$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: ZD73qGwseTyAFrhV8wPZm8EA5YUCtS2IxNp+DUdJ0Zw= Subject key identifier: 05:E4:1E:E0:E6:3E:4D:B8:38:1C:C2:A1:55:F9:B5:45:CA:B8:F7:D5 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0C3E Signing time: Sat 18 May 2024 18:57:52 +0000 Manifest this update: Sat 18 May 2024 18:57:51 +0000 Manifest next update: Sat 25 May 2024 18:57:51 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: jHRZLy9ouIDFG9ZK+GcOJN+IiVpFf6rGy8Hd27Re4X8=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: EZlV5I8OJbq3/1fro9aY1nbM1EhKkQZAedazUY1zJHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: May 18 18:57:51 2024 GMT Not After : May 25 18:57:51 2024 GMT Subject: CN=6648fa30-0ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:b0:7b:d7:27:e4:a4:e9:f7:63:61:db:40: 38:82:f7:f5:84:73:f6:b5:f1:64:39:31:73:98:d9: 48:40:92:4e:d6:d2:8e:df:5d:90:a2:7d:3b:34:f1: 6e:8f:aa:e7:aa:70:0a:11:39:9e:81:a3:f3:ff:25: 8c:f9:b3:2a:27:8f:59:28:db:1a:f7:ab:25:aa:73: fb:00:97:0e:23:c9:f0:30:0b:b9:bd:a4:20:13:54: dc:cf:d6:46:e4:1f:2e:3a:65:06:e4:c0:ea:da:b3: dd:9e:08:d4:73:f3:2b:97:41:b1:69:67:12:f6:1b: f5:21:b6:86:e3:34:8c:77:14:e2:4b:6d:be:e3:02: f3:5b:9b:19:3e:71:3c:91:e4:0a:19:4c:e2:5d:fb: 01:4d:91:64:fd:5b:68:37:c2:30:eb:8f:17:1f:7a: d8:79:f7:dd:aa:fd:ac:40:fb:47:45:8c:90:45:69: f4:4d:3b:36:2b:42:d4:36:34:e2:e7:d8:35:14:e5: 16:27:22:85:ce:93:a4:de:81:86:e7:36:20:67:95: ef:49:af:80:ce:5e:62:0c:15:19:ce:96:60:8c:75: 6a:13:9d:5b:8b:f3:7e:ec:76:01:09:33:d6:df:40: 42:27:51:05:46:00:8f:14:5f:94:2c:5b:bf:f5:db: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:1E:E0:E6:3E:4D:B8:38:1C:C2:A1:55:F9:B5:45:CA:B8:F7:D5 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a5:4e:e7:92:61:90:94:b8:c4:ac:00:9c:66:29:f8:de:19: 60:a7:6b:fd:68:7d:fc:dc:60:85:26:39:0d:a1:6b:bc:cc:e7: 64:6c:9b:c7:e0:79:4a:34:9c:23:b1:c2:30:ae:11:83:b9:e5: 61:19:85:00:4b:07:1e:37:6d:87:1f:b3:48:b3:5a:94:53:7a: 42:5b:67:f1:9e:ce:96:fd:71:dc:19:31:6c:6a:51:7c:ec:da: 3f:3b:e8:2f:6d:25:84:dc:6c:c6:88:b4:9a:2e:69:37:8c:c2: 71:ba:75:1c:19:f5:c6:81:0a:e8:f7:9f:b8:cd:1b:80:d1:86: 4f:60:f6:c6:78:28:5b:05:c8:b4:d2:1f:f7:cb:2c:69:f3:5a: f4:5b:be:be:99:56:00:9f:6d:42:4f:ea:5c:37:e9:58:33:b5: 2b:ae:75:7b:4a:02:59:82:98:08:76:11:60:9e:1c:a2:47:fe: 34:f9:45:59:59:9e:05:24:6c:74:f4:94:4e:69:05:7c:d2:77: 84:f4:1e:1b:cc:57:f6:b2:7a:b6:de:a1:60:04:52:10:e8:65: e3:1e:71:68:fe:3a:fe:4d:f8:42:63:a7:6b:2a:31:4c:84:4c: f1:03:79:5b:7e:85:84:93:c2:95:06:54:42:4b:61:d1:35:60: de:bf:0c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjQwNTE4MTg1NzUxWhcNMjQwNTI1MTg1NzUxWjAYMRYwFAYD VQQDEw02NjQ4ZmEzMC0wY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoqwe9cn5KTp92Nh20A4gvf1hHP2tfFkOTFzmNlIQJJO1tKO312Qon07NPFu j6rnqnAKETmegaPz/yWM+bMqJ49ZKNsa96slqnP7AJcOI8nwMAu5vaQgE1Tcz9ZG 5B8uOmUG5MDq2rPdngjUc/Mrl0GxaWcS9hv1IbaG4zSMdxTiS22+4wLzW5sZPnE8 keQKGUziXfsBTZFk/VtoN8Iw648XH3rYeffdqv2sQPtHRYyQRWn0TTs2K0LUNjTi 59g1FOUWJyKFzpOk3oGG5zYgZ5XvSa+Azl5iDBUZzpZgjHVqE51bi/N+7HYBCTPW 30BCJ1EFRgCPFF+ULFu/9duaOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXkHuDm Pk24OBzCoVX5tUXKuPfVMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtpU7nkmGQlLjErACcZin43hlgp2v9aH383GCFJjkNoWu8zOdkbJvH 4HlKNJwjscIwrhGDueVhGYUASwceN22HH7NIs1qUU3pCW2fxns6W/XHcGTFsalF8 7No/O+gvbSWE3GzGiLSaLmk3jMJxunUcGfXGgQro95+4zRuA0YZPYPbGeChbBci0 0h/3yyxp81r0W76+mVYAn21CT+pcN+lYM7UrrnV7SgJZgpgIdhFgnhyiR/40+UVZ WZ4FJGx09JROaQV80neE9B4bzFf2snq23qFgBFIQ6GXjHnFo/jr+TfhCY6drKjFM hEzxA3lbfoWEk8KVBlRCS2HRNWDevwwI -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org