$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json) Hash identifier: tcCpaO6ZWOVAqijeZDFeTakyD6M8nHUy5IrDc0tzBSQ= Subject key identifier: AC:E4:85:5D:0A:B3:FA:CA:90:17:70:E5:48:04:24:6B:B5:9C:4D:23 Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft Manifest number: 1D Signing time: Wed 15 May 2024 08:51:07 +0000 Manifest this update: Wed 15 May 2024 08:51:06 +0000 Manifest next update: Wed 22 May 2024 08:51:06 +0000 Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: tPxvw6Sba7IXJqCv5MIsp4l6ylHv1DnJFkvAne8dosg=) 2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: e1nltWx3giMHwlYhBCD0QRszgNiVcpgw5/uqGRKsTPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Validity Not Before: May 15 08:51:06 2024 GMT Not After : May 22 08:51:06 2024 GMT Subject: CN=6644777b-0d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:39:e7:fe:28:d5:2e:09:df:4e:7c:99:bc:09: 19:70:35:b1:21:cc:5f:66:50:60:3d:3f:9c:94:14: e1:38:cf:d9:cb:9b:91:9b:96:c1:49:84:12:b9:58: b1:ec:55:8a:08:21:67:21:cc:1c:c4:35:34:46:76: a6:41:c4:59:e4:0d:aa:0c:c2:67:94:8c:85:5a:cb: 35:a6:73:43:b6:8a:24:95:33:51:0d:2c:78:4a:b0: 47:98:c1:76:2f:9f:44:cd:96:5b:f5:6e:e8:f0:40: f0:33:06:42:bd:36:5d:03:96:8e:64:ac:37:84:a3: 9f:35:10:14:5e:70:f7:55:70:31:a6:79:f3:50:b4: b6:f3:e0:db:48:fb:bf:c7:75:f7:8d:87:5f:94:43: 60:9c:59:25:21:e2:34:ea:91:d6:5d:61:0a:0a:f4: 0d:15:f1:76:0b:1f:f1:9d:85:c0:a0:c8:0b:65:66: da:77:87:9f:53:2e:6e:ed:d7:ec:f1:7e:1a:d9:43: e9:a3:1c:33:27:3a:3c:7c:1b:60:08:66:04:44:4f: 5f:d7:9d:bd:75:8c:44:24:2e:23:ee:30:d5:64:1b: 1a:b6:e3:68:b3:e5:75:84:4a:6b:59:c8:18:97:dd: 4d:c7:64:e5:e6:32:4d:8c:a0:63:78:46:14:5d:13: 32:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:85:5D:0A:B3:FA:CA:90:17:70:E5:48:04:24:6B:B5:9C:4D:23 X509v3 Authority Key Identifier: keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:db:cc:84:95:24:39:fd:30:c0:80:29:5b:10:42:db:2c: e1:28:5f:b0:45:3b:0d:bf:a9:29:30:40:fc:b9:0e:14:32:b3: 40:11:ae:74:02:df:14:c0:80:2a:81:5c:0f:66:3b:ba:e2:99: 52:2f:35:f2:cc:41:d0:8b:3d:cc:18:34:79:cd:45:c7:31:14: 14:ee:7f:57:7d:cf:a0:62:ec:cb:d4:a5:49:2b:5c:dd:8a:6e: f6:1f:95:e1:94:06:95:ae:d7:c3:dc:55:db:7c:cc:4b:73:7b: f7:b7:81:68:1d:9c:9e:03:8b:04:1f:a0:ae:f9:f5:3f:f3:a6: 3a:ff:2a:91:9e:ba:e1:69:89:3b:e0:6c:66:69:50:bc:98:a9: be:e4:e7:73:73:57:b2:d0:5a:38:07:7e:bc:21:ad:f6:3c:a8: de:23:71:e6:99:2b:96:d1:6e:3c:bb:a1:4c:0a:fa:f1:aa:d5: c4:54:30:7e:b6:3d:3a:19:3b:2f:40:b3:1e:1a:14:1c:ff:9c: a0:3d:6b:80:31:8f:b1:58:6a:f0:ec:0b:6c:bd:30:3c:15:fa: c5:4d:b6:7a:2d:22:d7:d7:6c:77:3a:8c:01:06:a4:57:a5:72: 0a:5b:7e:2f:64:9a:94:8a:22:b5:a8:83:13:ac:45:3c:28:0b: e8:6d:36:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUI1MTExMC8GA1UEBRMoNTYyRkIzMDJBODc2NzgzQTA4NDE1ODAzOEJENDlFRjcw NTFBNjAzQzAeFw0yNDA1MTUwODUxMDZaFw0yNDA1MjIwODUxMDZaMBgxFjAUBgNV BAMTDTY2NDQ3NzdiLTBkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtOef+KNUuCd9OfJm8CRlwNbEhzF9mUGA9P5yUFOE4z9nLm5GblsFJhBK5WLHs VYoIIWchzBzENTRGdqZBxFnkDaoMwmeUjIVayzWmc0O2iiSVM1ENLHhKsEeYwXYv n0TNllv1bujwQPAzBkK9Nl0Dlo5krDeEo581EBRecPdVcDGmefNQtLbz4NtI+7/H dfeNh1+UQ2CcWSUh4jTqkdZdYQoK9A0V8XYLH/GdhcCgyAtlZtp3h59TLm7t1+zx fhrZQ+mjHDMnOjx8G2AIZgRET1/Xnb11jEQkLiPuMNVkGxq242iz5XWESmtZyBiX 3U3HZOXmMk2MoGN4RhRdEzItAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrOSFXQqz +sqQF3DlSAQka7WcTSMwHwYDVR0jBBgwFoAUVi+zAqh2eDoIQVgDi9Se9wUaYDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQjUxLzM3QTUzNEI4RUE4 MzExRUU5MTgwMUE3NkM0RjlBRTAyL1ZpLXpBcWgyZURvSVFWZ0RpOVNlOXdVYVlE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmktekFxaDJlRG9JUVZnRGk5U2U5d1VhWUR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QjUxLzM3QTUzNEI4RUE4MzExRUU5MTgwMUE3NkM0RjlBRTAyL1ZpLXpBcWgyZURv SVFWZ0RpOVNlOXdVYVlEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL0t28yElSQ5/TDAgClbEELbLOEoX7BFOw2/qSkwQPy5DhQys0ARrnQC 3xTAgCqBXA9mO7rimVIvNfLMQdCLPcwYNHnNRccxFBTuf1d9z6Bi7MvUpUkrXN2K bvYfleGUBpWu18PcVdt8zEtze/e3gWgdnJ4DiwQfoK759T/zpjr/KpGeuuFpiTvg bGZpULyYqb7k53NzV7LQWjgHfrwhrfY8qN4jceaZK5bRbjy7oUwK+vGq1cRUMH62 PToZOy9Asx4aFBz/nKA9a4Axj7FYavDsC2y9MDwV+sVNtnotItfXbHc6jAEGpFel cgpbfi9kmpSKIrWogxOsRTwoC+htNhM= -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org