$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: mrQ+sMko+hMpL61eH3bG0iiaQqqPa37CF4MOBXC9qgI= Subject key identifier: 8A:05:CB:BC:5F:64:DD:BB:69:F2:3C:1C:93:3E:B0:BA:D7:AF:B9:5E Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: E7 Signing time: Sun 19 May 2024 06:00:46 +0000 Manifest this update: Sun 19 May 2024 06:00:46 +0000 Manifest next update: Sun 26 May 2024 06:00:46 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: MakumQ8HSUwA+FJjomVm09Sf+E4CAvKoS9/RZRui/bI=) 2: C7F5369E1F0E11EEB735227CC4F9AE02.roa (hash: yZxOQZbt1qm5wf6p8v9qV1eaduMTSBW1+4/4dChRR5w=) 3: C71C2F161F0E11EEB735227CC4F9AE02.roa (hash: Ak1F1utzEX2wg4axKVI0PBKyQs0POSoVY4cEk+BjXXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: May 19 06:00:46 2024 GMT Not After : May 26 06:00:46 2024 GMT Subject: CN=6649958e-7d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:3e:d4:75:c0:11:c3:bf:57:f1:83:2d:e9: 19:4c:7b:89:01:1b:1a:42:07:5e:d1:dd:34:3a:14: c6:ad:67:4c:6c:2e:9a:39:10:a8:11:d4:7c:df:7d: da:9b:57:74:7b:a2:03:ed:a5:24:e5:3c:df:a2:70: 5e:41:5b:17:b9:4b:ef:29:f8:92:68:e6:f5:11:81: f8:d7:cb:6d:d1:a2:c2:a9:3d:3f:2e:6a:91:32:01: 76:b0:fc:ed:90:18:8c:1a:f6:f8:b8:23:9c:ca:59: c1:81:00:d2:3c:95:85:e7:37:a1:63:62:9f:8e:16: 36:8a:80:85:d2:6f:1e:e0:53:4d:81:32:63:6a:73: 77:87:e6:d9:37:e7:c1:f0:7d:f5:98:15:53:cd:d3: c5:d8:a6:78:e6:86:9c:a6:3c:4c:e5:d5:36:c5:2c: a5:76:80:bf:b4:e6:37:54:4b:13:94:00:ff:57:6f: 7e:6c:98:dc:75:7a:e8:09:06:0e:4e:17:cc:b4:06: 72:1c:47:e5:03:f4:ea:13:19:96:54:41:b9:55:95: 2a:ac:af:34:66:34:e8:a2:bf:82:be:c8:f6:52:7b: 09:94:24:26:3a:9b:e7:a5:17:92:58:24:b9:79:74: 7d:58:bc:ff:47:04:0f:4e:a4:af:90:01:00:5e:1e: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:05:CB:BC:5F:64:DD:BB:69:F2:3C:1C:93:3E:B0:BA:D7:AF:B9:5E X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2c:82:95:a3:17:b5:87:5c:60:c6:a5:73:16:ff:4a:d3:01: 71:80:87:75:76:24:9e:4d:55:43:83:14:2d:da:83:f6:8b:18: 47:89:da:1c:06:40:cc:48:91:b0:57:b8:8e:49:25:13:4c:15: 22:af:4b:b2:8a:9f:93:85:74:f7:d1:9b:13:05:ab:e0:a5:71: 93:39:0a:f8:bc:56:ae:b3:3c:35:34:32:14:35:af:d2:cb:68: 7c:95:0b:02:e0:2a:46:56:0a:08:08:c4:6c:d7:5b:11:db:91: 11:72:b0:b4:41:49:2a:f9:d1:88:b0:4f:79:fd:f5:69:32:61: 55:c1:1d:85:26:23:61:f6:c0:ea:11:d8:68:77:91:1b:5f:b7: 08:06:84:b7:79:09:31:74:a3:18:c0:a6:f2:ca:ae:bf:54:0a: 6e:e6:90:3c:78:65:5f:6e:29:e5:c6:a2:79:f1:04:ac:7b:f7: d1:08:c6:4d:a3:5e:df:8d:91:33:3f:db:27:ed:7a:1c:10:15: ed:f5:c1:ef:32:73:25:84:0d:a4:7b:73:c3:8c:4b:6b:21:1e: f0:26:de:16:01:eb:72:a5:a5:16:6e:6c:09:3c:03:27:3d:bc: b5:18:7e:c0:fb:c9:10:1d:27:ca:d8:83:d3:15:db:98:cc:31: 51:42:24:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjQwNTE5MDYwMDQ2WhcNMjQwNTI2MDYwMDQ2WjAYMRYwFAYD VQQDEw02NjQ5OTU4ZS03ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Qk+1HXAEcO/V/GDLekZTHuJARsaQgde0d00OhTGrWdMbC6aORCoEdR8333a m1d0e6ID7aUk5TzfonBeQVsXuUvvKfiSaOb1EYH418tt0aLCqT0/LmqRMgF2sPzt kBiMGvb4uCOcylnBgQDSPJWF5zehY2KfjhY2ioCF0m8e4FNNgTJjanN3h+bZN+fB 8H31mBVTzdPF2KZ45oacpjxM5dU2xSyldoC/tOY3VEsTlAD/V29+bJjcdXroCQYO ThfMtAZyHEflA/TqExmWVEG5VZUqrK80ZjToor+Cvsj2UnsJlCQmOpvnpReSWCS5 eXR9WLz/RwQPTqSvkAEAXh62QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoFy7xf ZN27afI8HJM+sLrXr7leMB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+LIKVoxe1h1xgxqVzFv9K0wFxgId1diSeTVVDgxQt2oP2ixhHidoc BkDMSJGwV7iOSSUTTBUir0uyip+ThXT30ZsTBavgpXGTOQr4vFauszw1NDIUNa/S y2h8lQsC4CpGVgoICMRs11sR25ERcrC0QUkq+dGIsE95/fVpMmFVwR2FJiNh9sDq Edhod5EbX7cIBoS3eQkxdKMYwKbyyq6/VApu5pA8eGVfbinlxqJ58QSse/fRCMZN o17fjZEzP9sn7XocEBXt9cHvMnMlhA2ke3PDjEtrIR7wJt4WAetypaUWbmwJPAMn Pby1GH7A+8kQHSfK2IPTFduYzDFRQiTJ -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org