$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: Ju8oePU1oyzHtaS4gFOscR4U57P7/LXgsVsAhcNNVi0= Subject key identifier: 69:2F:92:0B:2C:ED:98:66:0B:6A:6E:10:C0:AC:3D:17:E3:8E:A1:4E Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0BB2 Signing time: Fri 31 May 2024 19:44:43 +0000 Manifest this update: Fri 31 May 2024 19:44:43 +0000 Manifest next update: Fri 07 Jun 2024 19:44:43 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: X+7cvBNiv8FFZIIXMIZFHLd5fDFU2o4lU1ckVjG2/G8=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: lzPPJbLm0fCvj0Ivmx0f1E3fqtXDlgUxOWdfG9K7YJo=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: PZbYQOhl9BOt/yYgDyv+so0CeKcYnz1dWkfLTEsjy0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: May 31 19:44:43 2024 GMT Not After : Jun 7 19:44:43 2024 GMT Subject: CN=665a28ab-2225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:47:77:31:17:a6:cd:d8:05:b9:f9:79:a4: 03:5a:b0:ba:7c:53:cc:18:dd:c1:fb:ce:05:41:87: 81:7c:6e:fa:9a:31:77:24:45:c6:b9:fc:01:1c:a6: 0c:11:1c:bb:a4:4a:b8:c0:73:9c:59:9b:ae:c6:b6: 20:cc:95:ce:3b:e5:b5:9c:43:14:27:74:fd:7a:b6: 55:07:e7:e1:b0:f3:2b:bb:af:6f:97:0c:d0:87:f7: 2c:52:f4:ae:c8:1c:da:05:5b:4c:d3:03:aa:16:3b: 53:ce:a8:46:f0:58:0a:6b:c9:de:e8:0c:5a:14:45: 1d:81:8c:4e:5d:e6:73:bf:6c:3e:86:c0:14:0c:0c: 1a:c6:58:40:ac:54:3e:bc:67:08:51:17:fa:56:ee: b1:7d:06:a3:0e:a1:5f:81:2e:9c:93:18:30:82:17: 80:75:c2:eb:f9:ee:4e:d9:c8:e9:d2:72:10:c7:de: a8:70:58:c4:76:cf:7c:0b:21:2c:8a:a2:07:b5:10: 1a:e1:05:29:ea:9c:b3:b5:70:dc:6f:7f:43:4a:30: bc:a7:c4:de:d7:31:7a:41:cf:ab:6f:42:e5:ad:52: 26:0e:fd:c0:fc:ac:f4:a9:65:5b:bd:a8:97:ed:64: 1d:b7:5e:7e:c3:52:87:7a:88:4d:d8:14:db:31:56: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:92:0B:2C:ED:98:66:0B:6A:6E:10:C0:AC:3D:17:E3:8E:A1:4E X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:b2:65:17:83:0a:a0:7e:e2:13:1e:8e:0e:b0:cf:43:19:78: 9a:74:35:d2:49:09:61:f2:1c:37:2e:9d:5f:d5:15:0b:a6:05: 48:cb:fe:5e:4a:0a:41:c6:57:d7:2e:34:f0:d6:5f:09:3a:77: fc:32:cf:f5:d4:ed:50:95:8c:7d:b5:21:a6:9e:5a:bc:3a:f1: cd:31:da:d0:c5:82:43:be:e9:96:85:34:49:5f:62:78:6f:28: 92:de:cd:8d:4b:ba:52:18:56:e6:f9:c1:52:01:1b:4a:a4:72: 42:ea:e9:d4:e5:c8:cc:50:72:c1:b2:e0:87:fd:c6:a7:ed:b1: e9:1e:7a:3d:45:ba:8c:a7:2c:4c:3d:c5:13:7e:4b:55:e7:cd: 82:e5:57:18:5f:8c:e9:b2:a8:dd:a2:2f:74:6a:d9:40:86:d8: cd:1c:75:71:d0:5e:54:d4:50:91:92:75:0c:17:1a:14:01:5a: b2:67:18:8e:8b:7e:28:a3:65:91:be:0f:25:0c:25:af:b4:b8: 63:c3:c2:52:54:f3:4b:39:34:cd:46:75:e7:06:6c:d6:63:f7: 93:16:d5:c6:2a:17:c8:bc:c2:9b:f3:c2:65:da:67:57:f0:29: d8:34:86:9e:04:0c:9d:39:4c:4b:b4:41:8a:d0:af:75:89:77: 0e:95:af:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjQwNTMxMTk0NDQzWhcNMjQwNjA3MTk0NDQzWjAYMRYwFAYD VQQDEw02NjVhMjhhYi0yMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34FHdzEXps3YBbn5eaQDWrC6fFPMGN3B+84FQYeBfG76mjF3JEXGufwBHKYM ERy7pEq4wHOcWZuuxrYgzJXOO+W1nEMUJ3T9erZVB+fhsPMru69vlwzQh/csUvSu yBzaBVtM0wOqFjtTzqhG8FgKa8ne6AxaFEUdgYxOXeZzv2w+hsAUDAwaxlhArFQ+ vGcIURf6Vu6xfQajDqFfgS6ckxgwgheAdcLr+e5O2cjp0nIQx96ocFjEds98CyEs iqIHtRAa4QUp6pyztXDcb39DSjC8p8Te1zF6Qc+rb0LlrVImDv3A/Kz0qWVbvaiX 7WQdt15+w1KHeohN2BTbMVbaNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkvkgss 7ZhmC2puEMCsPRfjjqFOMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHsmUXgwqgfuITHo4OsM9DGXiadDXSSQlh8hw3Lp1f1RULpgVIy/5e SgpBxlfXLjTw1l8JOnf8Ms/11O1QlYx9tSGmnlq8OvHNMdrQxYJDvumWhTRJX2J4 byiS3s2NS7pSGFbm+cFSARtKpHJC6unU5cjMUHLBsuCH/can7bHpHno9RbqMpyxM PcUTfktV582C5VcYX4zpsqjdoi90atlAhtjNHHVx0F5U1FCRknUMFxoUAVqyZxiO i34oo2WRvg8lDCWvtLhjw8JSVPNLOTTNRnXnBmzWY/eTFtXGKhfIvMKb88Jl2mdX 8CnYNIaeBAydOUxLtEGK0K91iXcOla+q -----END CERTIFICATE-----Generated at Fri May 31 22:13:08 2024 by rpki-client on console-fra.rpki-client.org