$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: RsBPotS2+fyUd8N45iQhH9kpqHJdHx3uFN5SVONPGUc= Subject key identifier: 8B:EA:84:BA:8C:53:08:C8:1E:80:95:47:7B:26:91:E6:CF:33:AE:5A Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 07CD Signing time: Mon 06 May 2024 22:06:52 +0000 Manifest this update: Mon 06 May 2024 22:06:51 +0000 Manifest next update: Mon 13 May 2024 22:06:51 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: u+dol9UBrfOOkzlxFgp9YiWjBCvvnMpy938y9fVwFcg=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: Do5eqn+JtnVyMoI51D6YIpBPAuypwDVxZx+TzrXg6UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: May 6 22:06:51 2024 GMT Not After : May 13 22:06:51 2024 GMT Subject: CN=6639547b-1a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:93:59:13:3a:2d:53:be:53:5c:a3:53:c0: 53:44:39:3d:38:8a:4e:71:4c:52:db:54:1d:48:ae: 50:60:e7:5e:b2:bb:30:36:d9:d7:a9:7f:b1:53:a0: 86:80:df:5f:92:4b:72:41:00:94:04:aa:33:f1:19: 92:38:c5:84:96:4e:8c:bb:05:a1:19:02:b9:56:50: 47:f9:82:26:c3:fe:6e:16:f4:f9:af:a5:0a:55:79: 65:38:00:6b:d5:2b:80:3c:74:db:04:70:22:2b:92: 07:4a:07:c7:2c:cb:7e:ed:f2:b2:99:7c:4a:d3:7e: c6:b6:57:88:57:fc:5e:b6:db:04:9b:a0:c1:ee:44: 53:a6:05:75:71:e7:07:4b:d0:9a:6e:9a:6e:1b:7f: c7:2c:49:5c:ea:23:84:82:3f:cd:de:54:ef:b0:53: c9:e6:4a:4b:c0:70:8e:0b:d7:ae:73:51:52:22:60: 3b:40:e3:93:04:81:ae:0e:0b:85:3a:d1:ee:59:f2: 68:32:7b:3f:05:58:92:86:4a:90:dd:52:0e:ba:77: e2:99:a6:84:ac:91:42:73:89:d3:8d:fc:1e:93:e8: b9:01:20:94:b6:8e:dd:14:44:8c:21:6f:4a:ca:e4: ec:61:04:23:ac:57:ce:75:b4:a5:98:3b:cd:43:43: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EA:84:BA:8C:53:08:C8:1E:80:95:47:7B:26:91:E6:CF:33:AE:5A X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8b:de:4e:61:ed:0a:42:4f:42:40:d5:29:1d:56:34:e3:31: c5:79:85:60:95:61:3d:2d:d2:7f:0d:88:ef:c2:d1:3f:d6:e4: 24:5b:03:b4:06:51:c2:ba:15:67:f5:9c:be:f5:af:b5:f9:56: 7d:fd:59:26:93:22:cf:0d:57:65:da:ea:48:91:2c:57:c6:a9: bb:01:74:59:a2:01:e6:68:45:38:6f:af:ab:a8:10:55:b1:dc: 88:69:d4:87:ea:57:a5:5d:3e:f5:55:25:d1:59:b3:e5:8f:c8: 95:a3:d7:ce:a6:8b:81:00:af:02:c7:1d:60:9d:87:60:81:10: fc:4b:ab:60:bf:30:38:83:dd:20:46:26:6c:e9:60:96:f8:28: 2d:cc:fc:cb:b8:5e:d1:83:99:11:06:53:f8:ce:73:eb:c2:01: 48:a0:75:20:e4:ce:4f:3f:7c:94:41:4a:f5:e3:06:46:5c:78: c8:3e:71:5c:6c:c6:c1:84:40:63:ce:95:14:3d:43:f0:bd:fa: e9:74:d3:36:16:04:ca:2f:4c:e8:73:db:14:39:4e:ba:46:86: 5e:98:c4:88:07:fb:d1:4e:2f:1e:f8:5e:d9:ad:16:15:e6:10: 4b:5e:12:a9:61:24:eb:bd:43:ba:db:d0:57:c7:ee:1a:ad:5b: 0f:95:ec:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjQwNTA2MjIwNjUxWhcNMjQwNTEzMjIwNjUxWjAYMRYwFAYD VQQDEw02NjM5NTQ3Yi0xYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteyTWRM6LVO+U1yjU8BTRDk9OIpOcUxS21QdSK5QYOdesrswNtnXqX+xU6CG gN9fkktyQQCUBKoz8RmSOMWElk6MuwWhGQK5VlBH+YImw/5uFvT5r6UKVXllOABr 1SuAPHTbBHAiK5IHSgfHLMt+7fKymXxK037GtleIV/xettsEm6DB7kRTpgV1cecH S9CabppuG3/HLElc6iOEgj/N3lTvsFPJ5kpLwHCOC9euc1FSImA7QOOTBIGuDguF OtHuWfJoMns/BViShkqQ3VIOunfimaaErJFCc4nTjfwek+i5ASCUto7dFESMIW9K yuTsYQQjrFfOdbSlmDvNQ0MajwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvqhLqM UwjIHoCVR3smkebPM65aMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4i95OYe0KQk9CQNUpHVY04zHFeYVglWE9LdJ/DYjvwtE/1uQkWwO0 BlHCuhVn9Zy+9a+1+VZ9/VkmkyLPDVdl2upIkSxXxqm7AXRZogHmaEU4b6+rqBBV sdyIadSH6lelXT71VSXRWbPlj8iVo9fOpouBAK8Cxx1gnYdggRD8S6tgvzA4g90g RiZs6WCW+CgtzPzLuF7Rg5kRBlP4znPrwgFIoHUg5M5PP3yUQUr14wZGXHjIPnFc bMbBhEBjzpUUPUPwvfrpdNM2FgTKL0zoc9sUOU66RoZemMSIB/vRTi8e+F7ZrRYV 5hBLXhKpYSTrvUO629BXx+4arVsPlex/ -----END CERTIFICATE-----Generated at Mon May 6 22:41:01 2024 by rpki-client on console-ams.rpki-client.org