$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: Ix7c6ZlddTOyJLRRBXF5AEh0gRuVfLmIK0ft579Ec7k= Subject key identifier: F2:29:A9:33:CB:FD:6F:FF:24:88:32:97:3E:60:6B:F9:AF:06:BC:DE Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: 3C Signing time: Sun 19 May 2024 08:15:53 +0000 Manifest this update: Sun 19 May 2024 08:15:53 +0000 Manifest next update: Sun 26 May 2024 08:15:53 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: Hjcac8EkBzVIROMBHZiet4fsM5z6m6lkGybBvsP2ukI=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: CHWwiBoqVfGSoUjKXV1vohV3Io3pYex631KwXmxz4bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Validity Not Before: May 19 08:15:53 2024 GMT Not After : May 26 08:15:53 2024 GMT Subject: CN=6649b539-618b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:58:c6:35:6b:05:ad:ca:c8:b9:f8:15:6d: a3:d4:ed:3d:83:de:10:d7:cb:b6:9d:51:44:67:74: 5a:48:53:08:5d:b6:47:13:20:eb:3d:bc:1e:d8:a9: 4e:b3:b3:2d:09:a0:9c:b5:07:99:85:ab:ed:5e:3a: 3d:d6:27:0b:7e:0b:59:12:c6:9a:6a:53:e1:67:00: 69:59:ed:38:e4:f0:65:96:4d:25:b1:2e:59:de:37: 6c:37:91:d4:65:08:39:90:3f:7a:86:cb:8f:3b:55: 70:79:82:b5:19:7d:65:42:78:82:9e:3c:a2:b3:f3: bf:08:78:97:f3:4a:aa:9d:3c:de:be:8c:d9:5d:51: 9c:82:bd:7c:b7:63:30:da:b5:fd:7e:bb:83:cf:fa: 52:49:71:8d:a2:76:91:22:92:b1:2e:e9:60:e9:b7: cd:a8:1f:47:6a:dd:63:ef:9b:4b:be:22:e7:3a:44: df:2d:c5:2d:98:4a:c4:53:7a:48:a7:e4:a4:42:7e: 71:d9:5b:f8:d8:88:db:94:d3:44:6e:94:fd:c8:7b: 0b:2a:35:10:ad:db:11:35:64:e4:c7:f5:39:d9:55: 2b:39:15:ca:eb:d2:7d:27:1e:91:98:e3:fe:6c:f0: ce:9b:8d:81:34:a3:ef:56:f0:f9:6d:6b:ec:4d:b3: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:A9:33:CB:FD:6F:FF:24:88:32:97:3E:60:6B:F9:AF:06:BC:DE X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:04:c8:fb:f6:99:ae:31:c0:7d:6e:42:8b:5d:44:a1:88:f8: 22:04:85:8c:c7:cc:c5:58:b8:f8:5b:fe:72:3f:d7:c3:a5:d4: 1b:a2:45:51:3c:b2:c1:8d:1e:dc:09:e7:39:9f:d5:de:14:c3: ff:35:f8:2a:ae:eb:21:83:1a:23:8a:94:de:1a:6e:fe:68:b4: ca:17:68:3b:f7:db:dd:2d:d4:2d:7a:0e:30:29:20:5e:23:b6: f8:d8:1d:f3:e6:52:c9:19:24:30:66:34:eb:1a:d8:85:c1:58: d3:23:66:ca:22:7c:75:32:21:2c:dc:6a:de:48:0b:7e:37:fa: f5:15:04:83:c2:65:78:80:7a:3e:c1:32:57:8d:dd:49:fe:36: a2:80:70:32:b9:ac:1a:30:d4:e2:86:db:fc:ed:21:8f:8c:28: 99:3e:52:0c:84:5c:fc:64:bc:e5:37:d2:02:18:c1:88:1e:c8: 2a:7e:78:52:94:33:ad:a8:c3:65:8a:33:27:5e:76:37:2c:03: 9e:2a:c4:73:c4:d9:e8:08:80:f2:90:d2:28:09:f1:53:4f:68: a2:03:7a:d3:5d:d6:7c:c6:ab:ce:2b:b4:ac:fb:e6:86:8f:ff: 87:c3:5a:80:19:94:aa:ac:1b:b5:23:d8:3c:a2:23:8f:51:38: dc:2c:41:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjJFQjExMC8GA1UEBRMoNTU1OTgzMUFEQ0VERUNBNUZBOTJGQzRFQjVEMkVERTYy RTM3QThDRDAeFw0yNDA1MTkwODE1NTNaFw0yNDA1MjYwODE1NTNaMBgxFjAUBgNV BAMTDTY2NDliNTM5LTYxOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfxFjGNWsFrcrIufgVbaPU7T2D3hDXy7adUURndFpIUwhdtkcTIOs9vB7YqU6z sy0JoJy1B5mFq+1eOj3WJwt+C1kSxppqU+FnAGlZ7Tjk8GWWTSWxLlneN2w3kdRl CDmQP3qGy487VXB5grUZfWVCeIKePKKz878IeJfzSqqdPN6+jNldUZyCvXy3YzDa tf1+u4PP+lJJcY2idpEikrEu6WDpt82oH0dq3WPvm0u+Iuc6RN8txS2YSsRTekin 5KRCfnHZW/jYiNuU00RulP3IewsqNRCt2xE1ZOTH9TnZVSs5Fcrr0n0nHpGY4/5s 8M6bjYE0o+9W8Plta+xNsw+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8impM8v9 b/8kiDKXPmBr+a8GvN4wHwYDVR0jBBgwFoAUVVmDGtzt7KX6kvxOtdLt5i43qM0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMkVCLzQzMEI1QTc4QkY0 MzExRUU4RkQzMDc1OEM0RjlBRTAyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FN MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlZtREd0enQ3S1g2a3Z4T3RkTHQ1aTQzcU0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MkVCLzQzMEI1QTc4QkY0MzExRUU4RkQzMDc1OEM0RjlBRTAyL1ZWbURHdHp0N0tY Nmt2eE90ZEx0NWk0M3FNMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD4EyPv2ma4xwH1uQotdRKGI+CIEhYzHzMVYuPhb/nI/18Ol1BuiRVE8 ssGNHtwJ5zmf1d4Uw/81+Cqu6yGDGiOKlN4abv5otMoXaDv3290t1C16DjApIF4j tvjYHfPmUskZJDBmNOsa2IXBWNMjZsoifHUyISzcat5IC343+vUVBIPCZXiAej7B MleN3Un+NqKAcDK5rBow1OKG2/ztIY+MKJk+UgyEXPxkvOU30gIYwYgeyCp+eFKU M62ow2WKMydedjcsA54qxHPE2egIgPKQ0igJ8VNPaKIDetNd1nzGq84rtKz75oaP /4fDWoAZlKqsG7Uj2DyiI49RONwsQds= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org