$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: y+/6ABkyGpKfPHNPd2Vwd6Vw8veXRuF4X5NmRNGqfDs= Subject key identifier: 73:A3:9F:53:D7:A6:5E:41:5C:00:F8:EB:15:A0:47:3E:D9:B3:71:78 Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0B5B Signing time: Fri 26 Apr 2024 19:33:16 +0000 Manifest this update: Fri 26 Apr 2024 19:33:15 +0000 Manifest next update: Fri 03 May 2024 19:33:15 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: 6yv0y7Vr/OdAl0rSmIeSSILyoJ2Qu36ycf5dlm8Vybc=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: fOcRDOMjZXWmnFmelN+Ntw5Dk4q457hYxEXWtUgeOso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Apr 26 19:33:15 2024 GMT Not After : May 3 19:33:15 2024 GMT Subject: CN=662c017c-55d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:cd:d5:3e:1c:59:35:80:c6:87:b7:a8:b1: 5f:a2:72:43:ac:69:01:b8:0c:d1:0f:59:99:4a:5a: b4:54:08:ef:8b:f4:47:0f:45:ed:f0:a3:a4:41:d5: cc:7e:84:90:b7:83:29:30:e5:0e:0e:68:4e:9c:36: c9:8f:6f:d7:f7:a7:95:bb:af:16:6b:f7:d9:3e:3d: be:87:1e:74:d3:e4:14:39:d6:a8:24:2a:93:44:36: a4:ea:90:af:48:4b:a9:8a:1f:f0:b2:76:88:4b:2a: 18:be:b0:1a:f9:6a:b6:64:4f:1b:20:4b:5c:f2:2c: 5b:e8:25:94:b9:5d:73:34:35:07:1a:34:cf:5a:b3: 2b:3f:d2:3c:34:5b:58:0c:c4:d0:76:bf:a7:ac:32: 01:f1:85:30:14:b0:ec:92:d1:14:80:ac:99:a8:75: 98:1a:58:19:87:af:5b:47:ea:82:7c:57:dd:7a:0e: 71:a8:7c:6d:7c:04:31:42:5c:52:c3:2b:f7:07:c7: 23:4b:2b:58:d0:38:3a:33:aa:94:81:7f:8f:5a:89: a2:a2:0b:f4:c1:e1:08:ca:0a:fb:6d:d8:ce:a2:68: 67:89:19:22:f9:e9:9b:f4:98:21:c3:b7:57:e1:7d: e2:d0:ea:72:77:91:f2:12:99:c7:87:2a:57:9f:b7: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A3:9F:53:D7:A6:5E:41:5C:00:F8:EB:15:A0:47:3E:D9:B3:71:78 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:16:2a:2f:e5:9f:13:c1:6d:31:e8:bb:17:18:a0:e1:3c:9b: ba:a6:71:f0:02:f7:e3:97:6c:88:ed:f2:fe:db:76:ec:f9:44: 08:ab:95:58:d5:5e:ed:b2:e5:b3:0a:38:af:36:a5:63:7e:09: 9d:04:e6:73:58:86:18:05:c4:2b:fd:ef:31:27:c4:37:62:c3: 77:05:fa:92:1f:2f:84:db:8c:e2:df:91:a3:0c:ed:64:70:99: f5:15:81:9d:25:74:c2:df:2b:a4:4d:b5:b5:c3:d6:7f:15:ac: d1:7c:3c:d7:31:be:fe:84:b5:7e:0f:f4:4e:b0:4e:0b:1b:28: 34:20:ec:89:61:dd:a9:af:7b:39:9d:97:4e:81:7d:a0:d7:a5: fe:42:da:05:39:7e:21:49:2f:10:f9:3e:54:ef:34:4c:0f:fa: d4:44:73:45:d2:20:31:b6:92:57:6d:98:94:15:d3:42:9a:8a: 88:1f:86:81:2d:3b:24:1b:b8:ca:44:88:72:93:69:b9:5c:f8: 50:ce:e3:e6:81:cd:26:78:8a:f2:5e:0e:69:d4:38:ba:72:05: 58:6c:1e:b3:94:11:2d:5f:55:cb:b0:a5:d3:8d:fb:6e:72:e1: c1:43:36:76:75:e9:c0:af:8d:a2:a8:85:47:46:dc:96:7d:4b: 62:19:02:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjQwNDI2MTkzMzE1WhcNMjQwNTAzMTkzMzE1WjAYMRYwFAYD VQQDEw02NjJjMDE3Yy01NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT3N1T4cWTWAxoe3qLFfonJDrGkBuAzRD1mZSlq0VAjvi/RHD0Xt8KOkQdXM foSQt4MpMOUODmhOnDbJj2/X96eVu68Wa/fZPj2+hx500+QUOdaoJCqTRDak6pCv SEupih/wsnaISyoYvrAa+Wq2ZE8bIEtc8ixb6CWUuV1zNDUHGjTPWrMrP9I8NFtY DMTQdr+nrDIB8YUwFLDsktEUgKyZqHWYGlgZh69bR+qCfFfdeg5xqHxtfAQxQlxS wyv3B8cjSytY0Dg6M6qUgX+PWomiogv0weEIygr7bdjOomhniRki+emb9Jghw7dX 4X3i0Opyd5HyEpnHhypXn7e1zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOjn1PX pl5BXAD46xWgRz7Zs3F4MB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Fiov5Z8TwW0x6LsXGKDhPJu6pnHwAvfjl2yI7fL+23bs+UQIq5VY 1V7tsuWzCjivNqVjfgmdBOZzWIYYBcQr/e8xJ8Q3YsN3BfqSHy+E24zi35GjDO1k cJn1FYGdJXTC3yukTbW1w9Z/FazRfDzXMb7+hLV+D/ROsE4LGyg0IOyJYd2pr3s5 nZdOgX2g16X+QtoFOX4hSS8Q+T5U7zRMD/rURHNF0iAxtpJXbZiUFdNCmoqIH4aB LTskG7jKRIhyk2m5XPhQzuPmgc0meIryXg5p1Di6cgVYbB6zlBEtX1XLsKXTjftu cuHBQzZ2denAr42iqIVHRtyWfUtiGQKg -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:13 2024 by rpki-client on console-ams.rpki-client.org