$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json) Hash identifier: 2q9PcJPtSww6gG+MJn6F7nS1pg+XynVsHbdOV64uhRM= Subject key identifier: E4:3B:20:0C:AF:8E:BD:AD:01:DB:A7:12:6B:59:FA:3C:C9:0A:A4:33 Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft Manifest number: 039F Signing time: Fri 31 May 2024 03:10:16 +0000 Manifest this update: Fri 31 May 2024 03:10:15 +0000 Manifest next update: Fri 07 Jun 2024 03:10:15 +0000 Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: 8cYw9pUm7F8GSv7Xpis/Eq50XfjqFc8at/L+ASmls4k=) 2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: 5uzkHfFFMLToyMXonIWoqmfqNCeTdigSyRXgd7owJCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Validity Not Before: May 31 03:10:15 2024 GMT Not After : Jun 7 03:10:15 2024 GMT Subject: CN=66593f97-452f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:20:72:bb:ce:ea:fe:0d:b4:be:7b:89:02: 7e:e9:d0:a0:87:b5:1e:c1:f1:15:48:9f:40:41:98: dc:b8:cc:14:93:f7:e1:8f:d0:16:50:84:44:bd:3a: 55:16:42:c6:ba:2f:90:91:38:81:a8:f8:75:f2:4f: 85:3d:c7:95:ff:15:35:e7:73:d8:de:e3:3b:0c:77: 09:5d:08:9e:78:91:64:48:7b:0f:79:da:62:74:25: 41:cb:61:72:85:bb:76:eb:8e:99:b7:64:f6:f5:46: 90:3d:af:61:b7:38:2a:42:73:76:e2:67:56:0d:01: 9f:7a:cc:dd:a2:85:d9:33:21:d2:2a:11:9b:aa:8d: 9f:61:3a:1e:7b:87:b9:72:5a:bd:a2:98:b7:06:95: 6c:9b:ba:a0:a6:9b:67:f8:df:e6:7a:0f:e0:22:5f: d4:7e:94:5c:72:2b:2f:81:77:e9:7f:7d:98:34:6f: 55:55:f1:63:ff:bb:59:9e:e4:92:cb:9d:76:ca:90: e1:3a:49:e3:db:49:9a:b6:13:4e:31:76:ff:ea:9a: 55:8b:a9:db:de:9d:39:97:46:63:91:c9:89:fc:bc: 1c:b1:56:ef:40:95:83:b5:e7:11:46:2a:a3:e9:68: ca:95:9d:ee:6d:83:e5:c0:b7:55:40:77:eb:ee:57: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3B:20:0C:AF:8E:BD:AD:01:DB:A7:12:6B:59:FA:3C:C9:0A:A4:33 X509v3 Authority Key Identifier: keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e5:0e:03:40:83:c6:ca:e0:3e:06:ff:55:34:d0:51:87:56: f1:66:02:5c:e4:2c:39:3c:22:8d:90:ca:2e:01:0e:95:a3:a8: b6:88:91:e3:f5:c6:bb:8d:25:f5:40:b3:db:58:01:4e:94:47: 9a:58:df:9e:56:9f:fc:f1:28:7c:22:0e:8d:31:86:f0:6a:67: f3:c9:bb:48:b0:da:aa:6d:7e:fb:48:af:dd:1a:32:5b:d5:a4: b5:52:77:01:52:1a:d4:f7:78:0b:8e:0c:99:f9:a0:19:13:62: 7a:06:52:77:59:8c:20:26:34:1a:f2:8b:e4:ec:37:53:02:b5: ad:30:13:a2:b8:cf:50:71:6e:f1:cf:99:2a:fe:b6:14:1f:54: c3:c7:5c:b8:82:78:81:49:b9:a9:3a:02:d9:4b:f3:c6:f6:6b: a8:da:bc:25:dc:88:f9:13:a1:73:60:7f:c0:57:4b:76:f1:c3: 31:d4:14:f7:85:2f:7e:96:1e:bc:62:2a:6e:a3:24:53:91:95: 1d:ec:d2:e1:7e:49:03:da:d0:d4:f6:7a:2e:d4:75:76:f0:b0: 8f:42:44:da:82:37:e8:73:ea:9b:3f:12:28:64:4a:46:75:c3: 08:02:33:02:3a:c6:7d:e7:ec:da:f7:95:e4:4e:3e:41:42:fe: 1f:de:1a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCRkYxMTAvBgNVBAUTKDU0NDExRkU3MzMyRDJFRjRGRjI3NUU1OUQ1REVGRUQx Q0NFOTYwMTQwHhcNMjQwNTMxMDMxMDE1WhcNMjQwNjA3MDMxMDE1WjAYMRYwFAYD VQQDEw02NjU5M2Y5Ny00NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytIgcrvO6v4NtL57iQJ+6dCgh7UewfEVSJ9AQZjcuMwUk/fhj9AWUIREvTpV FkLGui+QkTiBqPh18k+FPceV/xU153PY3uM7DHcJXQieeJFkSHsPedpidCVBy2Fy hbt2646Zt2T29UaQPa9htzgqQnN24mdWDQGfeszdooXZMyHSKhGbqo2fYToee4e5 clq9opi3BpVsm7qgpptn+N/meg/gIl/UfpRccisvgXfpf32YNG9VVfFj/7tZnuSS y512ypDhOknj20mathNOMXb/6ppVi6nb3p05l0ZjkcmJ/LwcsVbvQJWDtecRRiqj 6WjKlZ3ubYPlwLdVQHfr7letyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ7IAyv jr2tAdunEmtZ+jzJCqQzMB8GA1UdIwQYMBaAFFRBH+czLS70/ydeWdXe/tHM6WAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJGRi9FM0RDMjlFNjUw REMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2VF9KMTVaMWQ3LTBjenBZ QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFRWY1ek10THZUX0oxNVoxZDctMGN6cFlCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUJGRi9FM0RDMjlFNjUwREMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2 VF9KMTVaMWQ3LTBjenBZQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/5Q4DQIPGyuA+Bv9VNNBRh1bxZgJc5Cw5PCKNkMouAQ6Vo6i2iJHj 9ca7jSX1QLPbWAFOlEeaWN+eVp/88Sh8Ig6NMYbwamfzybtIsNqqbX77SK/dGjJb 1aS1UncBUhrU93gLjgyZ+aAZE2J6BlJ3WYwgJjQa8ovk7DdTArWtMBOiuM9QcW7x z5kq/rYUH1TDx1y4gniBSbmpOgLZS/PG9muo2rwl3Ij5E6FzYH/AV0t28cMx1BT3 hS9+lh68YipuoyRTkZUd7NLhfkkD2tDU9nou1HV28LCPQkTagjfoc+qbPxIoZEpG dcMIAjMCOsZ95+za95XkTj5BQv4f3hr+ -----END CERTIFICATE-----Generated at Fri May 31 06:49:23 2024 by rpki-client on console-ams.rpki-client.org