e:2c:2e:80:46:5a:56:58: cf:02:be:76:48:43:e6:5f:ab:68:0c:19:50:6b:a1: 95:06:1c:21:34:8f:95:2d:06:5c:bb:1d:5f:70:ee: 90:16:6c:29:ee:af:95:86:c1:20:c0:18:85:d6:60: a5:7a:ef:b0:6f:ff:20:15:bf:08:1d:e0:88:4b:c8: 8c:02:56:74:69:32:60:3c:f9:01:13:1d:28:ab:3b: 94:d1:e7:ad:09:3d:07:3b:55:4c:96:99:9e:5e:91: 28:7e:a1:89:33:9f:e2:0d:71:55:b5:99:70:d4:35: 62:5c:2a:59:63:cf:87:9e:40:5a:9d:4f:9d:bb:0d: 32:bc:07:ff:ae:09:4b:31:e5:a0:ae:6e:9c:e3:74: c0:90:fd:15:86:19:bf:69:4f:30:bf:63:21:d9:d9: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:CA:FA:98:B2:58:1A:C0:F1:7A:56:14:C9:14:8F:ED:EB:E7:A5 X509v3 Authority Key Identifier: keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:26:40:26:6b:82:c6:2d:9e:bf:a7:0b:a9:75:b2:60:ac:a5: 12:94:b2:d6:83:3d:be:4e:f3:88:a7:4b:20:11:5c:12:04:05: f0:d1:07:12:06:66:5c:a2:69:31:cb:e9:0d:5c:6d:4d:1b:ed: 65:a1:93:8b:ec:b4:b0:af:a8:fb:2f:12:2f:87:eb:80:b0:eb: df:57:e0:3b:5f:84:6a:76:b0:55:2e:3e:0c:73:1e:b9:ff:dc: f5:47:9e:49:fa:52:c4:a9:7a:f6:90:49:a0:89:9f:f9:30:e2: b0:5a:ec:fd:3d:95:ca:6a:dc:a1:a7:10:b2:8c:54:7c:1b:6f: 6f:00:46:27:c4:1c:99:8b:b6:da:a9:67:31:27:95:99:ab:c7: 86:47:47:98:f1:6d:8f:d9:9e:9e:4b:43:81:a6:a4:2c:d5:cd: 1b:d2:02:4b:09:ee:d4:d1:b1:94:e3:d7:ff:19:5c:45:6f:fe: aa:97:5b:df:d4:7b:99:cc:21:ee:55:c5:60:e8:ed:d8:5b:d9: 4b:90:32:a2:16:9d:1f:5a:05:76:6b:bf:16:96:9b:c8:bc:7e: 6e:ba:84:4d:35:8b:95:c3:f6:e7:a8:1e:ad:95:3c:82:78:99: c9:36:dc:49:e3:6b:99:95:7d:7b:87:91:a0:7b:f3:78:2e:ea: 06:b2:af:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5 OTRCRDE0OTUwHhcNMjQwNTA1MDEwNTQxWhcNMjQwNTEyMDEwNTQxWjAYMRYwFAYD VQQDEw02NjM2ZGI2NS02YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5olgcCTn+zEaYhU+Dxvk/jvT42SJj5b5kSq4FhvrIc/6LumQfkwCw7oAjE4z uePQNVhzLgcfIuKmSyKo80F9MQAD/1ecgEe7fp1s0D0DZLQ5NJ9L++qIe9loZaaY u46JTiwugEZaVljPAr52SEPmX6toDBlQa6GVBhwhNI+VLQZcux1fcO6QFmwp7q+V hsEgwBiF1mCleu+wb/8gFb8IHeCIS8iMAlZ0aTJgPPkBEx0oqzuU0eetCT0HO1VM lpmeXpEofqGJM5/iDXFVtZlw1DViXCpZY8+HnkBanU+duw0yvAf/rglLMeWgrm6c 43TAkP0Vhhm/aU8wv2Mh2dmabwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYWyvqY slgawPF6VhTJFI/t6+elMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3 RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNS83MkZCQUQ4OEE3RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6 TWZwMlRibmtIMTZaUzlGSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7JkAma4LGLZ6/pwupdbJgrKUSlLLWgz2+TvOIp0sgEVwSBAXw0QcS BmZcomkxy+kNXG1NG+1loZOL7LSwr6j7LxIvh+uAsOvfV+A7X4RqdrBVLj4Mcx65 /9z1R55J+lLEqXr2kEmgiZ/5MOKwWuz9PZXKatyhpxCyjFR8G29vAEYnxByZi7ba qWcxJ5WZq8eGR0eY8W2P2Z6eS0OBpqQs1c0b0gJLCe7U0bGU49f/GVxFb/6ql1vf 1HuZzCHuVcVg6O3YW9lLkDKiFp0fWgV2a78WlpvIvH5uuoRNNYuVw/bnqB6tlTyC eJnJNtxJ42uZlX17h5Gge/N4LuoGsq9z -----END CERTIFICATE-----Generated at Sun May 5 02:13:03 2024 by rpki-client on console-ams.rpki-client.org