$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft File: vBRJ7peREatw2N-Y2rpOJrprxls.mft (raw, json) Hash identifier: odgaazrKgvdRM4sLyg9v9sEYnYB3SkKNe1jYh3/71Fw= Subject key identifier: 92:0C:EA:DF:0D:AA:3B:80:22:98:7E:D6:A5:45:06:62:0F:FE:7C:F3 Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B Certificate issuer: /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft Manifest number: 065C Signing time: Fri 26 Apr 2024 23:32:17 +0000 Manifest this update: Fri 26 Apr 2024 23:32:17 +0000 Manifest next update: Fri 03 May 2024 23:32:17 +0000 Files and hashes: 1: vBRJ7peREatw2N-Y2rpOJrprxls.crl (hash: Vnq2R6f8vai/8jkTbp4psHLKU3BeT6PJKPPNEH68/Sc=) 2: 7633392033B411EB98035F74C4F9AE02.roa (hash: h5Exhd0zHdFQZY+c5eoD4k4PnRlWxGAE6wXfrNMamhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B Validity Not Before: Apr 26 23:32:17 2024 GMT Not After : May 3 23:32:17 2024 GMT Subject: CN=662c3981-5be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:a8:2f:3d:ef:78:2c:f8:c0:d9:64:c3:a2: 53:31:46:16:96:b7:1d:82:0a:74:06:db:a6:8a:55: e4:d7:0f:a9:60:84:82:07:a9:16:d0:03:3d:84:0e: d5:4e:c4:08:56:c6:83:87:07:63:da:1c:4d:14:f8: 8b:ef:d6:5c:96:05:10:f1:1a:69:46:b0:84:ed:ed: 6d:dd:d0:ea:a9:e6:3a:7b:19:a9:ff:6d:6f:58:ff: ef:e5:34:a3:56:c8:ec:b3:05:40:d4:35:21:d5:51: 71:9e:c4:36:b6:57:2d:80:43:3d:60:6e:52:38:85: ed:8f:34:ec:6c:fc:47:5d:3d:9e:de:83:56:6a:20: 04:9b:02:cb:c3:0d:0d:07:51:0d:83:69:2c:13:5e: e9:9d:63:44:fa:b4:2b:f0:d4:85:cd:b9:96:f2:20: 2c:7d:6a:1f:79:32:39:c4:54:91:95:37:3a:81:7d: 76:e3:91:8a:1b:c9:ef:b4:64:08:91:a5:c1:78:92: 2f:0c:49:1a:91:4f:95:9b:1a:42:18:1f:ba:cf:dc: f6:44:67:78:3e:14:b7:b2:4f:26:84:c8:41:2e:6e: 2a:e5:fc:a6:41:ec:d9:50:8d:76:22:2d:0a:c9:7d: 3a:75:b0:65:46:38:2d:a3:77:08:85:51:48:e6:b0: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0C:EA:DF:0D:AA:3B:80:22:98:7E:D6:A5:45:06:62:0F:FE:7C:F3 X509v3 Authority Key Identifier: keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b9:f1:3d:09:97:07:09:6f:75:be:e3:2e:33:b5:fd:24:89: b6:30:97:ee:c9:cc:91:9d:fb:cb:f7:34:de:d9:e3:60:dc:06: e2:ca:3d:2a:c9:c5:47:01:8f:d4:93:99:32:34:b7:09:3a:33: 56:e5:c2:3b:90:3f:ac:82:4d:79:7b:5e:14:81:bb:c8:4c:a1: 4a:c9:d8:aa:2d:d6:41:f1:57:52:cd:60:5b:67:68:a5:c6:4c: a6:23:13:e5:33:57:f1:90:4c:2e:09:6b:bb:be:74:63:26:43: 36:cf:6a:94:89:1f:34:f2:b8:16:98:27:00:7a:17:cf:6a:f9: 6e:24:34:54:94:b3:74:b0:2f:31:17:9e:36:f8:0f:c4:00:a6: 8f:44:69:7d:08:4d:cb:2f:3e:67:b5:77:64:5c:fa:6e:c5:b0: 4b:5c:30:52:77:45:af:f5:be:ed:54:32:37:98:d2:52:90:d1: 28:53:8c:df:6c:b5:c6:31:e7:0d:0d:79:bc:59:04:f2:8c:20: 18:6c:d6:50:95:6d:af:ba:05:08:e2:62:d7:af:70:3c:4e:c0: 02:8b:82:1e:ca:94:26:da:e5:a3:80:96:d3:0e:43:1e:23:41: 01:db:1b:71:87:57:e1:d1:d7:04:aa:75:00:ce:a0:ff:98:7f: 0c:24:03:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBMzQxMTAvBgNVBAUTKEJDMTQ0OUVFOTc5MTExQUI3MEQ4REY5OERBQkE0RTI2 QkE2QkM2NUIwHhcNMjQwNDI2MjMzMjE3WhcNMjQwNTAzMjMzMjE3WjAYMRYwFAYD VQQDEw02NjJjMzk4MS01YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06CoLz3veCz4wNlkw6JTMUYWlrcdggp0BtumilXk1w+pYISCB6kW0AM9hA7V TsQIVsaDhwdj2hxNFPiL79ZclgUQ8RppRrCE7e1t3dDqqeY6exmp/21vWP/v5TSj VsjsswVA1DUh1VFxnsQ2tlctgEM9YG5SOIXtjzTsbPxHXT2e3oNWaiAEmwLLww0N B1ENg2ksE17pnWNE+rQr8NSFzbmW8iAsfWofeTI5xFSRlTc6gX1245GKG8nvtGQI kaXBeJIvDEkakU+VmxpCGB+6z9z2RGd4PhS3sk8mhMhBLm4q5fymQezZUI12Ii0K yX06dbBlRjgto3cIhVFI5rCWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIM6t8N qjuAIph+1qVFBmIP/nzzMB8GA1UdIwQYMBaAFLwUSe6XkRGrcNjfmNq6Tia6a8Zb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0EzNC82RkFBMzY3ODMz QjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVhdHcyTi1ZMnJwT0pycHJ4 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCUko3cGVSRWF0dzJOLVkycnBPSnJwcnhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0EzNC82RkFBMzY3ODMzQjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVh dHcyTi1ZMnJwT0pycHJ4bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZufE9CZcHCW91vuMuM7X9JIm2MJfuycyRnfvL9zTe2eNg3Abiyj0q ycVHAY/Uk5kyNLcJOjNW5cI7kD+sgk15e14UgbvITKFKydiqLdZB8VdSzWBbZ2il xkymIxPlM1fxkEwuCWu7vnRjJkM2z2qUiR808rgWmCcAehfPavluJDRUlLN0sC8x F542+A/EAKaPRGl9CE3LLz5ntXdkXPpuxbBLXDBSd0Wv9b7tVDI3mNJSkNEoU4zf bLXGMecNDXm8WQTyjCAYbNZQlW2vugUI4mLXr3A8TsACi4IeypQm2uWjgJbTDkMe I0EB2xtxh1fh0dcEqnUAzqD/mH8MJAN3 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:28 2024 by rpki-client on console-ams.rpki-client.org