$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft File: VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json) Hash identifier: oV+jNUIvdLGKQwmdsbLAWx/+ooolSWXk6wj3ITBqsuU= Subject key identifier: E2:CD:EF:80:5E:58:7D:C6:05:62:D8:60:00:D3:CC:45:B7:0F:D1:CE Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft Manifest number: 5A Signing time: Sun 19 May 2024 07:52:16 +0000 Manifest this update: Sun 19 May 2024 07:52:15 +0000 Manifest next update: Sun 26 May 2024 07:52:15 +0000 Files and hashes: 1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: 2TWcS1/qd9rcDQltf5rq/OKpU5evsWyCOuJGlAZrBcM=) 2: 88EF68A493FB11EEB38F6C43C4F9AE02.roa (hash: N7gXYPnxWIl9zdSTmIwWyh3CoXzXJ9+PxoO1xsssmaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: May 19 07:52:15 2024 GMT Not After : May 26 07:52:15 2024 GMT Subject: CN=6649afb0-8590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:0b:65:44:00:ed:8c:e6:42:33:dd:85:26: 65:5b:8c:36:be:e8:5d:4f:77:e1:79:a2:60:4b:b2: 20:70:26:03:a9:3c:10:7a:c0:47:b2:97:01:4d:e1: 75:61:df:1c:d3:dd:b9:ab:4d:23:6b:96:4f:60:7a: 57:26:bc:75:f2:f6:83:e2:c3:c5:5b:08:c2:65:d8: 73:5b:2c:7c:64:d2:e7:51:3e:8a:75:f4:59:57:bd: fb:c0:38:27:8b:35:db:03:1f:e5:48:9f:0b:f5:c5: 47:a9:c0:55:87:ed:5a:9e:38:77:f7:c6:7a:5f:8e: 5a:9c:86:f4:b6:0e:8c:59:16:2b:97:79:8a:6e:de: 9a:99:c6:24:79:1e:9c:6f:9d:92:c2:61:50:f8:15: 07:c2:67:81:8b:5c:60:f3:70:c0:76:ee:13:96:50: 75:dc:ba:91:fa:54:c8:b8:ce:84:14:f0:bc:12:56: 43:f1:87:3c:54:64:43:c6:dd:a5:2e:3b:b2:23:be: c7:c3:d6:75:4d:51:5b:ee:61:08:ec:73:df:ea:81: 17:60:f1:07:dd:d6:ec:33:d7:7a:78:14:8c:b7:f2: 27:62:98:cb:0a:89:51:8c:9f:a7:e2:e8:80:5d:98: fd:27:9c:8d:88:00:1b:14:7b:02:7d:df:32:6a:31: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:EF:80:5E:58:7D:C6:05:62:D8:60:00:D3:CC:45:B7:0F:D1:CE X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bd:d4:32:ef:83:c3:b2:05:33:7d:a4:85:9b:fa:a2:b0:6c: 82:49:01:ba:41:34:bc:25:f2:be:63:50:27:90:d7:41:89:68: f5:c5:d3:58:e1:bf:22:a2:3a:34:c1:d4:d7:d0:23:a5:eb:cd: f1:b0:c3:26:60:ce:b6:d8:32:b1:7a:81:95:fc:11:12:7e:a9: ad:75:0e:f4:7b:1a:a9:30:2f:dc:31:a5:17:a7:75:3d:e7:4f: 05:9b:23:7b:3e:12:dc:ae:16:ac:66:30:7e:e8:4f:2f:49:b6: 7a:db:24:d8:1f:06:40:21:f9:8d:ec:b1:08:3c:05:55:85:de: 86:93:55:7a:5d:31:74:f1:e5:1e:0e:b5:2d:c7:95:95:93:8b: 19:5a:97:a3:ad:06:dc:94:05:0b:a5:16:33:d1:0f:f9:60:9f: 40:22:2b:b4:c2:b7:48:fd:98:aa:0b:01:97:93:ef:5d:02:dd: b1:02:d2:93:82:c3:ae:d7:7d:9d:10:a2:db:e5:dc:a1:68:5f: 6c:83:d5:0f:9c:8a:b4:93:1a:3a:a4:9e:a2:13:83:b0:da:13: fd:d9:e2:bd:4a:16:ba:9d:7c:11:f0:9c:e9:65:ad:e9:b5:d1: a3:cc:5e:5f:91:48:aa:77:1b:95:3b:f6:23:1c:62:fb:81:cc: 66:4b:7b:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjEwMzExMC8GA1UEBRMoNTQ1QzQ3QzBFNDMxMzMzOERDOUI0NDAyQzEyQkFEQ0I0 RTk4NTdDMTAeFw0yNDA1MTkwNzUyMTVaFw0yNDA1MjYwNzUyMTVaMBgxFjAUBgNV BAMTDTY2NDlhZmIwLTg1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCntAtlRADtjOZCM92FJmVbjDa+6F1Pd+F5omBLsiBwJgOpPBB6wEeylwFN4XVh 3xzT3bmrTSNrlk9gelcmvHXy9oPiw8VbCMJl2HNbLHxk0udRPop19FlXvfvAOCeL NdsDH+VInwv1xUepwFWH7VqeOHf3xnpfjlqchvS2DoxZFiuXeYpu3pqZxiR5Hpxv nZLCYVD4FQfCZ4GLXGDzcMB27hOWUHXcupH6VMi4zoQU8LwSVkPxhzxUZEPG3aUu O7IjvsfD1nVNUVvuYQjsc9/qgRdg8Qfd1uwz13p4FIy38idimMsKiVGMn6fi6IBd mP0nnI2IABsUewJ93zJqMU1BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4s3vgF5Y fcYFYthgANPMRbcP0c4wHwYDVR0jBBgwFoAUVFxHwOQxMzjcm0QCwSuty06YV8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMTAzLzJGQjk4NTA4OTNG QjExRUU5NjhFRTQ0MkM0RjlBRTAyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkZ4SHdPUXhNempjbTBRQ3dTdXR5MDZZVjhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC MTAzLzJGQjk4NTA4OTNGQjExRUU5NjhFRTQ0MkM0RjlBRTAyL1ZGeEh3T1F4TXpq Y20wUUN3U3V0eTA2WVY4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFu91DLvg8OyBTN9pIWb+qKwbIJJAbpBNLwl8r5jUCeQ10GJaPXF01jh vyKiOjTB1NfQI6XrzfGwwyZgzrbYMrF6gZX8ERJ+qa11DvR7GqkwL9wxpRendT3n TwWbI3s+EtyuFqxmMH7oTy9JtnrbJNgfBkAh+Y3ssQg8BVWF3oaTVXpdMXTx5R4O tS3HlZWTixlal6OtBtyUBQulFjPRD/lgn0AiK7TCt0j9mKoLAZeT710C3bEC0pOC w67XfZ0Qotvl3KFoX2yD1Q+cirSTGjqknqITg7DaE/3Z4r1KFrqdfBHwnOllrem1 0aPMXl+RSKp3G5U79iMcYvuBzGZLe3I= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org