$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: moZCByBP8SZzHLvCs7qkWw3t0skGDsJ+3ATbFy2pvtY= Subject key identifier: D8:11:C1:D8:AF:A3:FF:43:6E:4B:FF:5F:D1:B6:B9:E2:35:EB:15:63 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 33D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 33C6 Signing time: Thu 02 May 2024 15:11:46 +0000 Manifest this update: Thu 02 May 2024 15:11:46 +0000 Manifest next update: Thu 09 May 2024 15:11:46 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: RNge/0TnLtXzJGgt/eS3Q0lmR9qX0GmAXfHD42JBBLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13270 (0x33d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: May 2 15:11:46 2024 GMT Not After : May 9 15:11:46 2024 GMT Subject: CN=6633ad32-5aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:5f:ba:f4:49:78:f5:33:d8:90:c7:f6:bf: d6:86:63:2f:50:a1:26:65:a7:96:97:e3:89:da:2d: 68:a2:ec:e3:62:10:83:7b:39:b0:8c:e2:20:fc:57: b4:fa:7e:66:d2:f0:5c:c7:fa:21:9f:3b:ec:ed:82: 5f:b7:d4:7d:2b:03:3f:f9:bd:7a:4d:90:b2:54:fb: d2:38:46:9c:51:54:77:f2:f4:d1:81:0e:18:6f:af: ea:f8:87:b8:b1:12:ab:a2:74:9b:2c:c3:11:58:15: 21:38:10:86:9f:49:38:1f:49:18:e8:2c:99:4c:37: 57:11:bc:fe:3b:82:90:50:8f:38:7e:e2:8f:50:5c: 46:6f:87:4e:6d:40:6c:71:05:31:ba:31:66:14:73: e5:72:ac:2d:4e:2b:91:9d:e5:ce:40:6f:35:f5:58: 51:d9:7c:c8:76:ab:fa:c4:27:5e:98:77:1d:a1:29: 33:f1:04:f4:ad:1d:f0:0c:16:d2:ed:40:94:d8:fc: af:eb:74:01:fe:93:e6:5f:eb:ad:34:34:b7:ef:e7: 3e:98:9f:4c:68:c8:b9:fb:69:0f:95:2f:66:c5:cc: 21:5e:71:6d:f9:ce:c5:a9:7e:4a:73:2e:e8:aa:2b: 20:60:94:c6:b5:13:3c:ad:df:7a:ba:ee:4a:71:26: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:11:C1:D8:AF:A3:FF:43:6E:4B:FF:5F:D1:B6:B9:E2:35:EB:15:63 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:69:2c:2b:9c:20:80:3a:31:fb:74:a0:a8:fa:e1:ca:ef: 47:e0:9d:b1:5e:3c:7c:89:39:5f:b7:cc:30:c2:37:df:cd:5f: e0:38:83:d2:a1:68:2c:c8:13:23:8f:95:d3:60:d9:ec:37:b6: 47:87:2c:76:2a:46:8a:a5:51:fc:0c:ff:e1:f3:44:ad:75:6a: 84:a5:11:a1:ae:66:ba:a0:b1:81:81:7f:7f:44:5f:a2:ce:ec: 40:e6:41:e2:bd:f7:e4:64:67:ab:af:c1:54:3e:5c:ea:ed:10: 0a:86:0d:f2:11:3b:c2:fb:b7:01:44:cc:21:f3:e0:a4:3e:16: 2a:67:1f:69:15:0c:1d:5b:ef:e6:e4:2d:06:fd:74:5f:b1:21: 03:55:34:b3:b2:48:00:a8:37:aa:71:7f:19:97:2d:cc:14:26: f3:f4:61:97:d8:b5:51:fa:7f:98:aa:7e:b8:50:41:39:d8:05: 9b:b7:e7:e1:8f:59:d0:cd:36:a0:7f:0c:fb:4a:73:9d:85:95: 86:b9:ef:b5:c9:b1:be:95:9e:b7:64:ef:89:20:05:77:c0:b7: 45:60:c8:5e:03:52:49:15:56:c0:62:bb:9e:9e:ef:ff:88:a4: d7:a0:22:80:87:53:2b:24:d9:8d:27:f3:ed:e2:14:8a:09:52: f3:0c:80:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjQwNTAyMTUxMTQ2WhcNMjQwNTA5MTUxMTQ2WjAYMRYwFAYD VQQDEw02NjMzYWQzMi01YWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVVfuvRJePUz2JDH9r/WhmMvUKEmZaeWl+OJ2i1oouzjYhCDezmwjOIg/Fe0 +n5m0vBcx/ohnzvs7YJft9R9KwM/+b16TZCyVPvSOEacUVR38vTRgQ4Yb6/q+Ie4 sRKronSbLMMRWBUhOBCGn0k4H0kY6CyZTDdXEbz+O4KQUI84fuKPUFxGb4dObUBs cQUxujFmFHPlcqwtTiuRneXOQG819VhR2XzIdqv6xCdemHcdoSkz8QT0rR3wDBbS 7UCU2Pyv63QB/pPmX+utNDS37+c+mJ9MaMi5+2kPlS9mxcwhXnFt+c7FqX5Kcy7o qisgYJTGtRM8rd96uu5KcSaDuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgRwdiv o/9Dbkv/X9G2ueI16xVjMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAakWksK5wggDox+3SgqPrhyu9H4J2xXjx8iTlft8wwwjffzV/gOIPS oWgsyBMjj5XTYNnsN7ZHhyx2KkaKpVH8DP/h80StdWqEpRGhrma6oLGBgX9/RF+i zuxA5kHivffkZGerr8FUPlzq7RAKhg3yETvC+7cBRMwh8+CkPhYqZx9pFQwdW+/m 5C0G/XRfsSEDVTSzskgAqDeqcX8Zly3MFCbz9GGX2LVR+n+Yqn64UEE52AWbt+fh j1nQzTagfwz7SnOdhZWGue+1ybG+lZ63ZO+JIAV3wLdFYMheA1JJFVbAYruenu// iKTXoCKAh1MrJNmNJ/Pt4hSKCVLzDICm -----END CERTIFICATE-----Generated at Thu May 2 17:18:54 2024 by rpki-client on console-ams.rpki-client.org