$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft File: vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json) Hash identifier: uxruujUJANefe6sAZyUpdXaV/kvxxVLo9jwUHombezQ= Subject key identifier: 8A:29:25:83:A6:6F:B4:68:43:DB:F9:49:57:BE:AC:D4:2F:96:AA:FA Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft Manifest number: 04EA Signing time: Sun 05 May 2024 01:25:09 +0000 Manifest this update: Sun 05 May 2024 01:25:09 +0000 Manifest next update: Sun 12 May 2024 01:25:09 +0000 Files and hashes: 1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: 1mq5SHo4WStAVRmb5H26/MYM4ml0v7V7xtsP72CTrdA=) 2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: TGz9Zh5FefNnMbYn4rta3QSulEPlsh/QObNxboqxsnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: May 5 01:25:09 2024 GMT Not After : May 12 01:25:09 2024 GMT Subject: CN=6636dff5-6604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:ac:d3:91:8e:dd:a4:55:67:a9:31:a4:70: 30:56:0d:83:18:f7:d2:36:e1:24:5f:e0:80:a3:d2: d1:6e:16:aa:58:77:3e:5d:7a:5e:52:45:bd:af:72: a6:bd:b5:5e:82:c2:d6:9f:67:36:4d:48:d8:7f:f8: c0:ca:e8:45:b4:b3:83:65:36:cb:c9:be:ca:01:ef: 11:1f:04:e4:1d:ca:25:0d:25:91:c2:f0:d9:b0:a3: 20:9e:6a:7e:12:f5:8d:94:52:fc:3b:da:f8:71:ae: 26:24:01:f6:e3:2c:f8:8d:0b:45:13:b9:6a:2a:81: e1:a1:78:66:56:22:35:e1:be:5d:6b:f0:95:bd:71: 0f:f0:a4:d4:a3:c6:27:92:25:ee:a4:9a:2f:76:26: d7:c9:49:c8:73:c6:b3:d6:70:1a:19:59:4c:8e:01: 6a:a6:5f:43:c2:4b:34:fc:22:9b:0b:33:d0:26:4d: 7b:86:f7:ca:9d:ab:40:d6:f5:b4:37:0f:4e:36:ad: c9:a8:0c:a2:f4:ba:77:7f:1c:5d:57:65:87:70:04: bd:ea:16:95:11:36:4b:40:96:e6:c9:c2:f4:99:87: e6:be:e9:fc:05:f5:40:2e:51:4a:65:dd:db:f7:bf: 52:c3:78:85:8a:66:08:06:c3:cc:8e:8b:97:aa:6d: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:25:83:A6:6F:B4:68:43:DB:F9:49:57:BE:AC:D4:2F:96:AA:FA X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8a:73:8d:cf:26:e4:15:1e:0b:4c:2d:e1:b6:d1:65:af:e4: 09:e7:9b:9e:e0:0a:bc:48:65:ab:13:c5:06:9d:f9:e0:ed:f3: 5e:d9:7c:64:4e:a8:ae:e5:c7:df:77:ca:66:3b:6a:9f:aa:6d: 43:85:13:5c:ad:da:ee:cc:c7:70:80:a9:7a:f7:17:b3:1f:6c: 34:43:a8:c2:52:c3:fc:3d:d1:1d:0f:69:36:43:d2:b8:a6:b9: bd:89:ee:d6:c3:f0:0e:b6:66:54:70:a4:2d:b2:e0:37:35:a7: 26:f3:fa:47:4e:17:78:8a:67:39:ef:8d:c6:5e:ea:42:23:d2: d1:7c:69:eb:f4:e1:ea:c1:9e:db:1a:31:b4:46:e7:4d:a6:ef: 86:f6:d4:ee:3b:95:82:15:bb:25:e7:1a:fc:5a:33:e7:6f:c4: 92:2e:3a:d4:79:90:30:32:e8:44:ac:5b:52:66:8d:65:49:ac: e3:d9:fe:65:ea:9b:c4:5e:ba:c8:c7:db:00:3c:6a:b2:da:bd: ec:0b:57:fa:6b:53:34:a5:75:55:1a:96:b4:94:5d:14:9b:01: cc:af:c1:68:95:42:c5:18:1d:7e:99:7e:82:d5:81:21:72:a9: 3d:e7:29:5b:2e:57:38:19:87:e3:af:57:b7:7c:7a:b5:01:02: 74:b4:b1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjQwNTA1MDEyNTA5WhcNMjQwNTEyMDEyNTA5WjAYMRYwFAYD VQQDEw02NjM2ZGZmNS02NjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ys05GO3aRVZ6kxpHAwVg2DGPfSNuEkX+CAo9LRbhaqWHc+XXpeUkW9r3Km vbVegsLWn2c2TUjYf/jAyuhFtLODZTbLyb7KAe8RHwTkHcolDSWRwvDZsKMgnmp+ EvWNlFL8O9r4ca4mJAH24yz4jQtFE7lqKoHhoXhmViI14b5da/CVvXEP8KTUo8Yn kiXupJovdibXyUnIc8az1nAaGVlMjgFqpl9Dwks0/CKbCzPQJk17hvfKnatA1vW0 Nw9ONq3JqAyi9Lp3fxxdV2WHcAS96haVETZLQJbmycL0mYfmvun8BfVALlFKZd3b 979Sw3iFimYIBsPMjouXqm3f0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIopJYOm b7RoQ9v5SVe+rNQvlqr6MB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE3Qi9FQjAyNzdGQ0M3N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwy M2ozaUphVlJlQUxiWVRxTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8inONzybkFR4LTC3httFlr+QJ55ue4Aq8SGWrE8UGnfng7fNe2Xxk Tqiu5cffd8pmO2qfqm1DhRNcrdruzMdwgKl69xezH2w0Q6jCUsP8PdEdD2k2Q9K4 prm9ie7Ww/AOtmZUcKQtsuA3Nacm8/pHThd4imc5743GXupCI9LRfGnr9OHqwZ7b GjG0RudNpu+G9tTuO5WCFbsl5xr8WjPnb8SSLjrUeZAwMuhErFtSZo1lSazj2f5l 6pvEXrrIx9sAPGqy2r3sC1f6a1M0pXVVGpa0lF0UmwHMr8FolULFGB1+mX6C1YEh cqk95ylbLlc4GYfjr1e3fHq1AQJ0tLHn -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org