$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: nJFDLwPJKoyHZ47aYK3rEMpjrVPglCenqZ2eWrYdVMc= Subject key identifier: D4:9E:5C:D6:80:58:40:38:F9:14:74:E0:89:62:30:FC:3A:08:85:92 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 84 Signing time: Wed 15 May 2024 07:23:36 +0000 Manifest this update: Wed 15 May 2024 07:23:35 +0000 Manifest next update: Wed 22 May 2024 07:23:35 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: WiznYGGXx8TEqid6TXKaag+VDF42mzxQ2YnZeXYCO8I=) 2: B50B7BCC5E3011EE9286D63FC4F9AE02.roa (hash: uvAs62LPiFCV99tv3ysqHmwlOBSG23p8Uu9ahQxFuu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: May 15 07:23:35 2024 GMT Not After : May 22 07:23:35 2024 GMT Subject: CN=664462f8-2ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:32:0e:04:5c:84:45:29:32:94:1f:35:27: 67:85:8d:1a:bc:d4:9e:ac:6d:85:63:51:8f:81:fe: 17:10:48:a4:33:e6:15:ec:67:2d:b2:69:60:0e:a0: 33:c1:9c:27:db:bc:3b:86:e9:ad:74:da:84:b0:95: cf:35:fc:75:4f:1b:7b:54:f4:f9:53:d2:59:f5:8a: f5:b4:3c:da:4c:45:04:30:31:95:ea:c6:7a:99:8e: a4:2e:a9:11:54:9a:b0:e1:b5:a1:be:d6:02:6c:9c: ed:7c:7e:72:1b:ab:77:d6:6b:27:6e:5f:d6:9f:29: 48:e0:bd:c7:e4:1e:b3:d1:b7:df:f8:c3:6f:c9:41: 5e:00:b3:68:4c:e8:06:36:3f:2d:ad:b3:ff:15:78: 82:4d:ce:e4:23:c4:ad:91:81:db:23:d4:40:0a:43: 5c:2c:fb:e8:60:50:bf:ca:40:54:02:fb:99:e5:e2: b9:b9:82:8d:ba:c2:45:13:f9:59:35:ba:ea:3f:d1: a7:02:67:9e:66:c6:f8:0d:f7:92:02:a7:49:f5:41: 6d:9d:d8:8f:bd:26:d7:6d:56:32:16:a3:59:33:73: d2:d8:e3:2b:73:2d:dc:fd:d9:9f:86:91:69:18:a8: cb:d2:a6:ae:56:8f:25:59:66:9b:05:7d:8b:41:94: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9E:5C:D6:80:58:40:38:F9:14:74:E0:89:62:30:FC:3A:08:85:92 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:fd:0f:6c:8b:78:c2:05:f2:8a:1c:66:bf:64:9b:17:5e:52: f6:6f:a2:ce:e7:ab:c4:55:68:14:be:df:7c:57:e1:e6:92:43: 0c:91:69:7b:52:0d:28:63:ff:73:22:e4:95:7b:7c:08:6b:18: 92:93:e7:14:9e:12:7a:a5:87:dd:8f:64:79:fd:50:5b:87:84: 00:8f:73:cb:f4:e6:8b:5f:38:c7:fd:d6:03:a8:c3:ac:5d:33: 41:ce:6e:6c:e7:d5:24:da:61:1f:f6:43:5c:7b:d4:77:df:7a: b7:25:49:54:20:33:97:ee:56:3d:d9:da:11:10:b2:7b:fd:94: d8:91:8f:6a:df:b1:ab:bd:72:56:96:fb:eb:1e:78:c8:c4:ad: 7f:13:c7:27:d7:00:0c:cf:0b:5d:bc:6c:7b:98:b5:4e:61:a8: da:28:ae:fb:82:8d:60:0f:2c:15:2b:74:37:5d:45:29:25:d3: 91:d7:d7:40:a5:0a:cf:38:4f:16:77:68:e9:3a:e1:12:5a:f4: e6:8b:f8:0f:93:02:e2:2e:0d:62:cf:c0:ac:98:a1:7e:bd:2e: 97:62:21:ce:db:cf:13:49:08:f8:ba:b0:01:26:31:0c:03:06: 84:52:75:b7:71:b5:c2:00:8e:4f:33:e5:06:28:c0:d8:19:02: b8:15:cf:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjQwNTE1MDcyMzM1WhcNMjQwNTIyMDcyMzM1WjAYMRYwFAYD VQQDEw02NjQ0NjJmOC0yZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaMyDgRchEUpMpQfNSdnhY0avNSerG2FY1GPgf4XEEikM+YV7GctsmlgDqAz wZwn27w7humtdNqEsJXPNfx1Txt7VPT5U9JZ9Yr1tDzaTEUEMDGV6sZ6mY6kLqkR VJqw4bWhvtYCbJztfH5yG6t31msnbl/WnylI4L3H5B6z0bff+MNvyUFeALNoTOgG Nj8trbP/FXiCTc7kI8StkYHbI9RACkNcLPvoYFC/ykBUAvuZ5eK5uYKNusJFE/lZ NbrqP9GnAmeeZsb4DfeSAqdJ9UFtndiPvSbXbVYyFqNZM3PS2OMrcy3c/dmfhpFp GKjL0qauVo8lWWabBX2LQZQ5kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSeXNaA WEA4+RR04IliMPw6CIWSMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj/Q9si3jCBfKKHGa/ZJsXXlL2b6LO56vEVWgUvt98V+HmkkMMkWl7 Ug0oY/9zIuSVe3wIaxiSk+cUnhJ6pYfdj2R5/VBbh4QAj3PL9OaLXzjH/dYDqMOs XTNBzm5s59Uk2mEf9kNce9R333q3JUlUIDOX7lY92doRELJ7/ZTYkY9q37GrvXJW lvvrHnjIxK1/E8cn1wAMzwtdvGx7mLVOYajaKK77go1gDywVK3Q3XUUpJdOR19dA pQrPOE8Wd2jpOuESWvTmi/gPkwLiLg1iz8CsmKF+vS6XYiHO288TSQj4urABJjEM AwaEUnW3cbXCAI5PM+UGKMDYGQK4Fc8Z -----END CERTIFICATE-----Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org