$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: lrIs01w13y/ew56WFFEPlkdAeuGgnpq7TfAkPjQGHk4= Subject key identifier: 7E:D5:BD:3D:7C:96:ED:71:0A:59:F5:4B:D9:D6:36:18:87:13:E4:77 Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 40 Signing time: Sun 19 May 2024 08:11:38 +0000 Manifest this update: Sun 19 May 2024 08:11:37 +0000 Manifest next update: Sun 26 May 2024 08:11:37 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: WisbR/LWysRW9vrDX1oB8lwZDldJoxtv+8gN0f4FMXI=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: bbMHV8oCUwtDEkC22H+H7bKfD+4ySH6t4g6oHROy/Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: May 19 08:11:37 2024 GMT Not After : May 26 08:11:37 2024 GMT Subject: CN=6649b43a-f7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a5:36:25:1e:e3:0d:91:c0:b5:64:8e:bc:4c: 50:b4:14:d7:51:fd:6c:f9:05:f4:82:ee:96:d4:9d: b9:91:8b:84:44:e9:88:72:07:e2:61:59:7f:d0:7f: 9d:d5:ab:45:e4:f2:ca:94:34:c7:27:a7:af:af:af: 0a:d4:09:fd:d6:ac:e5:4d:8a:cc:3a:43:1d:f4:80: d7:1f:48:b1:b7:56:07:5a:a0:b5:95:8a:9a:e6:b1: 17:7c:e3:7c:35:8a:ee:bc:ef:72:b7:e0:17:8a:3a: e3:03:5d:8c:34:02:f6:4b:3c:c9:5d:fe:7b:59:9a: 80:40:d6:a4:6b:95:3d:d0:03:b2:b4:40:3a:17:fd: cd:19:74:d0:90:1b:80:c4:77:5f:46:b8:32:bc:a3: 6a:6e:a1:d4:68:98:ad:87:bd:87:2b:a0:30:50:ea: 0f:59:3d:f1:36:e7:5a:46:b9:25:4e:31:ce:b6:ad: 0c:8a:a5:c5:7c:fb:f2:5b:4c:59:44:ef:42:ba:b3: 18:af:79:9b:9b:46:cd:00:83:11:c3:e1:de:0e:97: 7d:46:78:3d:09:de:ed:24:44:58:e2:e7:70:69:97: ac:4c:37:9f:23:ef:5e:1c:66:ec:8c:0b:49:65:5f: 3b:f5:b1:31:fd:a1:88:a8:70:69:41:45:31:51:5a: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D5:BD:3D:7C:96:ED:71:0A:59:F5:4B:D9:D6:36:18:87:13:E4:77 X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3c:90:f5:41:b7:22:7e:a4:72:f3:5a:fa:b3:fd:b0:96:71: 05:03:ad:dc:3c:dd:5c:c4:41:31:63:97:fa:81:13:5a:cc:ae: 9f:26:dc:7b:b5:1d:8b:9b:5d:4c:c4:61:f1:b3:a6:c9:98:1b: 1b:87:bc:1f:fe:e3:07:e3:e2:3a:36:77:1d:0e:a0:e9:12:c3: 08:05:a4:2c:ff:05:03:66:b1:d4:29:54:1f:5c:02:b8:9a:1b: 3a:5f:a2:93:63:ed:5d:26:e8:b1:be:16:c5:df:86:84:27:94: 08:33:f9:9a:9e:3c:a1:e4:b1:bb:d4:e2:f4:bb:0f:e9:a8:03: 5d:6d:b7:3a:1b:ec:aa:d8:58:e5:6a:fc:93:ae:ae:5f:8e:94: 7b:2a:ed:ab:5e:31:a4:ed:ea:e3:54:2a:3f:05:5d:7d:b2:78: ea:23:5f:6b:87:5e:1a:7d:7e:e8:ff:b6:d9:fe:f9:ee:37:67: 93:b0:ab:c3:c5:85:9e:48:20:5d:e0:78:5c:88:34:5a:17:9c: 88:d6:09:cc:bd:4b:58:46:4b:45:02:c7:a4:f0:9a:ab:11:15: 34:58:a6:61:9f:3e:a7:b4:43:b1:07:ad:60:4a:31:b9:cf:dc: f3:be:65:8b:49:9b:dd:59:7f:3b:72:a9:71:25:65:56:ef:2f: 33:c5:2b:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkQ1QTExMC8GA1UEBRMoMzNFNTQyNUQwMzY4RjgyRkY4NUI5Qjg0N0Y0MTIzOEFE NThENEU1MDAeFw0yNDA1MTkwODExMzdaFw0yNDA1MjYwODExMzdaMBgxFjAUBgNV BAMTDTY2NDliNDNhLWY3ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3pTYlHuMNkcC1ZI68TFC0FNdR/Wz5BfSC7pbUnbmRi4RE6YhyB+JhWX/Qf53V q0Xk8sqUNMcnp6+vrwrUCf3WrOVNisw6Qx30gNcfSLG3VgdaoLWViprmsRd843w1 iu6873K34BeKOuMDXYw0AvZLPMld/ntZmoBA1qRrlT3QA7K0QDoX/c0ZdNCQG4DE d19GuDK8o2puodRomK2HvYcroDBQ6g9ZPfE251pGuSVOMc62rQyKpcV8+/JbTFlE 70K6sxiveZubRs0AgxHD4d4Ol31GeD0J3u0kRFji53Bpl6xMN58j714cZuyMC0ll Xzv1sTH9oYiocGlBRTFRWiXdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUftW9PXyW 7XEKWfVL2dY2GIcT5HcwHwYDVR0jBBgwFoAUM+VCXQNo+C/4W5uEf0EjitWNTlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRDVBLzVGQjdEQzA4QjlB QTExRUVCMERDRDgzNEM0RjlBRTAyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTS1WQ1hRTm8tQ180VzV1RWYwRWppdFdOVGxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RDVBLzVGQjdEQzA4QjlBQTExRUVCMERDRDgzNEM0RjlBRTAyL00tVkNYUU5vLUNf NFc1dUVmMEVqaXRXTlRsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGQ8kPVBtyJ+pHLzWvqz/bCWcQUDrdw83VzEQTFjl/qBE1rMrp8m3Hu1 HYubXUzEYfGzpsmYGxuHvB/+4wfj4jo2dx0OoOkSwwgFpCz/BQNmsdQpVB9cAria GzpfopNj7V0m6LG+FsXfhoQnlAgz+ZqePKHksbvU4vS7D+moA11ttzob7KrYWOVq /JOurl+OlHsq7ateMaTt6uNUKj8FXX2yeOojX2uHXhp9fuj/ttn++e43Z5Owq8PF hZ5IIF3geFyINFoXnIjWCcy9S1hGS0UCx6TwmqsRFTRYpmGfPqe0Q7EHrWBKMbnP 3PO+ZYtJm91ZfztyqXElZVbvLzPFK44= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org