$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: MQE9Vvp2NXkT+ipVkPLNGwRAK2+a1/8m8WiBhjMsSOc= Subject key identifier: CB:8E:E1:51:56:EA:06:A5:BA:4D:12:F2:80:68:78:5A:15:9E:28:09 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 3D Signing time: Sun 19 May 2024 08:15:44 +0000 Manifest this update: Sun 19 May 2024 08:15:44 +0000 Manifest next update: Sun 26 May 2024 08:15:44 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: 10A0tQ5AKzyCM2vovLP7tjDEzh6HRd/KBwXnFnGM2Ks=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: /3mHHQ5ywC61lDBuvznFXCgZZLB0pg7SUYIieP44Gxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: May 19 08:15:44 2024 GMT Not After : May 26 08:15:44 2024 GMT Subject: CN=6649b530-ceaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dc:ce:59:a5:88:59:43:0d:bf:9b:4a:09:a5: 6a:75:a0:20:51:a1:8c:9f:2a:54:71:43:ff:4a:eb: e2:15:2e:3f:70:6d:a9:02:ed:ab:a1:6a:97:91:be: da:02:24:d7:94:e3:6d:49:62:52:e1:25:6a:45:15: ab:c1:89:32:bb:85:bd:dc:9d:71:27:4c:5c:39:f2: 41:27:64:10:66:25:0a:1b:0a:05:04:f1:86:37:44: df:ad:04:15:24:29:36:bb:a0:9f:f4:cd:6d:c1:fc: e9:46:77:20:2c:e6:4a:2a:7b:9c:7e:4a:91:4d:de: 22:39:53:f5:00:7a:10:6b:52:99:30:2e:16:0b:06: b9:87:4d:04:30:ea:38:f7:fb:2e:a6:56:e7:c3:7a: e4:9c:f0:b3:53:dd:b0:a2:cc:18:e6:1c:98:a7:43: fe:7d:e9:a1:c7:56:68:99:1a:b0:a6:84:8f:14:15: d7:ef:95:22:7f:92:ca:e4:c6:79:78:1d:bd:e6:2f: d7:e5:0f:eb:c0:ad:24:eb:a7:aa:6d:99:f7:9d:d5: 22:e9:c2:55:c1:97:13:2f:0b:ba:1d:97:9f:80:9a: 22:a9:ef:8e:da:d2:19:c5:30:b4:4c:84:c0:54:fe: 8c:78:c3:ba:f7:3b:81:b9:68:49:a7:e6:7b:fb:2e: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8E:E1:51:56:EA:06:A5:BA:4D:12:F2:80:68:78:5A:15:9E:28:09 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:77:b2:26:a2:f7:97:f4:fa:22:a6:5c:7f:aa:4d:db:32:e0: 8d:e8:b5:41:a1:9c:90:0a:30:db:ae:a6:89:bb:4c:ad:49:28: 4e:ab:2c:0c:b0:0b:08:6c:5f:ac:f9:8b:21:c0:ca:f8:c3:a6: b1:36:05:f3:64:b7:10:72:fc:c7:62:05:00:70:05:b3:6c:e9: c8:4b:f1:26:b7:0e:e6:e7:18:b6:7f:c3:3c:e2:df:b6:3a:71: 68:4f:81:d8:8a:31:8b:ad:78:39:1a:c8:65:1b:95:26:8f:7e: 7c:b3:88:35:54:54:bc:1c:36:68:d9:3a:8b:8e:6f:c6:f4:42: 22:76:63:f3:cb:f6:f5:aa:0d:3b:86:98:36:7d:d5:60:52:52: 8c:aa:b6:17:e4:5b:ea:6f:b9:dd:7c:7b:98:95:e9:71:2e:d3: cd:75:17:9e:0a:0e:93:92:26:c0:ba:08:2a:48:1b:3d:02:73: c7:f7:37:ff:6a:6c:3e:b6:ee:6f:2b:e4:4e:e6:ad:3a:e0:36: 9f:a3:43:b4:be:4d:91:3c:d7:a0:06:ef:4a:47:69:df:de:33: c8:3e:48:83:f4:3c:f4:dc:14:ef:cf:10:73:c5:63:41:87:33: 31:10:93:5c:8a:54:c8:42:36:a7:59:78:a6:b4:fc:31:88:f5: 94:62:c8:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDA0RTExMC8GA1UEBRMoNTUzOTBGM0Y2QjNCMzBFRDRBOUM2RkI5QUQ4Mjk3QjhF Rjk5MDZFMDAeFw0yNDA1MTkwODE1NDRaFw0yNDA1MjYwODE1NDRaMBgxFjAUBgNV BAMTDTY2NDliNTMwLWNlYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu3M5ZpYhZQw2/m0oJpWp1oCBRoYyfKlRxQ/9K6+IVLj9wbakC7auhapeRvtoC JNeU421JYlLhJWpFFavBiTK7hb3cnXEnTFw58kEnZBBmJQobCgUE8YY3RN+tBBUk KTa7oJ/0zW3B/OlGdyAs5koqe5x+SpFN3iI5U/UAehBrUpkwLhYLBrmHTQQw6jj3 +y6mVufDeuSc8LNT3bCizBjmHJinQ/596aHHVmiZGrCmhI8UFdfvlSJ/ksrkxnl4 Hb3mL9flD+vArSTrp6ptmfed1SLpwlXBlxMvC7odl5+AmiKp747a0hnFMLRMhMBU /ox4w7r3O4G5aEmn5nv7LvZNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy47hUVbq BqW6TRLygGh4WhWeKAkwHwYDVR0jBBgwFoAUVTkPP2s7MO1KnG+5rYKXuO+ZBuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MDRFLzQ5REY2NTNFQkY0 MjExRUU5QjM1OTY1NkM0RjlBRTAyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlRrUFAyczdNTzFLbkctNXJZS1h1Ty1aQnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MDRFLzQ5REY2NTNFQkY0MjExRUU5QjM1OTY1NkM0RjlBRTAyL1ZUa1BQMnM3TU8x S25HLTVyWUtYdU8tWkJ1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACV3siai95f0+iKmXH+qTdsy4I3otUGhnJAKMNuupom7TK1JKE6rLAyw CwhsX6z5iyHAyvjDprE2BfNktxBy/MdiBQBwBbNs6chL8Sa3DubnGLZ/wzzi37Y6 cWhPgdiKMYuteDkayGUblSaPfnyziDVUVLwcNmjZOouOb8b0QiJ2Y/PL9vWqDTuG mDZ91WBSUoyqthfkW+pvud18e5iV6XEu0811F54KDpOSJsC6CCpIGz0Cc8f3N/9q bD627m8r5E7mrTrgNp+jQ7S+TZE816AG70pHad/eM8g+SIP0PPTcFO/PEHPFY0GH MzEQk1yKVMhCNqdZeKa0/DGI9ZRiyLE= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org