$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: ZEIJjwaFsOhAwV4iWG0o7Fs318s5pbLtSx+/SW/0ams= Subject key identifier: DE:A5:9D:A3:BA:BA:94:D7:CF:F6:11:82:C0:61:BB:95:42:52:8A:07 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 012A Signing time: Wed 15 May 2024 05:36:57 +0000 Manifest this update: Wed 15 May 2024 05:36:57 +0000 Manifest next update: Wed 22 May 2024 05:36:56 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: euZYrQUhyCkT/5eFp2s/r39g1hwemfqDBez1tfVdZzU=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: 3WtNfIpLPBVnGFECfM4b/UME2G3LW5GJWdkPHLRf1l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 04:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: May 15 05:36:57 2024 GMT Not After : May 22 05:36:56 2024 GMT Subject: CN=664449f9-ffbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:a1:71:f0:70:c7:32:d0:6a:1b:ab:f3:91: b4:8f:7c:c4:fd:98:28:80:e3:44:4b:22:98:36:50: ea:34:3b:e8:1b:9f:00:ef:0f:a4:f2:d7:33:6a:1a: 2c:31:4c:54:b7:7e:f0:c2:55:d2:fa:3e:6b:2a:d0: 35:ca:29:e5:d6:ea:d4:18:bb:92:e2:f1:19:59:eb: 63:a1:26:a4:28:5c:62:80:79:7d:b2:8e:5e:ae:14: 02:b3:e4:2b:2b:72:e4:91:32:87:c3:29:a8:d3:83: 14:bc:af:46:46:6d:d6:7b:d6:f6:5b:6f:dc:f0:eb: 7d:11:26:a7:da:8f:b2:17:18:70:16:83:74:eb:38: 07:3e:e5:83:8b:76:1a:01:c3:0f:06:6c:3d:c1:35: 9e:69:f4:1d:fd:7c:13:5d:fd:22:84:2a:6b:53:05: bc:00:61:c4:44:43:66:73:94:88:e7:dd:30:c2:88: 54:71:c9:66:72:79:4f:d9:f7:8e:21:f1:56:3b:06: ad:39:f4:06:dc:c2:2a:44:0d:52:c9:56:32:b6:f2: 36:ca:19:5f:59:47:88:9e:c8:f5:b2:86:62:78:50: 49:b4:5e:f4:4a:4e:06:f6:af:1b:8b:1f:29:1b:7c: a4:d9:9f:6f:54:24:0b:4b:20:e6:f9:71:f1:83:0a: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A5:9D:A3:BA:BA:94:D7:CF:F6:11:82:C0:61:BB:95:42:52:8A:07 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:4f:c8:66:7b:5f:e1:1b:f3:a0:e6:6f:9a:ce:da:71:3b: 51:0b:8c:9f:a7:b8:17:88:f7:0f:23:62:8d:af:ab:9f:70:0f: 63:49:b2:d0:df:27:d6:12:01:3c:e0:04:65:2f:9a:42:40:9d: fc:80:ce:72:21:83:20:fb:af:f8:c8:6e:b3:9a:d8:6a:86:b8: 6e:e8:ac:94:9f:db:36:e6:a6:f4:01:9a:a7:fb:4c:ee:a3:61: 1a:e1:df:83:f5:ea:6f:65:c5:6d:40:ee:12:14:41:f0:a0:b3: d8:b9:00:d8:90:15:3d:6b:53:17:36:05:77:c9:23:f5:a2:fe: 42:7f:c3:c4:be:52:92:a7:95:fd:57:5e:de:4a:28:72:10:ef: c2:e2:f7:da:d7:ac:49:78:7e:35:16:e3:cd:08:03:49:73:f3: 06:d2:70:38:55:54:2a:9c:2c:cf:1f:c3:76:b8:b7:5e:46:e5: d6:93:ad:08:e8:4f:6b:80:c8:1c:fa:ba:32:90:e0:81:3a:a8: 67:94:f0:2b:f1:bc:c1:aa:c6:06:1b:52:60:0e:95:63:61:ad: 9c:28:4a:32:87:aa:80:66:27:b4:83:fc:ba:cb:ac:9b:5c:a5: 72:c1:96:41:2a:d7:1e:6f:49:bc:53:df:f3:d0:56:8e:78:8f: a8:26:1a:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RThBQzExMC8GA1UEBRMoQkVGMzIxQjAzRDgyNDVERTc3RUM4MEREMDMzMUJGQkE4 RDA4NTlEODAeFw0yNDA1MTUwNTM2NTdaFw0yNDA1MjIwNTM2NTZaMBgxFjAUBgNV BAMTDTY2NDQ0OWY5LWZmYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmZKFx8HDHMtBqG6vzkbSPfMT9mCiA40RLIpg2UOo0O+gbnwDvD6Ty1zNqGiwx TFS3fvDCVdL6Pmsq0DXKKeXW6tQYu5Li8RlZ62OhJqQoXGKAeX2yjl6uFAKz5Csr cuSRMofDKajTgxS8r0ZGbdZ71vZbb9zw630RJqfaj7IXGHAWg3TrOAc+5YOLdhoB ww8GbD3BNZ5p9B39fBNd/SKEKmtTBbwAYcREQ2ZzlIjn3TDCiFRxyWZyeU/Z944h 8VY7Bq059AbcwipEDVLJVjK28jbKGV9ZR4ieyPWyhmJ4UEm0XvRKTgb2rxuLHykb fKTZn29UJAtLIOb5cfGDCiZ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3qWdo7q6 lNfP9hGCwGG7lUJSigcwHwYDVR0jBBgwFoAUvvMhsD2CRd537IDdAzG/uo0IWdgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOEFDLzUwMzhFQzhDN0RF QjExRURBN0NBNEE3RUM0RjlBRTAyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnZNaHNEMkNSZDUzN0lEZEF6R191bzBJV2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OEFDLzUwMzhFQzhDN0RFQjExRURBN0NBNEE3RUM0RjlBRTAyL3Z2TWhzRDJDUmQ1 MzdJRGRBekdfdW8wSVdkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ25T8hme1/hG/Og5m+aztpxO1ELjJ+nuBeI9w8jYo2vq59wD2NJstDf J9YSATzgBGUvmkJAnfyAznIhgyD7r/jIbrOa2GqGuG7orJSf2zbmpvQBmqf7TO6j YRrh34P16m9lxW1A7hIUQfCgs9i5ANiQFT1rUxc2BXfJI/Wi/kJ/w8S+UpKnlf1X Xt5KKHIQ78Li99rXrEl4fjUW480IA0lz8wbScDhVVCqcLM8fw3a4t15G5daTrQjo T2uAyBz6ujKQ4IE6qGeU8CvxvMGqxgYbUmAOlWNhrZwoSjKHqoBmJ7SD/LrLrJtc pXLBlkEq1x5vSbxT3/PQVo54j6gmGq4= -----END CERTIFICATE-----Generated at Wed May 15 06:46:34 2024 by rpki-client on console-fra.rpki-client.org