$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: mnbtUuHfrn6hH5bE6/0XxuYpNweVt7Z8d5YukvDS+uA= Subject key identifier: AD:39:C4:AC:F7:48:55:A5:7B:B6:5E:51:AA:4E:92:9F:FC:40:72:83 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 01CF Signing time: Wed 01 May 2024 04:39:53 +0000 Manifest this update: Wed 01 May 2024 04:39:52 +0000 Manifest next update: Wed 08 May 2024 04:39:52 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: A/jQhzJvJI0b0RZkKFMQPEuPykEk2fw9y7in9rNAiHI=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: yrcsrbjQfQ5uZo1Mtvcl1tB6W+p9IMWgvyoeS2ztVJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: May 1 04:39:52 2024 GMT Not After : May 8 04:39:52 2024 GMT Subject: CN=6631c799-9aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:54:cb:f4:da:52:17:dd:76:20:33:5a:94: cd:e9:a5:a8:85:cd:a8:dc:d3:75:55:a7:1a:2a:82: 86:8b:82:6a:8b:fe:1c:dc:30:66:0b:de:c3:2e:47: f1:a1:2d:02:af:d0:94:fa:30:e6:07:ab:b9:30:74: b2:8f:10:47:76:af:c2:f9:df:df:be:c6:90:0e:9c: e2:13:c5:30:40:36:2b:54:ba:cd:c9:2b:13:3a:cf: d9:ce:97:ba:f3:7f:ca:c1:ad:98:5b:4c:21:86:1f: df:53:a3:a0:d6:64:54:17:5d:8b:61:5b:50:d3:13: 99:0a:75:8e:a2:1b:a9:64:dc:6e:80:bd:c2:79:ce: 75:c0:70:69:31:6d:0d:b5:83:35:fa:84:18:06:06: c9:16:61:1b:37:b6:74:da:4a:13:ab:de:4f:46:06: 8c:f9:19:bc:61:23:f0:d0:84:88:db:3e:a2:81:d6: 7d:f0:fe:73:5c:ff:58:4e:f3:34:a1:24:d3:93:8b: ff:8a:6e:2e:3d:16:a1:47:90:06:fb:f4:30:29:8b: d1:1a:91:d7:8c:b8:1a:61:09:51:7e:46:33:98:a8: e2:50:31:89:73:61:d6:bc:89:fe:7d:e6:dd:08:23: f4:d9:fc:48:7e:44:23:55:44:9a:93:7b:e0:f1:f2: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:C4:AC:F7:48:55:A5:7B:B6:5E:51:AA:4E:92:9F:FC:40:72:83 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5c:ad:ed:0b:d2:48:c9:1f:d2:03:07:9e:8d:18:e0:0e:49: 58:01:b9:6a:f2:d8:ee:7f:fa:6d:05:0e:8b:44:eb:48:0f:ef: 2c:31:ca:1a:79:a2:ef:fa:be:40:c7:e3:69:13:58:90:17:ec: 8b:14:04:80:be:bf:88:bf:0b:8f:ef:d3:89:9e:37:d3:2a:99: 49:af:bc:a1:9c:b1:37:41:f6:68:d0:10:32:6f:9a:1f:c2:1f: 10:b6:cb:e6:10:cd:65:b4:14:26:68:67:a4:95:0b:e5:a4:ac: 15:a2:78:d1:03:ed:61:26:17:17:77:e6:3c:c5:e5:e8:25:e8: 79:63:19:cc:b3:cd:bb:a6:7b:a5:8a:b2:60:33:f5:fd:12:0d: 36:3c:8c:87:72:f2:41:a6:12:a7:d3:5f:4a:2a:ff:70:87:d7: 83:fc:2c:24:30:84:e4:19:61:83:f0:72:ed:aa:5f:4b:2a:46: ef:90:08:d7:d5:bb:c0:7a:af:30:1e:bd:15:5f:f2:59:8f:14: 22:32:3d:32:2b:ed:92:de:70:10:6d:b1:6a:27:41:75:98:a2: 1e:0a:7c:c6:2d:26:15:5c:af:92:0a:b5:8f:cf:88:86:09:4a: 3c:d5:a1:14:83:e6:94:3a:9c:87:93:ab:d9:13:49:cf:d2:71: 3f:b5:af:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjQwNTAxMDQzOTUyWhcNMjQwNTA4MDQzOTUyWjAYMRYwFAYD VQQDEw02NjMxYzc5OS05YWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykdUy/TaUhfddiAzWpTN6aWohc2o3NN1VacaKoKGi4Jqi/4c3DBmC97DLkfx oS0Cr9CU+jDmB6u5MHSyjxBHdq/C+d/fvsaQDpziE8UwQDYrVLrNySsTOs/Zzpe6 83/Kwa2YW0whhh/fU6Og1mRUF12LYVtQ0xOZCnWOohupZNxugL3Cec51wHBpMW0N tYM1+oQYBgbJFmEbN7Z02koTq95PRgaM+Rm8YSPw0ISI2z6igdZ98P5zXP9YTvM0 oSTTk4v/im4uPRahR5AG+/QwKYvRGpHXjLgaYQlRfkYzmKjiUDGJc2HWvIn+febd CCP02fxIfkQjVUSak3vg8fKYBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK05xKz3 SFWle7ZeUapOkp/8QHKDMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaXK3tC9JIyR/SAweejRjgDklYAblq8tjuf/ptBQ6LROtID+8sMcoa eaLv+r5Ax+NpE1iQF+yLFASAvr+IvwuP79OJnjfTKplJr7yhnLE3QfZo0BAyb5of wh8QtsvmEM1ltBQmaGeklQvlpKwVonjRA+1hJhcXd+Y8xeXoJeh5YxnMs827pnul irJgM/X9Eg02PIyHcvJBphKn019KKv9wh9eD/CwkMITkGWGD8HLtql9LKkbvkAjX 1bvAeq8wHr0VX/JZjxQiMj0yK+2S3nAQbbFqJ0F1mKIeCnzGLSYVXK+SCrWPz4iG CUo81aEUg+aUOpyHk6vZE0nP0nE/ta+4 -----END CERTIFICATE-----Generated at Wed May 1 05:59:12 2024 by rpki-client on console-fra.rpki-client.org