$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: 756YK1xgnbbnBh0A/EIgyqYsCoCTifR902nk2srL4M4= Subject key identifier: 95:44:78:2D:FE:DD:F4:83:4F:88:C0:F7:6B:37:25:F6:9B:A5:D5:B1 Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 4F56 Signing time: Sat 18 May 2024 15:29:37 +0000 Manifest this update: Sat 18 May 2024 15:29:36 +0000 Manifest next update: Sat 25 May 2024 15:29:36 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: 3+gbnE8+eQniwrSAMRjgZFMy01yZUJFS/YILWubZQVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7064 (0x1b98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: May 18 15:29:36 2024 GMT Not After : May 25 15:29:36 2024 GMT Subject: CN=6648c961-3af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bb:30:5e:bf:e6:90:10:da:f5:46:11:c1:b2: 49:6a:d6:30:f2:49:c0:37:fb:e6:8d:63:7c:e0:33: 54:1c:3d:12:f0:23:2b:d1:7f:86:7e:13:2b:8a:5f: f7:d1:85:81:e1:41:78:d7:fb:ac:e9:66:24:2a:b1: f6:8d:de:41:21:ca:cb:21:5e:d5:f5:82:3a:df:1b: 86:65:37:ec:42:9b:32:26:7d:2a:a3:7b:3c:47:cd: 38:ac:24:45:d1:ce:6a:b7:59:2b:88:9a:a2:4f:df: 9e:0b:33:58:06:a1:33:e5:ab:50:ab:50:87:ee:e7: 04:f3:cf:ac:23:b0:ba:a2:7d:87:9c:de:cc:00:31: 22:d6:68:b7:a6:b0:1d:b4:1f:a5:f9:97:1d:5b:78: cf:31:b4:74:91:52:99:a4:fd:ba:19:1c:3b:37:f6: 1b:97:71:f1:8c:ac:4d:ca:40:0b:1f:42:67:99:5d: 67:c6:61:b8:88:9b:6c:ea:69:45:0b:30:81:5c:29: ec:9e:59:87:ef:a0:f6:3f:09:87:97:04:52:01:40: 77:a8:1a:cb:d9:42:a7:49:41:90:3b:37:6e:04:55: e4:3d:4a:a9:38:83:a8:b6:31:f7:eb:3e:06:a7:bf: 70:38:6d:08:96:e4:1d:29:c7:c0:ef:dc:5c:d9:4f: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:78:2D:FE:DD:F4:83:4F:88:C0:F7:6B:37:25:F6:9B:A5:D5:B1 X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:33:77:7b:16:d0:fe:b1:8e:df:62:62:a4:bd:8e:48:50:cb: a3:d7:60:af:24:b4:43:ab:a0:f9:3f:5b:6f:66:b2:97:dd:ff: 2d:97:5f:5d:c5:ee:7d:1d:9b:3f:41:ca:b5:37:4c:54:13:37: 61:4b:f6:83:3a:25:44:23:1d:85:30:ab:3f:02:8e:f5:16:f2: 03:0b:53:d2:bd:09:73:52:4c:20:14:cf:0f:9b:df:5b:4f:f3: 87:3f:9d:bd:33:c3:0e:f5:9b:3c:42:e7:48:39:5a:c2:6c:07: 33:d8:51:35:29:83:52:65:93:65:ee:31:d7:ce:18:66:74:00: 7b:f9:c6:fc:94:85:f8:19:c6:75:24:f4:b0:f7:49:c4:cf:15: 10:ab:16:0f:68:96:a4:0c:94:63:4f:b4:a4:3b:f1:7d:0d:87: 67:2e:3b:a3:8e:20:a1:4a:ed:89:ea:e6:bc:67:e1:2d:f0:7f: 1c:7d:50:dd:7d:a9:c6:d4:89:82:5a:59:0f:f7:00:38:a8:7c: 58:b6:f5:eb:cf:9f:13:a4:db:f9:a8:1b:28:5c:4d:87:1f:04: de:6a:77:33:78:99:1e:ee:3c:b5:69:15:d6:72:65:5a:86:f5: 21:e6:11:d1:54:1e:79:04:40:60:15:0e:d9:dc:af:26:d2:aa: d5:f6:fe:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjQwNTE4MTUyOTM2WhcNMjQwNTI1MTUyOTM2WjAYMRYwFAYD VQQDEw02NjQ4Yzk2MS0zYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bswXr/mkBDa9UYRwbJJatYw8knAN/vmjWN84DNUHD0S8CMr0X+GfhMril/3 0YWB4UF41/us6WYkKrH2jd5BIcrLIV7V9YI63xuGZTfsQpsyJn0qo3s8R804rCRF 0c5qt1kriJqiT9+eCzNYBqEz5atQq1CH7ucE88+sI7C6on2HnN7MADEi1mi3prAd tB+l+ZcdW3jPMbR0kVKZpP26GRw7N/Ybl3HxjKxNykALH0JnmV1nxmG4iJts6mlF CzCBXCnsnlmH76D2PwmHlwRSAUB3qBrL2UKnSUGQOzduBFXkPUqpOIOotjH36z4G p79wOG0IluQdKcfA79xc2U/LXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVEeC3+ 3fSDT4jA92s3JfabpdWxMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqM3d7FtD+sY7fYmKkvY5IUMuj12CvJLRDq6D5P1tvZrKX3f8tl19d xe59HZs/Qcq1N0xUEzdhS/aDOiVEIx2FMKs/Ao71FvIDC1PSvQlzUkwgFM8Pm99b T/OHP529M8MO9Zs8QudIOVrCbAcz2FE1KYNSZZNl7jHXzhhmdAB7+cb8lIX4GcZ1 JPSw90nEzxUQqxYPaJakDJRjT7SkO/F9DYdnLjujjiChSu2J6ua8Z+Et8H8cfVDd fanG1ImCWlkP9wA4qHxYtvXrz58TpNv5qBsoXE2HHwTeanczeJke7jy1aRXWcmVa hvUh5hHRVB55BEBgFQ7Z3K8m0qrV9v5N -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org