$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: +pvxc5wHX/Ssp/UcmpH9urDESwV7Jd1I156PWsUn1lw= Subject key identifier: 09:86:0D:F6:9B:94:A2:98:9C:0D:F0:14:E3:1E:96:67:32:0B:70:C2 Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0E94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0E8B Signing time: Sat 18 May 2024 18:21:27 +0000 Manifest this update: Sat 18 May 2024 18:21:27 +0000 Manifest next update: Sat 25 May 2024 18:21:27 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: dmr3Z7xhqq2HirP7lKmzwCE/pkLsmm8UNDfwgKx86Mo=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: I20RLGmkdmlwjd5bnF4wvgNMsnATdYZyRn+jpRdiZqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3732 (0xe94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: May 18 18:21:27 2024 GMT Not After : May 25 18:21:27 2024 GMT Subject: CN=6648f1a7-aa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:1a:a4:c9:d7:32:5a:27:1f:7c:65:e0:0c: 19:fe:be:30:12:f1:79:10:63:b9:b3:24:b0:6d:d1: f3:f7:91:7c:98:d9:04:f3:ee:61:79:ea:f6:3d:e2: 3c:32:82:70:fe:ec:16:ef:34:70:cf:32:33:6e:7a: df:2f:11:19:86:34:fa:a4:69:bd:97:76:37:90:ce: 18:e1:ab:1d:c5:81:c3:e4:ab:6e:53:72:42:65:87: 21:34:3f:9f:53:50:a3:50:37:3a:cd:82:99:f1:db: 64:36:f5:ad:66:a0:66:a7:0e:db:b0:03:95:a1:d3: 1f:4f:a1:54:45:71:b1:a6:8a:db:61:a0:49:17:e0: a7:03:3c:fb:40:09:00:e8:3b:f8:13:f7:98:ae:75: c0:73:f9:84:c3:4d:ac:83:88:de:ef:46:87:8f:de: 01:e9:1a:10:58:97:a9:6d:b3:96:68:11:b7:4c:fc: b9:c0:2a:20:f4:3c:8e:a7:ef:7a:09:4c:bc:81:21: 69:f2:7b:00:75:c7:8d:6c:a1:55:f3:89:7a:d3:15: 5e:e2:97:e7:3c:d4:4f:27:cf:1f:a1:42:24:bf:59: aa:70:a1:31:6c:42:e6:f7:cf:93:90:73:4e:56:f6: f5:dd:17:61:84:e3:34:aa:3f:12:44:df:2e:4f:00: 3e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:86:0D:F6:9B:94:A2:98:9C:0D:F0:14:E3:1E:96:67:32:0B:70:C2 X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5c:a7:25:7d:42:2d:6e:c7:08:67:34:77:2b:fc:df:48:c4: 2d:ae:3a:ff:c5:77:af:82:a0:f9:62:be:a1:30:b1:d4:16:00: 3c:a4:65:e5:32:35:cb:25:0e:72:b3:35:b9:4c:b7:bd:ce:6e: bd:83:06:03:a7:1f:02:a3:06:ce:b8:29:c8:a8:e0:8f:87:f9: 96:51:59:66:e3:62:d4:ee:15:9e:22:c5:75:ee:75:8e:b8:6b: dd:8b:7d:b1:05:9f:70:e8:71:ee:20:06:cd:83:6b:58:e3:69: 92:b2:4c:bb:af:c1:ad:be:b7:f2:c3:d2:b0:f8:82:81:a8:83: a9:7d:0c:de:bf:70:d1:f5:d6:e6:4d:de:40:e9:e7:b3:67:75: 87:36:48:25:d6:69:3f:51:87:c6:58:3e:1b:ce:9b:5e:7e:01: 90:b4:02:e1:fc:de:8b:b2:64:35:4a:01:75:19:3e:41:68:9b: 93:f0:c2:77:75:ac:6b:ae:ff:60:c1:b8:16:79:f1:d0:9b:91: 54:1c:a1:ee:96:f0:c7:0c:05:09:f2:85:d4:83:46:81:45:3a: 1a:30:f1:15:0e:c7:9d:2b:14:44:78:2e:ab:14:bf:10:35:ca: 72:32:fe:a5:58:06:c2:1e:95:e3:7e:73:10:fe:15:ba:3b:3a: 37:96:59:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjQwNTE4MTgyMTI3WhcNMjQwNTI1MTgyMTI3WjAYMRYwFAYD VQQDEw02NjQ4ZjFhNy1hYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqsapMnXMlonH3xl4AwZ/r4wEvF5EGO5sySwbdHz95F8mNkE8+5heer2PeI8 MoJw/uwW7zRwzzIzbnrfLxEZhjT6pGm9l3Y3kM4Y4asdxYHD5KtuU3JCZYchND+f U1CjUDc6zYKZ8dtkNvWtZqBmpw7bsAOVodMfT6FURXGxporbYaBJF+CnAzz7QAkA 6Dv4E/eYrnXAc/mEw02sg4je70aHj94B6RoQWJepbbOWaBG3TPy5wCog9DyOp+96 CUy8gSFp8nsAdceNbKFV84l60xVe4pfnPNRPJ88foUIkv1mqcKExbELm98+TkHNO Vvb13RdhhOM0qj8SRN8uTwA+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmGDfab lKKYnA3wFOMelmcyC3DCMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGXKclfUItbscIZzR3K/zfSMQtrjr/xXevgqD5Yr6hMLHUFgA8pGXl MjXLJQ5yszW5TLe9zm69gwYDpx8CowbOuCnIqOCPh/mWUVlm42LU7hWeIsV17nWO uGvdi32xBZ9w6HHuIAbNg2tY42mSsky7r8Gtvrfyw9Kw+IKBqIOpfQzev3DR9dbm Td5A6eezZ3WHNkgl1mk/UYfGWD4bzptefgGQtALh/N6LsmQ1SgF1GT5BaJuT8MJ3 daxrrv9gwbgWefHQm5FUHKHulvDHDAUJ8oXUg0aBRToaMPEVDsedKxREeC6rFL8Q NcpyMv6lWAbCHpXjfnMQ/hW6Ozo3lllY -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org