$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: ElAecUX01ToF6rpkR/bwWVZ2knKOTK2aIT9flPfoRqU= Subject key identifier: 21:1A:6F:56:9E:57:BD:C9:3B:CA:8D:AD:72:04:1D:18:00:AD:BA:A4 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 46 Signing time: Wed 15 May 2024 08:10:13 +0000 Manifest this update: Wed 15 May 2024 08:10:12 +0000 Manifest next update: Wed 22 May 2024 08:10:12 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: 7PUozMPPnlEpS7+hjBKwwZq+em3CNvu/kgKJwCpv3J4=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: +k0dkwBV5BP94B6BUgpVoB0be897Zoj226MQkW27NOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: May 15 08:10:12 2024 GMT Not After : May 22 08:10:12 2024 GMT Subject: CN=66446de5-3636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:85:91:28:f1:8f:32:a1:1d:dc:3b:8c:f6: b8:af:e8:02:1b:85:ea:f3:46:36:c3:99:a0:94:53: 76:5f:b2:54:f2:cf:c8:42:23:18:fd:13:2d:e2:88: 06:71:86:d0:62:05:9f:75:36:db:cf:58:85:47:3c: c0:f3:29:ce:31:87:2f:ea:be:e2:1f:02:7a:73:6e: fa:24:0b:82:33:60:4e:86:f2:28:d6:11:22:54:b5: 53:10:6a:c2:27:9a:6e:85:74:ff:db:92:d0:75:b2: ff:92:c8:36:4f:22:94:92:32:f9:b5:d2:9f:89:08: 7a:a0:ef:93:33:f5:a5:d5:47:f3:b5:77:6e:2d:c1: 96:ea:d3:a0:40:12:8c:0f:a7:eb:4d:1b:67:5d:0c: 92:a0:64:7b:48:0c:d6:c1:30:02:f8:86:46:4f:76: 8e:66:2c:82:a6:f0:de:02:46:c1:18:c9:9c:c1:23: 0a:98:95:1d:7d:11:40:ec:b3:4d:a9:83:d6:fa:b5: b3:6e:a5:97:e0:ae:75:f3:a4:cd:2f:ae:d9:71:08: da:ef:9e:85:0e:2f:e7:2b:20:37:56:a6:df:d1:e8: 34:74:0d:65:ea:0d:92:fc:4d:ad:48:ec:ca:17:ea: 84:99:09:80:32:85:3b:a5:9a:df:dc:cf:f1:64:fb: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1A:6F:56:9E:57:BD:C9:3B:CA:8D:AD:72:04:1D:18:00:AD:BA:A4 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:07:71:80:47:3c:ee:7a:fe:e8:52:e4:a3:40:0a:c3:88:de: 56:ff:9e:a9:14:20:16:04:3c:f2:c1:9d:21:50:17:22:1c:9b: 11:f1:be:a8:dd:61:3c:81:8a:d3:53:a2:55:55:72:4c:0a:5c: 8d:04:15:4d:f3:6d:66:32:10:be:da:3d:e1:49:4b:6e:58:d0: 95:67:d1:a9:53:c7:b3:7e:25:62:34:50:bd:c0:ab:41:9d:ea: c9:90:7f:bb:0a:ef:48:26:57:bf:43:94:45:b5:34:02:56:36: 35:a1:5f:96:48:2b:75:b2:45:a7:d2:73:7a:7d:70:47:0e:7f: e0:d3:f6:f2:1c:79:01:05:b4:18:a9:94:a1:73:23:42:90:fe: ec:d9:47:fe:5a:08:da:2b:7f:34:4d:56:81:23:5e:58:17:f7: df:8f:ac:42:3e:66:10:91:08:dd:f7:42:2e:ce:87:21:2f:e9: e0:0a:5f:bf:9d:87:fe:f3:e7:83:ab:74:17:35:5b:7d:fa:02: e7:8f:5c:73:d2:6b:04:87:27:c8:65:20:7e:80:08:0a:bf:8a: df:4c:05:83:b1:0b:d5:74:fd:56:9f:92:9e:6a:68:b7:30:6d: f3:8d:5b:ee:58:45:db:7e:66:ef:ba:c5:d5:31:08:60:e9:1e: 43:d0:cf:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDM1RTExMC8GA1UEBRMoQkU2RDc3MjZGOUQ3MzlFNkVDOUFGOTM0N0VDRUNCNDIx N0FGN0EzRjAeFw0yNDA1MTUwODEwMTJaFw0yNDA1MjIwODEwMTJaMBgxFjAUBgNV BAMTDTY2NDQ2ZGU1LTM2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDs/IWRKPGPMqEd3DuM9riv6AIbherzRjbDmaCUU3ZfslTyz8hCIxj9Ey3iiAZx htBiBZ91NtvPWIVHPMDzKc4xhy/qvuIfAnpzbvokC4IzYE6G8ijWESJUtVMQasIn mm6FdP/bktB1sv+SyDZPIpSSMvm10p+JCHqg75Mz9aXVR/O1d24twZbq06BAEowP p+tNG2ddDJKgZHtIDNbBMAL4hkZPdo5mLIKm8N4CRsEYyZzBIwqYlR19EUDss02p g9b6tbNupZfgrnXzpM0vrtlxCNrvnoUOL+crIDdWpt/R6DR0DWXqDZL8Ta1I7MoX 6oSZCYAyhTulmt/cz/Fk+0jPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIRpvVp5X vck7yo2tcgQdGACtuqQwHwYDVR0jBBgwFoAUvm13JvnXOebsmvk0fs7LQhevej8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVEMzVFLzIwOERGQzM2QUM0 MTExRUVCRUUyQTEzMkM0RjlBRTAyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm0xM0p2blhPZWJzbXZrMGZzN0xRaGV2ZWo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE MzVFLzIwOERGQzM2QUM0MTExRUVCRUUyQTEzMkM0RjlBRTAyL3ZtMTNKdm5YT2Vi c212azBmczdMUWhldmVqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFoHcYBHPO56/uhS5KNACsOI3lb/nqkUIBYEPPLBnSFQFyIcmxHxvqjd YTyBitNTolVVckwKXI0EFU3zbWYyEL7aPeFJS25Y0JVn0alTx7N+JWI0UL3Aq0Gd 6smQf7sK70gmV79DlEW1NAJWNjWhX5ZIK3WyRafSc3p9cEcOf+DT9vIceQEFtBip lKFzI0KQ/uzZR/5aCNorfzRNVoEjXlgX99+PrEI+ZhCRCN33Qi7OhyEv6eAKX7+d h/7z54OrdBc1W336AuePXHPSawSHJ8hlIH6ACAq/it9MBYOxC9V0/Vafkp5qaLcw bfONW+5YRdt+Zu+6xdUxCGDpHkPQz2w= -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org