$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft File: VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json) Hash identifier: 2AXWRcI0WF9KIof+DXhfa+gfRnDpBfaa5wY1mFkub0o= Subject key identifier: DF:B7:E7:D8:29:E7:B0:75:0D:78:F6:1A:D2:9F:EC:2E:51:1D:4F:19 Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft Manifest number: BA Signing time: Fri 03 May 2024 06:37:03 +0000 Manifest this update: Fri 03 May 2024 06:37:03 +0000 Manifest next update: Fri 10 May 2024 06:37:03 +0000 Files and hashes: 1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: tagdfgoxBJqMsgiJ7RmnFS9EYb/ggYMcric+6POBPug=) 2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: NQOVTH1BC/AMK+gLfRO4HuRWXWoZYIEDQJeqtZklkIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: May 3 06:37:03 2024 GMT Not After : May 10 06:37:03 2024 GMT Subject: CN=6634860f-ec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:ba:64:12:73:13:ee:53:de:91:be:2f:d9: eb:47:82:35:f6:4e:1d:dd:ce:f4:a7:9d:b7:85:1e: d2:53:19:85:6c:32:9f:23:cc:58:4d:0a:65:7e:5c: 02:66:01:94:7b:e6:49:36:a2:76:e5:cd:a3:22:e7: 20:4b:b7:8a:09:49:19:1f:21:ac:41:1e:f8:b6:b0: b5:44:4e:b3:2a:52:4d:3a:88:cb:c7:e0:0d:7f:f3: 56:86:3c:e7:65:8f:13:18:b5:49:43:78:dd:4c:88: ea:c0:d9:96:ef:2b:93:1e:ab:79:2a:8d:2a:58:6d: 97:f9:2b:d7:6f:ed:a1:61:5c:1b:08:50:d0:a8:6f: ee:53:60:27:c4:bc:f4:c0:4e:74:7b:17:3c:20:13: 1b:b2:6b:f3:97:04:28:3a:a6:5a:4b:79:7c:20:9b: 1e:5e:6c:ff:3a:ab:b3:b1:2e:a7:06:31:09:c0:e1: ba:e0:0f:a1:b9:8c:e8:bd:54:d4:bf:6d:ba:fa:54: f5:1d:95:73:8b:21:cd:74:5a:69:ce:2f:4f:46:e2: c5:1b:47:91:82:5c:5f:96:2d:ce:7f:e7:66:75:8f: 69:69:0f:3f:1a:7b:d4:95:f3:9d:b3:c9:c5:ef:e5: 0f:65:a4:64:68:a5:89:47:d1:a7:2f:ff:8d:83:5e: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B7:E7:D8:29:E7:B0:75:0D:78:F6:1A:D2:9F:EC:2E:51:1D:4F:19 X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:21:ab:64:86:0f:89:29:f2:1a:6b:26:ad:d5:b7:3a:66:1b: e8:51:84:32:38:c0:c3:5b:87:51:e6:99:5d:8a:18:0c:5c:4d: ad:18:4f:ec:73:ff:f3:82:71:da:8f:49:af:bd:1e:2c:a2:f9: 6d:06:9e:94:50:6f:e7:e3:18:62:3a:35:8b:92:f4:76:9e:f6: 6d:a5:f6:b7:a6:76:07:d6:76:81:0e:10:51:4d:ad:30:89:fd: fa:67:fd:d2:c4:42:89:df:b4:cf:5e:78:a1:7b:81:33:23:c8: 65:1b:0a:f0:e6:2d:21:ae:82:90:e3:0b:a9:97:6e:4d:ae:86: 98:f5:dd:d1:eb:5e:33:9f:e8:f7:76:4a:b2:d7:36:13:1b:bd: 98:74:4f:31:ab:2f:6c:a1:87:1c:e7:eb:4c:47:02:ff:08:07: dd:83:bf:cc:1e:9a:7b:ac:89:9a:75:09:26:fc:42:99:70:1e: 6a:38:78:df:6a:12:fb:9b:d5:d1:57:2d:2a:cb:af:a6:f3:aa: 90:c5:6c:5b:63:ce:a5:d2:4f:4b:f1:81:cb:48:fa:b4:96:8b: ed:03:b2:6a:29:91:31:52:b2:0e:b3:98:15:7a:93:0f:0d:b5: 7c:75:be:d8:22:26:5b:f9:b9:63:fd:fe:55:d2:3e:f4:81:9f: 31:e5:c7:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjQwNTAzMDYzNzAzWhcNMjQwNTEwMDYzNzAzWjAYMRYwFAYD VQQDEw02NjM0ODYwZi1lYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJG6ZBJzE+5T3pG+L9nrR4I19k4d3c70p523hR7SUxmFbDKfI8xYTQplflwC ZgGUe+ZJNqJ25c2jIucgS7eKCUkZHyGsQR74trC1RE6zKlJNOojLx+ANf/NWhjzn ZY8TGLVJQ3jdTIjqwNmW7yuTHqt5Ko0qWG2X+SvXb+2hYVwbCFDQqG/uU2AnxLz0 wE50exc8IBMbsmvzlwQoOqZaS3l8IJseXmz/OquzsS6nBjEJwOG64A+huYzovVTU v226+lT1HZVziyHNdFppzi9PRuLFG0eRglxfli3Of+dmdY9paQ8/GnvUlfOds8nF 7+UPZaRkaKWJR9GnL/+Ng16ARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+359gp 57B1DXj2GtKf7C5RHU8ZMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0Qy9FMUE1NDYyNkY3OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lT bGUyS0FDMVFTZlYwenhiSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPIatkhg+JKfIaayat1bc6ZhvoUYQyOMDDW4dR5pldihgMXE2tGE/s c//zgnHaj0mvvR4sovltBp6UUG/n4xhiOjWLkvR2nvZtpfa3pnYH1naBDhBRTa0w if36Z/3SxEKJ37TPXnihe4EzI8hlGwrw5i0hroKQ4wupl25NroaY9d3R614zn+j3 dkqy1zYTG72YdE8xqy9soYcc5+tMRwL/CAfdg7/MHpp7rImadQkm/EKZcB5qOHjf ahL7m9XRVy0qy6+m86qQxWxbY86l0k9L8YHLSPq0lovtA7JqKZExUrIOs5gVepMP DbV8db7YIiZb+blj/f5V0j70gZ8x5ccJ -----END CERTIFICATE-----Generated at Fri May 3 08:21:41 2024 by rpki-client on console-ams.rpki-client.org