$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: FaP60cAHLGzqnzWFS9R5/2i8+8FeuD7/eeW7OCtx5E8= Subject key identifier: 7E:1E:B2:AD:61:42:CE:70:4D:FB:C0:BA:3E:23:33:82:CD:CB:03:5A Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: F7 Signing time: Mon 29 Apr 2024 05:34:25 +0000 Manifest this update: Mon 29 Apr 2024 05:34:25 +0000 Manifest next update: Mon 06 May 2024 05:34:25 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: NglUU0HhgkJOr9K6ECHkumJeVjBeHSXQ6W0zn/iU624=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: XXenRy0AwRIlGuNizBS5jLYjcLnjgWFNpzrfaKwDWu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: Apr 29 05:34:25 2024 GMT Not After : May 6 05:34:25 2024 GMT Subject: CN=662f3161-7a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:ff:ab:bf:06:02:20:68:bd:ea:18:68:46: 63:e6:f9:f1:2e:1d:78:db:d5:1b:b5:39:3b:32:ba: 13:61:c7:07:84:35:ce:58:d0:58:a0:19:24:fc:50: f8:52:e2:81:5b:e5:ee:60:62:b7:aa:e4:92:42:3a: 5f:f9:3d:ea:c4:d3:38:4e:d0:43:40:da:d8:23:f1: e4:35:d1:6e:c8:1b:56:54:08:0e:7d:1a:d1:ee:d0: 30:67:39:2f:9d:66:8b:e6:9c:82:6c:30:26:67:27: a0:fb:1d:d8:f3:67:f3:fd:97:40:57:80:75:bd:15: 17:4a:56:19:99:08:b6:5a:cb:9c:ae:21:67:de:28: e3:e8:00:a7:96:e5:c2:75:57:d0:8d:2f:fd:30:66: 4c:bb:51:18:58:c5:f8:e8:fa:ed:d3:62:3b:33:3e: f5:d9:8b:f2:ad:62:e5:e5:79:7f:15:4f:4b:ad:4f: 54:6e:3a:de:89:ed:1e:c2:36:bb:96:e7:5d:7a:32: d1:7c:37:ad:01:1d:3e:3b:01:6a:0e:93:6f:88:7b: 1a:2a:75:11:31:6f:27:51:5f:10:cc:de:ab:86:96: ac:bd:64:20:21:72:ee:0a:03:5b:3c:a6:60:f4:eb: f8:5d:d5:b7:e9:3d:68:23:36:a6:64:2f:b9:1f:e5: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1E:B2:AD:61:42:CE:70:4D:FB:C0:BA:3E:23:33:82:CD:CB:03:5A X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:f2:45:15:3d:da:e7:79:c2:90:c9:82:f1:37:31:00:75:54: 1f:a2:96:d6:cc:40:26:03:03:f5:0a:c8:cd:ba:22:a4:93:ab: fc:ec:13:f4:96:dc:8a:6a:6f:46:96:af:4c:60:bb:0e:a4:07: e6:c3:13:9d:eb:68:93:07:c8:69:57:f5:d9:ce:92:b5:de:1f: 22:92:05:8c:b8:d2:9d:0f:82:2f:df:c7:50:ff:ed:24:9e:8e: c2:91:14:b1:e2:11:1b:7f:5c:26:a9:cb:41:b5:0b:82:68:4a: 8e:0b:0f:51:f3:d4:86:76:07:3c:bd:d4:c7:5f:cc:37:46:47: ad:86:e3:9c:5d:b8:8a:1d:6f:be:c2:de:d7:6d:91:fe:d5:81: 50:b0:61:28:b8:cf:c9:00:6d:ff:77:3a:90:bb:72:49:72:79: 75:7f:26:23:b6:1f:c4:c5:56:2d:71:f3:fc:a7:0e:93:1b:20: 69:b7:5f:4d:c6:ca:4c:09:cc:2d:17:b4:bf:18:a1:ed:2a:e6: 7f:3d:93:09:f8:57:f6:23:2c:04:9d:3f:dd:08:c5:44:c8:e7: 47:38:66:9d:0a:aa:7c:9a:af:d7:02:92:fb:34:ba:00:b8:99: 58:6c:fe:8d:56:61:9b:7a:fa:a1:b8:93:eb:29:c6:0f:30:c3: d5:db:b5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjQwNDI5MDUzNDI1WhcNMjQwNTA2MDUzNDI1WjAYMRYwFAYD VQQDEw02NjJmMzE2MS03YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2z/q78GAiBoveoYaEZj5vnxLh1429UbtTk7MroTYccHhDXOWNBYoBkk/FD4 UuKBW+XuYGK3quSSQjpf+T3qxNM4TtBDQNrYI/HkNdFuyBtWVAgOfRrR7tAwZzkv nWaL5pyCbDAmZyeg+x3Y82fz/ZdAV4B1vRUXSlYZmQi2WsucriFn3ijj6ACnluXC dVfQjS/9MGZMu1EYWMX46Prt02I7Mz712YvyrWLl5Xl/FU9LrU9Ubjreie0ewja7 luddejLRfDetAR0+OwFqDpNviHsaKnURMW8nUV8QzN6rhpasvWQgIXLuCgNbPKZg 9Ov4XdW36T1oIzamZC+5H+Xx/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4esq1h Qs5wTfvAuj4jM4LNywNaMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ8kUVPdrnecKQyYLxNzEAdVQfopbWzEAmAwP1CsjNuiKkk6v87BP0 ltyKam9Glq9MYLsOpAfmwxOd62iTB8hpV/XZzpK13h8ikgWMuNKdD4Iv38dQ/+0k no7CkRSx4hEbf1wmqctBtQuCaEqOCw9R89SGdgc8vdTHX8w3RkethuOcXbiKHW++ wt7XbZH+1YFQsGEouM/JAG3/dzqQu3JJcnl1fyYjth/ExVYtcfP8pw6TGyBpt19N xspMCcwtF7S/GKHtKuZ/PZMJ+Ff2IywEnT/dCMVEyOdHOGadCqp8mq/XApL7NLoA uJlYbP6NVmGbevqhuJPrKcYPMMPV27U8 -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:38 2024 by rpki-client on console-ams.rpki-client.org