$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft File: N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json) Hash identifier: fYbwWeHYVqTR+COo3gGkHly14JnJKgh+zaNpjSXlIr4= Subject key identifier: 02:B0:D1:73:3D:A6:49:58:C7:CD:69:D0:9C:F2:65:70:DF:A4:F8:03 Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D Certificate issuer: /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft Manifest number: 12F6 Signing time: Sat 04 May 2024 19:34:40 +0000 Manifest this update: Sat 04 May 2024 19:34:39 +0000 Manifest next update: Sat 11 May 2024 19:34:39 +0000 Files and hashes: 1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: bArOUy6Me1NkyXT6QnDmr206gzAAU0XG+ZDfZhQsSu4=) 2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: NvJ9QQtVX54fsUWBS89FF4p7ch0fj+rkZNiMXGOz9Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D Validity Not Before: May 4 19:34:39 2024 GMT Not After : May 11 19:34:39 2024 GMT Subject: CN=66368dd0-dd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1e:8a:dc:cf:e9:b8:da:89:db:26:6d:a3:d3: e8:3e:e9:67:82:5b:92:94:5a:d6:be:3c:11:2c:68: 4a:08:ec:b2:35:fd:7c:1a:05:f7:36:13:a8:00:b5: 89:d9:c1:b6:2e:f8:16:5d:38:a9:ab:63:a0:ce:ed: 80:81:7b:40:22:49:31:ea:41:a8:12:d6:6e:dc:a8: 68:8a:71:69:59:e8:48:1d:a9:f8:09:2a:86:9f:92: 72:e5:ca:be:75:64:02:8a:9b:04:b7:e5:82:92:16: 28:d3:82:5c:c0:d0:57:35:f2:45:f4:7d:a2:d2:d7: dd:9e:5f:5c:cb:cd:42:d1:a1:34:f6:2f:55:37:c8: 6d:96:0b:f9:ce:23:c6:5e:ac:93:23:88:6d:c4:93: 7e:94:a2:c8:a9:10:68:ce:a1:03:47:0e:71:c8:6f: 89:c6:74:57:f8:27:1c:41:b7:36:43:98:04:1d:a8: f3:71:18:75:46:6a:f5:9b:54:4f:53:fc:a5:b8:ae: d8:89:2f:d9:dd:1b:6d:f9:73:bc:d1:37:c6:c3:49: 4a:7e:98:94:ae:20:1a:4d:38:df:72:94:33:c7:e7: 1a:9e:59:17:a0:a3:02:8c:9a:1e:d6:3e:08:ae:a5: 98:92:58:c1:6f:43:5e:fc:d2:51:02:23:27:67:ad: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:D1:73:3D:A6:49:58:C7:CD:69:D0:9C:F2:65:70:DF:A4:F8:03 X509v3 Authority Key Identifier: keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f8:f8:b7:6d:52:ba:f2:ef:64:30:8a:87:cc:9f:b5:9c:dc: 39:11:5d:50:2c:ce:5b:b8:df:9e:ca:cd:57:38:5a:3c:bf:83: b9:30:d1:c2:c3:6c:5e:e3:5b:f8:db:99:c9:7a:0e:24:d7:90: 2b:47:cb:f9:85:8a:c7:6a:96:ae:50:5d:7a:76:f1:e8:47:ab: 9f:d0:60:40:1d:35:56:68:08:d7:d0:5c:02:6e:cb:6d:cf:5a: 8b:1d:7b:5d:90:fd:37:5e:31:d0:a0:8f:07:93:a2:a8:d6:24: 4f:14:2a:5c:7b:7f:97:5e:11:c6:ec:a9:68:52:b7:38:93:12: cb:b2:97:47:9b:8d:36:d4:8f:a9:47:00:1b:21:6c:fc:89:95: 9f:fa:d1:96:b8:9a:4c:50:d5:39:ff:40:0b:84:d3:c8:ce:7e: 3d:4e:e5:33:75:a1:2c:70:a1:05:98:98:0f:1a:ef:46:d4:ed: 92:ab:7d:70:cc:f8:3e:35:b0:aa:dc:9a:60:e7:83:eb:b6:b9: 72:b6:11:f0:80:78:3f:9b:f1:6b:c9:0c:f3:91:21:2f:92:bb: af:24:13:ee:9c:70:c4:8a:4a:af:c8:20:8a:aa:d4:e3:ef:d4: 21:dc:ed:71:f9:68:18:da:30:24:b8:cb:0d:81:31:2e:86:1e: 9b:b6:4c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZGMDcxMTAvBgNVBAUTKDM3RURCODAwQTU2OTlGQTg1N0Y3NkQ3NTRCN0YyRjQx NzVFRUE4NUQwHhcNMjQwNTA0MTkzNDM5WhcNMjQwNTExMTkzNDM5WjAYMRYwFAYD VQQDEw02NjM2OGRkMC1kZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6h6K3M/puNqJ2yZto9PoPulngluSlFrWvjwRLGhKCOyyNf18GgX3NhOoALWJ 2cG2LvgWXTipq2Ogzu2AgXtAIkkx6kGoEtZu3KhoinFpWehIHan4CSqGn5Jy5cq+ dWQCipsEt+WCkhYo04JcwNBXNfJF9H2i0tfdnl9cy81C0aE09i9VN8htlgv5ziPG XqyTI4htxJN+lKLIqRBozqEDRw5xyG+JxnRX+CccQbc2Q5gEHajzcRh1Rmr1m1RP U/yluK7YiS/Z3Rtt+XO80TfGw0lKfpiUriAaTTjfcpQzx+canlkXoKMCjJoe1j4I rqWYkljBb0Ne/NJRAiMnZ62QLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKw0XM9 pklYx81p0JzyZXDfpPgDMB8GA1UdIwQYMBaAFDftuAClaZ+oV/dtdUt/L0F17qhd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1 MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42aFg5MjExUzM4dlFYWHVx RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tMjRBS1ZwbjZoWDkyMTFTMzh2UVhYdXFGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42 aFg5MjExUzM4dlFYWHVxRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk+Pi3bVK68u9kMIqHzJ+1nNw5EV1QLM5buN+eys1XOFo8v4O5MNHC w2xe41v425nJeg4k15ArR8v5hYrHapauUF16dvHoR6uf0GBAHTVWaAjX0FwCbstt z1qLHXtdkP03XjHQoI8Hk6Ko1iRPFCpce3+XXhHG7KloUrc4kxLLspdHm4021I+p RwAbIWz8iZWf+tGWuJpMUNU5/0ALhNPIzn49TuUzdaEscKEFmJgPGu9G1O2Sq31w zPg+NbCq3Jpg54PrtrlythHwgHg/m/FryQzzkSEvkruvJBPunHDEikqvyCCKqtTj 79Qh3O1x+WgY2jAkuMsNgTEuhh6btkyG -----END CERTIFICATE-----Generated at Sat May 4 21:19:32 2024 by rpki-client on console-ams.rpki-client.org