$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: v2M9g7eNkYdS8/ZHmbl9DnZmcTA/su/2dU7LWEYvCVQ= Subject key identifier: BE:A6:2B:D7:66:A8:20:FD:BE:38:6C:4B:CC:92:F7:F1:D8:B8:24:58 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 1251 Signing time: Sat 04 May 2024 17:48:37 +0000 Manifest this update: Sat 04 May 2024 17:48:37 +0000 Manifest next update: Sat 11 May 2024 17:48:37 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: sfb58fcALD9SukOCOLvt+8IkWHmHagQKlPBVO/sc+F0=) 2: 7AFCACAEADB311E8AF75E557C4F9AE02.roa (hash: tDhcZAWF9xDzpQj1uj5ou5FTTgJuNdemccq0L16o2SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4697 (0x1259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: May 4 17:48:37 2024 GMT Not After : May 11 17:48:37 2024 GMT Subject: CN=663674f5-650f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:92:d8:29:f3:ac:f6:ae:78:4e:47:76:01: b3:85:0f:f1:b3:93:0e:ea:5b:84:1c:3f:9f:79:8a: a4:a8:64:df:ce:56:ed:f2:1c:08:6c:d2:bf:36:6b: e0:f5:1f:66:d0:a3:e0:e4:f9:e5:0b:7c:80:d7:6e: 1a:77:04:ea:c0:91:a1:0c:dd:b0:18:b3:25:b7:be: 81:ee:ac:c2:71:cf:52:e3:ea:28:7a:04:09:aa:c9: 52:ab:69:e7:2b:51:fb:9c:d1:43:bd:4c:8e:d3:53: 9b:b7:6d:c2:8f:b3:13:a8:5d:45:6d:33:53:41:e2: 12:11:db:dc:62:31:57:5b:46:91:b1:eb:63:f7:77: 3c:18:5e:b3:c8:ed:ab:eb:d4:f9:4e:65:03:d2:99: 63:33:7b:be:d8:04:be:7d:ae:e8:1b:bd:b8:8f:84: 3e:f8:b5:64:07:27:52:27:4f:29:43:66:18:7c:a8: 3b:61:e8:fd:a9:2e:87:f2:91:27:b4:06:3b:b0:35: 40:b6:29:b9:09:db:41:c2:1c:11:e6:9c:c0:e2:78: 15:ab:1a:63:3a:84:70:25:f3:c2:a8:08:75:b9:3d: ac:be:c8:c5:c7:69:f3:38:62:24:39:4c:69:e6:6d: e0:d0:db:ba:a1:5d:bf:da:42:a6:48:75:ca:f3:24: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A6:2B:D7:66:A8:20:FD:BE:38:6C:4B:CC:92:F7:F1:D8:B8:24:58 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9c:cc:58:7d:b1:4e:af:b7:f3:17:29:08:e6:21:f7:16:19: 6d:cd:e5:7c:4f:50:42:60:b1:41:38:1f:da:2f:dc:07:07:56: f3:55:53:d1:9b:5b:f6:3b:1f:2e:c8:d3:e5:58:f3:36:3f:94: ef:e9:34:37:a2:22:12:73:c5:2d:0e:40:fd:47:d9:01:2d:dc: 6f:b3:24:91:e3:59:d1:65:b1:12:1a:da:c4:18:cf:aa:64:c4: 46:40:12:da:13:99:a0:1c:ec:75:20:67:fe:38:10:50:7f:55: 3b:99:5c:9d:2d:74:05:b9:c7:f4:5c:31:15:06:8c:81:6a:b0: b2:42:9d:89:94:17:a2:59:ab:37:c2:d5:ea:60:c4:d1:05:10: a7:26:74:3f:29:ca:42:12:16:a1:78:92:3e:ba:a8:c2:4c:68: 3c:78:03:c7:d1:1c:0a:c2:60:f4:bd:5e:f4:a0:45:bb:76:12: d3:29:a8:a9:b1:ab:b6:85:bf:6a:12:b0:55:2c:f9:ec:4e:12: 17:34:75:de:a1:a1:03:6c:a5:da:8f:9b:ef:58:6b:ae:e0:a3: 29:14:ad:d2:c1:e5:70:72:8b:19:d5:43:7b:18:d9:41:76:af: 4c:49:f5:f7:a6:d2:73:55:78:6e:bf:16:06:49:76:96:29:e3: 63:78:e7:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjQwNTA0MTc0ODM3WhcNMjQwNTExMTc0ODM3WjAYMRYwFAYD VQQDEw02NjM2NzRmNS02NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoWS2CnzrPaueE5HdgGzhQ/xs5MO6luEHD+feYqkqGTfzlbt8hwIbNK/Nmvg 9R9m0KPg5PnlC3yA124adwTqwJGhDN2wGLMlt76B7qzCcc9S4+ooegQJqslSq2nn K1H7nNFDvUyO01Obt23Cj7MTqF1FbTNTQeISEdvcYjFXW0aRsetj93c8GF6zyO2r 69T5TmUD0pljM3u+2AS+fa7oG724j4Q++LVkBydSJ08pQ2YYfKg7Yej9qS6H8pEn tAY7sDVAtim5CdtBwhwR5pzA4ngVqxpjOoRwJfPCqAh1uT2svsjFx2nzOGIkOUxp 5m3g0Nu6oV2/2kKmSHXK8ySyvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6mK9dm qCD9vjhsS8yS9/HYuCRYMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbnMxYfbFOr7fzFykI5iH3FhltzeV8T1BCYLFBOB/aL9wHB1bzVVPR m1v2Ox8uyNPlWPM2P5Tv6TQ3oiISc8UtDkD9R9kBLdxvsySR41nRZbESGtrEGM+q ZMRGQBLaE5mgHOx1IGf+OBBQf1U7mVydLXQFucf0XDEVBoyBarCyQp2JlBeiWas3 wtXqYMTRBRCnJnQ/KcpCEhaheJI+uqjCTGg8eAPH0RwKwmD0vV70oEW7dhLTKaip sau2hb9qErBVLPnsThIXNHXeoaEDbKXaj5vvWGuu4KMpFK3SweVwcosZ1UN7GNlB dq9MSfX3ptJzVXhuvxYGSXaWKeNjeOcf -----END CERTIFICATE-----Generated at Sat May 4 20:37:20 2024 by rpki-client on console-fra.rpki-client.org