$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: fNuE3APW3RoBfVgk/Eniu8ArLQKOTh9hfxXdHycEXww= Subject key identifier: 52:DC:20:0E:F3:96:5E:84:00:B1:76:31:3E:09:41:D8:43:94:D1:7E Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: C1 Signing time: Sat 01 Jun 2024 07:41:53 +0000 Manifest this update: Sat 01 Jun 2024 07:41:53 +0000 Manifest next update: Sat 08 Jun 2024 07:41:53 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: EocrTju/N03DfWo0itSWTIz7AwthCgefPy5oSwqBHaU=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: 6nT4G6m4+Q+TudjCN47uVHfhSNYlhZS8cRYj6dtcWvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Jun 1 07:41:53 2024 GMT Not After : Jun 8 07:41:53 2024 GMT Subject: CN=665ad0c1-db71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:91:65:dc:9a:b6:b9:27:63:41:3a:83:d5: 34:0c:79:2a:12:80:43:87:1d:ca:71:4f:b5:a1:6b: 7a:c3:72:7e:17:c1:32:3a:24:f1:67:ee:25:23:06: 9a:fb:b1:c2:03:e4:28:1d:73:0c:3b:47:2a:de:52: ca:8b:72:68:fa:e1:15:95:5d:48:eb:3f:1d:89:33: 35:74:40:0a:9e:2e:8a:56:1a:fe:d2:02:bd:83:49: f2:d8:51:b2:cb:35:36:1b:86:eb:ee:a9:0a:f2:ec: e5:06:29:f3:6a:f3:f5:dd:d2:5d:ca:67:29:76:55: bf:2a:80:d1:d6:d4:55:38:7c:85:40:30:9e:df:5e: 0e:86:6b:1d:48:7f:12:3c:99:38:5e:9f:77:4c:e4: 35:0a:34:dc:c3:0d:eb:e0:ad:3c:78:78:98:a3:3b: 88:71:3b:8f:63:7d:15:a3:af:47:40:9c:1d:a3:bf: 50:f3:26:87:a4:ea:af:94:be:e6:45:54:1d:33:50: d6:71:5e:f2:54:3d:6d:88:8c:4a:3b:ef:f1:af:75: f1:1d:20:06:15:4f:7b:ea:67:ff:b6:57:ec:ec:4b: 41:3a:91:62:66:d5:2c:bd:24:97:6a:ce:5a:d5:df: e7:a4:c2:00:31:ed:7b:29:c6:1c:98:11:d7:28:57: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DC:20:0E:F3:96:5E:84:00:B1:76:31:3E:09:41:D8:43:94:D1:7E X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4a:83:8e:8d:db:94:a2:46:ea:aa:49:02:8d:d0:58:a5:53: d9:ec:0c:9e:86:b8:b4:e3:46:ce:ca:18:c3:b0:4b:bd:5c:f8: c3:62:a4:6f:08:39:29:82:6f:cf:2e:82:c0:24:74:98:87:6e: 8d:f8:4e:0d:52:05:58:49:1e:67:0d:1b:25:c9:70:83:91:63: 7c:a4:71:0c:0e:3b:b3:cf:0e:fd:f8:71:d6:a9:8f:c3:4f:09: 1e:5f:cd:ae:8d:34:31:4b:99:46:b3:91:a5:c4:e8:74:1a:1d: 5b:fd:88:1b:5e:22:6d:20:ba:bd:3b:09:b1:d6:01:86:a9:69: af:db:d6:42:e7:e5:8e:4f:99:7a:27:74:7f:d4:f7:73:d0:b8: cb:e0:bd:74:69:e3:7c:54:bf:5c:d9:d1:73:5e:91:f9:d0:e1: 8d:41:2f:a9:9c:35:9b:7d:40:a2:68:82:8a:66:cf:7a:41:82: f1:42:ca:ff:5e:40:6f:a2:82:8c:22:40:84:1a:b3:26:e1:22: af:d1:19:52:6a:20:c9:af:9b:b0:80:57:8a:41:db:26:9c:2a: bd:7b:f9:b1:a3:d2:d1:9f:97:bd:b4:48:8d:c9:05:c1:ec:12: bb:27:93:01:70:95:ae:5c:40:8b:a6:0f:b8:18:72:e3:be:0f: 13:97:93:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjQwNjAxMDc0MTUzWhcNMjQwNjA4MDc0MTUzWjAYMRYwFAYD VQQDEw02NjVhZDBjMS1kYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CqRZdyatrknY0E6g9U0DHkqEoBDhx3KcU+1oWt6w3J+F8EyOiTxZ+4lIwaa +7HCA+QoHXMMO0cq3lLKi3Jo+uEVlV1I6z8diTM1dEAKni6KVhr+0gK9g0ny2FGy yzU2G4br7qkK8uzlBinzavP13dJdymcpdlW/KoDR1tRVOHyFQDCe314OhmsdSH8S PJk4Xp93TOQ1CjTcww3r4K08eHiYozuIcTuPY30Vo69HQJwdo79Q8yaHpOqvlL7m RVQdM1DWcV7yVD1tiIxKO+/xr3XxHSAGFU976mf/tlfs7EtBOpFiZtUsvSSXas5a 1d/npMIAMe17KcYcmBHXKFcBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLcIA7z ll6EALF2MT4JQdhDlNF+MB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfSoOOjduUokbqqkkCjdBYpVPZ7Ayehri040bOyhjDsEu9XPjDYqRv CDkpgm/PLoLAJHSYh26N+E4NUgVYSR5nDRslyXCDkWN8pHEMDjuzzw79+HHWqY/D TwkeX82ujTQxS5lGs5GlxOh0Gh1b/YgbXiJtILq9Owmx1gGGqWmv29ZC5+WOT5l6 J3R/1Pdz0LjL4L10aeN8VL9c2dFzXpH50OGNQS+pnDWbfUCiaIKKZs96QYLxQsr/ XkBvooKMIkCEGrMm4SKv0RlSaiDJr5uwgFeKQdsmnCq9e/mxo9LRn5e9tEiNyQXB 7BK7J5MBcJWuXECLpg+4GHLjvg8Tl5OY -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org