$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: bIf4JchbIDmIomGOhsSPILj/62MROoBmMKEG1IMfMvg= Subject key identifier: 18:2D:16:6B:3D:FB:4B:26:1B:EF:10:9E:C3:99:00:F5:F5:A8:41:98 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 250D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 2501 Signing time: Sat 04 May 2024 16:05:11 +0000 Manifest this update: Sat 04 May 2024 16:05:11 +0000 Manifest next update: Sat 11 May 2024 16:05:11 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: 3D9HYN7Lul156PZYxa2qHlIf/KjLmL49BYXizwc8Fro=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: 12dSzAt0pVOt5wwidTcnY5rhtJ+1Oe5cm3E7SduE+YU=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: e2hzwSzHuOwX9LA+0fPsgachI4WSBEfmTg9X1uSWVEg=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: ukXVPSpZE2S3ReUuqRyKgZq1lemkqT2tn0yJ5Ntranw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9485 (0x250d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: May 4 16:05:11 2024 GMT Not After : May 11 16:05:11 2024 GMT Subject: CN=66365cb7-5274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:7a:04:7e:8d:a9:ff:47:22:6f:df:13:2b: 83:85:eb:d6:d7:0d:36:fa:f4:a7:48:58:f5:fb:b1: f6:0b:ea:0a:ba:c2:20:b0:31:f8:01:d2:ca:a4:31: 59:43:0b:a2:ef:15:d3:8e:26:81:6c:c1:b3:2b:e6: 04:0a:98:e2:47:92:89:a8:28:6c:46:11:0b:4d:0d: 46:7f:7e:b3:fb:46:3f:01:f7:69:db:36:60:44:4b: c7:5c:49:e6:2e:9f:3e:2a:08:d2:81:ee:23:e4:d7: a6:f0:fb:e5:a6:4f:a3:66:b3:70:b4:e7:a7:ed:06: 50:99:48:3d:f5:c1:b1:36:ca:50:57:b3:11:60:fa: 60:d2:03:79:9c:56:38:b4:00:9d:e6:3a:e5:1c:72: a0:5c:a3:db:92:50:26:5d:a2:87:50:b2:20:84:de: 34:99:b5:9d:e3:68:2e:44:0d:2b:aa:9b:4f:c1:15: 8f:a8:d5:48:0e:20:5c:13:7a:d4:ea:f4:35:51:60: 65:02:a4:0b:7e:72:70:77:26:75:63:b9:7c:11:b9: 29:22:75:ef:11:36:c1:98:6b:52:37:0d:17:bc:74: 48:f9:f1:ca:84:2b:e1:81:bd:3b:68:ad:e1:06:28: 82:6d:f3:46:d5:3b:62:56:9c:3d:6d:da:00:48:d4: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2D:16:6B:3D:FB:4B:26:1B:EF:10:9E:C3:99:00:F5:F5:A8:41:98 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:03:ad:70:fd:46:0a:cb:e2:3d:e4:af:b5:0c:76:7d:55:28: 81:5a:6d:e2:e9:91:81:f1:e7:70:b3:35:29:e9:72:de:a4:ce: 74:6e:8a:a7:6f:ec:31:09:f1:70:64:3b:86:9a:33:a7:6c:91: 46:ce:19:e5:ec:06:7e:3e:0d:5f:ed:c7:f7:38:bc:f1:43:00: af:da:3b:39:b5:cb:f2:5a:0c:5d:aa:65:d0:3a:40:b4:bb:70: 07:c9:4d:78:3a:33:f1:7c:0b:21:93:4a:7d:7d:3d:d0:28:0a: f9:6f:00:f0:1b:f3:06:de:59:46:51:1c:c5:39:c6:e7:c4:b9: b2:9f:ee:5b:52:af:7c:d3:53:35:2a:ca:d4:f2:45:aa:f9:e3: 02:89:72:fa:d5:2d:49:ee:a8:ed:16:ce:ac:95:77:b9:3b:6d: 2e:f7:00:43:a5:56:50:03:cc:50:1c:ca:2f:09:35:d9:49:62: 79:b1:35:3d:fc:03:98:07:3d:82:f8:6e:a7:7d:7d:ce:d5:09: 3d:47:e2:6e:85:c4:69:45:51:d8:3e:74:47:53:9c:10:78:8b: e6:e7:9e:96:12:1f:a6:dc:0c:f3:ca:74:96:02:7c:6a:ab:45: 27:03:89:e9:d7:c4:ba:82:f5:3e:19:4c:4a:a0:ac:2e:fe:fa: df:5a:b4:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjQwNTA0MTYwNTExWhcNMjQwNTExMTYwNTExWjAYMRYwFAYD VQQDEw02NjM2NWNiNy01Mjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHR6BH6Nqf9HIm/fEyuDhevW1w02+vSnSFj1+7H2C+oKusIgsDH4AdLKpDFZ Qwui7xXTjiaBbMGzK+YECpjiR5KJqChsRhELTQ1Gf36z+0Y/Afdp2zZgREvHXEnm Lp8+KgjSge4j5Nem8Pvlpk+jZrNwtOen7QZQmUg99cGxNspQV7MRYPpg0gN5nFY4 tACd5jrlHHKgXKPbklAmXaKHULIghN40mbWd42guRA0rqptPwRWPqNVIDiBcE3rU 6vQ1UWBlAqQLfnJwdyZ1Y7l8EbkpInXvETbBmGtSNw0XvHRI+fHKhCvhgb07aK3h BiiCbfNG1TtiVpw9bdoASNRzXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgtFms9 +0smG+8QnsOZAPX1qEGYMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnA61w/UYKy+I95K+1DHZ9VSiBWm3i6ZGB8edwszUp6XLepM50boqn b+wxCfFwZDuGmjOnbJFGzhnl7AZ+Pg1f7cf3OLzxQwCv2js5tcvyWgxdqmXQOkC0 u3AHyU14OjPxfAshk0p9fT3QKAr5bwDwG/MG3llGURzFOcbnxLmyn+5bUq9801M1 KsrU8kWq+eMCiXL61S1J7qjtFs6slXe5O20u9wBDpVZQA8xQHMovCTXZSWJ5sTU9 /AOYBz2C+G6nfX3O1Qk9R+JuhcRpRVHYPnRHU5wQeIvm556WEh+m3AzzynSWAnxq q0UnA4np18S6gvU+GUxKoKwu/vrfWrTo -----END CERTIFICATE-----Generated at Sat May 4 17:19:50 2024 by rpki-client on console-fra.rpki-client.org