$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: D1xgmngB68m4+Io4+zqJ8hzOxP7kC6R3HJ/yQMqs4bg= Subject key identifier: 9A:A3:1D:61:E5:84:DB:21:24:23:C4:79:BF:8B:82:C3:57:09:77:FB Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 05DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 05D8 Signing time: Fri 07 Jun 2024 00:36:33 +0000 Manifest this update: Fri 07 Jun 2024 00:36:32 +0000 Manifest next update: Fri 14 Jun 2024 00:36:32 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: d3mYTWqs7Zow82UkMaio4lQpdLl0Shzlj2H2r/CrW0U=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: fklFDPJioLWiBQO5Ca7OiFTXJaQA8xm4ZECWPmSGBc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 00:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1500 (0x5dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Jun 7 00:36:32 2024 GMT Not After : Jun 14 00:36:32 2024 GMT Subject: CN=66625611-d15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:73:0e:41:f5:6d:98:38:f7:bd:b5:29:ae:5c: 91:11:e9:7c:42:d7:fa:81:31:b2:88:ce:65:a0:9e: d3:ad:d8:76:24:91:67:81:ce:a0:05:de:4f:b8:1c: 72:94:33:e2:5a:1f:d0:3d:6a:15:cd:aa:df:42:d6: 46:c7:0c:91:dc:be:fa:bd:7f:44:e0:48:bd:02:be: b8:83:8f:ea:43:e7:80:5b:44:ad:6a:48:c2:65:af: 70:58:20:06:2f:ba:00:de:3c:a9:a5:18:70:b0:71: 3d:fb:54:5d:ac:59:c5:84:91:35:9d:3f:41:ff:68: a5:3d:8c:2a:66:6c:5c:f5:46:43:f7:24:fd:7e:92: e2:35:68:10:53:a1:34:1a:65:78:3e:84:12:ec:78: bd:d3:58:c3:c5:87:32:59:5a:ee:45:6b:fd:dc:4c: 2d:f7:38:d5:09:07:e1:c6:93:90:16:55:4e:9b:f0: 66:db:95:9a:0a:99:e6:7d:5a:e4:a5:64:ed:f7:ed: 10:e3:90:fc:9e:f2:a2:73:00:61:a4:b5:ba:96:8f: 97:9c:96:33:bf:41:4b:c1:25:de:5a:07:6d:48:fc: 40:d3:d6:c7:66:3d:b9:dd:62:d1:00:44:65:73:68: 64:b0:ce:a3:c5:06:e1:a2:ca:e6:b5:57:97:81:b7: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:1D:61:E5:84:DB:21:24:23:C4:79:BF:8B:82:C3:57:09:77:FB X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:27:91:99:2f:89:0b:f3:bf:c2:78:86:de:c2:ef:07:76:96: 8c:b0:81:57:e5:69:8d:83:bc:cb:7d:38:a5:2a:23:5e:f1:f9: ce:b9:5d:93:1f:8d:ef:27:d0:e2:90:b9:87:83:42:36:0b:17: d1:5c:6f:09:e5:52:85:1e:db:af:36:8c:db:ed:ff:fa:93:d4: 56:dc:65:1e:d3:16:15:68:40:e4:86:61:d0:90:45:4d:8d:03: a7:f3:7f:e8:ea:c3:4d:27:b9:25:47:c5:d1:73:b3:37:3a:63: ce:fb:66:b8:4b:06:47:e9:62:1a:46:c8:5e:c5:ae:93:d1:58: dd:c0:d9:43:75:a7:3e:e3:45:5e:34:f1:58:a8:c7:96:e2:2f: f4:b8:d0:c8:f7:4a:8d:0d:fd:70:e6:79:e8:70:c1:d7:ae:ba: 51:8f:ed:3c:06:30:6f:e4:90:1d:d1:04:56:89:df:bf:52:eb: 06:8a:9c:64:4d:db:24:09:b4:c6:d5:68:a3:fe:9f:cf:ce:20: ec:c3:46:73:9a:b9:be:b0:80:b3:b7:15:ad:27:84:9d:45:91: 06:ba:11:ed:ff:e1:b4:1f:2e:ef:92:90:d5:95:2e:35:dd:c1: ea:4f:8b:fb:59:d2:ff:69:d2:6a:89:b1:3a:ba:85:d9:f3:10: 8b:4f:d4:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjQwNjA3MDAzNjMyWhcNMjQwNjE0MDAzNjMyWjAYMRYwFAYD VQQDEw02NjYyNTYxMS1kMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/nMOQfVtmDj3vbUprlyREel8Qtf6gTGyiM5loJ7Trdh2JJFngc6gBd5PuBxy lDPiWh/QPWoVzarfQtZGxwyR3L76vX9E4Ei9Ar64g4/qQ+eAW0StakjCZa9wWCAG L7oA3jyppRhwsHE9+1RdrFnFhJE1nT9B/2ilPYwqZmxc9UZD9yT9fpLiNWgQU6E0 GmV4PoQS7Hi901jDxYcyWVruRWv93Ewt9zjVCQfhxpOQFlVOm/Bm25WaCpnmfVrk pWTt9+0Q45D8nvKicwBhpLW6lo+XnJYzv0FLwSXeWgdtSPxA09bHZj253WLRAERl c2hksM6jxQbhosrmtVeXgbdBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqjHWHl hNshJCPEeb+LgsNXCXf7MB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcJ5GZL4kL87/CeIbewu8HdpaMsIFX5WmNg7zLfTilKiNe8fnOuV2T H43vJ9DikLmHg0I2CxfRXG8J5VKFHtuvNozb7f/6k9RW3GUe0xYVaEDkhmHQkEVN jQOn83/o6sNNJ7klR8XRc7M3OmPO+2a4SwZH6WIaRshexa6T0VjdwNlDdac+40Ve NPFYqMeW4i/0uNDI90qNDf1w5nnocMHXrrpRj+08BjBv5JAd0QRWid+/UusGipxk TdskCbTG1Wij/p/PziDsw0Zzmrm+sICztxWtJ4SdRZEGuhHt/+G0Hy7vkpDVlS41 3cHqT4v7WdL/adJqibE6uoXZ8xCLT9QD -----END CERTIFICATE-----Generated at Fri Jun 7 02:21:19 2024 by rpki-client on console-fra.rpki-client.org