$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json) Hash identifier: Mr/kd0g0DK7Lx4t0KdKoijOScYY143VJ+0NZ7ZD8Qmc= Subject key identifier: AB:32:EF:C6:40:B6:1F:36:B2:78:0D:C5:F0:98:2E:22:E7:79:D0:1D Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft Manifest number: 06AE Signing time: Thu 02 May 2024 23:23:08 +0000 Manifest this update: Thu 02 May 2024 23:23:07 +0000 Manifest next update: Thu 09 May 2024 23:23:07 +0000 Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: uF2WeCrx0vdc6N/cZeEuD/qq1UIDqMXHeWF5DIQtOzI=) 2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: /nlPwaxkze5WnDIlqk83D6pBLKWfYfYc84TIgQJD8GU=) 3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: C9vLSGVg6El1e8HTKC16Xnhfbc65KgLg2/+AFVeGHkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Validity Not Before: May 2 23:23:07 2024 GMT Not After : May 9 23:23:07 2024 GMT Subject: CN=6634205c-5d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:93:68:ac:64:a7:2c:43:ba:48:fb:82:7b: 13:33:ee:40:6d:77:d9:78:33:d0:d0:63:72:e3:5e: de:e3:f0:2e:57:75:db:6c:7b:bf:75:b0:83:70:01: 11:a5:ef:a4:de:01:1e:6b:b3:3a:52:ba:05:fb:eb: 18:3e:82:9e:8d:4b:f0:4e:e5:01:8a:cd:77:5d:a6: 98:e6:31:ff:bd:ab:c5:2a:5a:a4:1e:8a:11:b0:b4: a2:05:93:38:f1:55:b1:64:5c:05:80:a1:a7:8e:0f: 65:78:19:0d:ac:02:64:49:e5:b0:58:30:07:2d:38: 58:44:27:74:05:53:db:53:0e:39:03:d3:d1:fa:a5: 72:45:ea:cc:49:55:6d:61:2f:36:be:6e:00:27:92: 80:98:54:75:1a:c0:8b:78:c0:a0:9a:4a:c1:97:66: 92:2a:25:68:e0:4e:f1:d8:6b:28:d0:9d:ff:f7:dd: 2a:78:a0:6b:a8:2d:85:95:07:e4:0a:f7:2e:46:66: 3f:47:6b:3c:14:13:91:30:3c:f3:e5:71:23:00:ce: 5a:0d:c9:72:de:cc:16:f9:5c:67:0c:aa:a9:41:81: fe:fc:89:24:53:1a:86:99:db:e2:68:63:77:ae:57: 44:a6:99:bf:d6:7b:4f:62:a7:1d:ad:d1:9f:48:da: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:EF:C6:40:B6:1F:36:B2:78:0D:C5:F0:98:2E:22:E7:79:D0:1D X509v3 Authority Key Identifier: keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:14:fd:c0:67:02:32:e7:7c:6d:75:d2:7e:a0:7b:16:f2:96: b7:50:b9:18:ae:78:1e:3d:d2:e1:fa:81:88:77:8d:79:c9:81: 45:29:f6:7a:3c:c9:db:11:a2:bb:86:32:03:2c:40:ae:99:4d: 68:92:55:4b:0f:b8:d0:75:af:6f:bf:42:cc:10:d1:35:b2:89: e1:4a:7a:39:c6:5d:40:07:2c:e1:01:12:c0:3c:b9:18:9a:5e: dd:52:b6:42:d9:20:89:d4:b3:55:e9:be:9e:af:c6:3c:13:39: ab:0d:d3:b5:11:8c:eb:af:d1:ca:a3:4e:8c:ce:f9:4a:9a:4c: 6d:78:42:9c:8f:0e:08:86:f9:5d:50:eb:51:f3:49:51:70:5a: d3:2f:6e:da:df:d7:45:70:2c:16:50:d4:0e:41:92:d0:ef:b1: 57:f0:08:51:18:a1:74:d5:8f:5b:43:28:7e:e5:b6:6f:17:5f: 8d:15:ca:c3:1e:df:e2:63:ff:11:4a:1d:54:f3:0f:95:a9:2d: 60:bb:3a:3a:82:16:46:e0:ce:9a:e7:07:0e:bf:59:0c:80:4a: f3:f8:64:bd:88:b7:76:0c:25:67:32:20:e8:2d:2d:6e:a7:74: 1b:71:ce:0a:be:93:96:af:b6:f4:b3:89:11:ad:33:2d:d2:c0: 55:0e:6f:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx NUYyN0MyQTgwHhcNMjQwNTAyMjMyMzA3WhcNMjQwNTA5MjMyMzA3WjAYMRYwFAYD VQQDEw02NjM0MjA1Yy01ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63uTaKxkpyxDukj7gnsTM+5AbXfZeDPQ0GNy417e4/AuV3XbbHu/dbCDcAER pe+k3gEea7M6UroF++sYPoKejUvwTuUBis13XaaY5jH/vavFKlqkHooRsLSiBZM4 8VWxZFwFgKGnjg9leBkNrAJkSeWwWDAHLThYRCd0BVPbUw45A9PR+qVyRerMSVVt YS82vm4AJ5KAmFR1GsCLeMCgmkrBl2aSKiVo4E7x2Gso0J3/990qeKBrqC2FlQfk CvcuRmY/R2s8FBORMDzz5XEjAM5aDcly3swW+VxnDKqpQYH+/IkkUxqGmdviaGN3 rldEppm/1ntPYqcdrdGfSNrstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsy78ZA th82sngNxfCYLiLnedAdMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5 RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzZEQy9CMDQzNjQ3QTE5RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJG UDhtNEY3dDR5NmtWOG53cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWFP3AZwIy53xtddJ+oHsW8pa3ULkYrngePdLh+oGId415yYFFKfZ6 PMnbEaK7hjIDLECumU1oklVLD7jQda9vv0LMENE1sonhSno5xl1AByzhARLAPLkY ml7dUrZC2SCJ1LNV6b6er8Y8EzmrDdO1EYzrr9HKo06MzvlKmkxteEKcjw4Ihvld UOtR80lRcFrTL27a39dFcCwWUNQOQZLQ77FX8AhRGKF01Y9bQyh+5bZvF1+NFcrD Ht/iY/8RSh1U8w+VqS1guzo6ghZG4M6a5wcOv1kMgErz+GS9iLd2DCVnMiDoLS1u p3Qbcc4KvpOWr7b0s4kRrTMt0sBVDm9x -----END CERTIFICATE-----Generated at Fri May 3 00:28:40 2024 by rpki-client on console-fra.rpki-client.org