$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: w0wrd1mzTn7r6BEMccEqL1dRz/S+vH0qmwBu4BZixrc= Subject key identifier: 2D:53:E4:19:2C:33:F7:01:0D:2A:64:24:75:33:58:AE:E7:05:D9:C4 Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 01EA Signing time: Sun 19 May 2024 04:15:54 +0000 Manifest this update: Sun 19 May 2024 04:15:54 +0000 Manifest next update: Sun 26 May 2024 04:15:54 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: UzZQ9KaIlr8Z7/9cS2TxBnQnZyTaO8I5mE4krDpg6og=) 2: 7142EF7E30F511ED91FE0B2CC4F9AE02.roa (hash: ZP/VACRnCaJ72dZ7t6OcfiFZ929QXi3wbdzsqcxNRQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: May 19 04:15:54 2024 GMT Not After : May 26 04:15:54 2024 GMT Subject: CN=66497cfa-eb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c3:ee:25:5e:f8:5d:24:d5:4e:fd:23:ed:73: 05:16:97:bb:df:94:53:d4:c7:95:da:e6:16:76:ab: 1a:3a:7a:2f:db:ab:a2:60:59:52:86:17:c9:dd:41: 3c:b3:d3:59:9c:bf:a0:0d:2d:3a:86:08:c6:48:92: b4:5e:88:44:35:2d:7f:ee:61:95:84:8d:5e:7a:dc: 43:f0:0d:db:de:ca:d7:4f:63:da:13:d7:c4:c5:76: a6:bf:9d:af:97:99:00:0f:86:e9:ef:6c:ea:62:c9: a5:2f:44:40:15:1a:63:9f:6d:5f:3d:69:55:ab:95: 0c:8c:5b:06:76:06:9b:87:6b:af:be:4a:48:c6:36: b1:02:4a:0a:ee:ca:d6:7d:41:a4:6a:96:a5:35:4a: c1:9c:a4:b5:48:ad:b3:75:25:9b:4b:f0:45:a7:64: a6:0e:82:0c:ab:9a:a5:d6:67:f4:ca:19:6c:08:fd: 75:31:ed:e6:7a:24:41:0a:6c:85:1a:07:c3:6a:38: 5f:2c:6d:97:dd:9a:00:de:86:53:50:a4:70:7a:e5: 39:2f:11:20:02:1e:e4:58:76:78:6a:2a:ab:d2:60: f8:57:a3:d5:b3:d8:d4:27:45:ad:3a:2a:a6:49:14: e7:11:83:f9:ff:98:0d:56:33:ce:83:a5:da:75:2b: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:53:E4:19:2C:33:F7:01:0D:2A:64:24:75:33:58:AE:E7:05:D9:C4 X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:95:57:b4:57:9d:ec:63:00:08:06:e9:2a:98:eb:34:b8:4f: 33:58:e9:11:dc:13:6e:dc:aa:e2:f8:a1:1e:e2:35:8e:2a:37: 18:b2:15:bc:15:b1:92:3c:7a:bc:57:a5:1a:eb:be:58:ba:5f: f6:42:71:09:f1:f8:96:52:53:5e:23:5b:d2:68:5c:0e:ce:61: 26:de:90:7f:f7:d8:19:2e:c7:89:f3:51:dd:08:a2:83:da:f2: a0:0e:89:88:b4:80:46:49:ea:bb:0e:6b:a3:76:b9:67:a6:61: bc:04:dd:9e:3d:6d:7a:c4:1c:66:7d:a5:73:84:fa:7c:8c:0e: a4:30:12:30:84:60:f1:a7:5a:f3:36:88:18:83:40:b3:c4:af: 12:1a:64:f8:79:31:6f:4c:64:a8:05:63:f0:19:3e:ef:13:02: 5c:84:c1:23:5b:e4:85:b1:9e:2c:ff:6e:d8:ca:db:dd:e3:86: db:e6:f2:db:87:e1:d7:24:ba:95:db:b9:43:27:7b:c2:2b:4f: 03:7d:e8:c2:e3:9a:08:3b:b0:10:8f:f0:01:05:47:e3:cf:d6: c0:5b:93:5e:ad:8f:38:c1:cd:83:e6:6a:f6:28:14:db:1d:09: 7a:93:16:a4:e0:3c:33:a3:ad:ea:4b:c9:14:bc:cf:8f:b2:36: 78:cf:43:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjQwNTE5MDQxNTU0WhcNMjQwNTI2MDQxNTU0WjAYMRYwFAYD VQQDEw02NjQ5N2NmYS1lYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9cPuJV74XSTVTv0j7XMFFpe735RT1MeV2uYWdqsaOnov26uiYFlShhfJ3UE8 s9NZnL+gDS06hgjGSJK0XohENS1/7mGVhI1eetxD8A3b3srXT2PaE9fExXamv52v l5kAD4bp72zqYsmlL0RAFRpjn21fPWlVq5UMjFsGdgabh2uvvkpIxjaxAkoK7srW fUGkapalNUrBnKS1SK2zdSWbS/BFp2SmDoIMq5ql1mf0yhlsCP11Me3meiRBCmyF GgfDajhfLG2X3ZoA3oZTUKRweuU5LxEgAh7kWHZ4aiqr0mD4V6PVs9jUJ0WtOiqm SRTnEYP5/5gNVjPOg6XadSsIjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1T5Bks M/cBDSpkJHUzWK7nBdnEMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+lVe0V53sYwAIBukqmOs0uE8zWOkR3BNu3Kri+KEe4jWOKjcYshW8 FbGSPHq8V6Ua675Yul/2QnEJ8fiWUlNeI1vSaFwOzmEm3pB/99gZLseJ81HdCKKD 2vKgDomItIBGSeq7DmujdrlnpmG8BN2ePW16xBxmfaVzhPp8jA6kMBIwhGDxp1rz NogYg0CzxK8SGmT4eTFvTGSoBWPwGT7vEwJchMEjW+SFsZ4s/27Yytvd44bb5vLb h+HXJLqV27lDJ3vCK08DfejC45oIO7AQj/ABBUfjz9bAW5NerY84wc2D5mr2KBTb HQl6kxak4Dwzo63qS8kUvM+PsjZ4z0NV -----END CERTIFICATE-----Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org