$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: lz5JtYUH4G/+wmXrQiKZNmNI4MO4NswxCPbKWLpyOIE= Subject key identifier: 3B:99:F2:39:D3:25:C0:AA:AF:A9:26:EC:3C:4D:2C:09:FD:CF:EE:C7 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0689 Signing time: Sat 18 May 2024 23:31:18 +0000 Manifest this update: Sat 18 May 2024 23:31:18 +0000 Manifest next update: Sat 25 May 2024 23:31:18 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: 0VHl09nZyhOXeUkFuF1sgsvS8tCxBqmDg/VcJtaRS8E=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: nYyMrSqjuG22IDygJd+6M5EAOCSTkJYxZab7RxnoUIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: May 18 23:31:18 2024 GMT Not After : May 25 23:31:18 2024 GMT Subject: CN=66493a46-ff33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:52:91:c9:10:16:47:60:bf:dc:15:1a:a5: d6:dc:4e:bf:92:07:ee:d6:31:73:0b:cb:05:b7:dd: 28:24:ce:3a:fb:79:4a:49:22:da:53:b2:21:60:b6: e6:ae:42:ff:48:b2:9a:c1:9d:5d:b4:21:45:63:74: f4:28:79:1f:84:6b:73:f8:72:f9:fa:8d:d0:12:04: e7:d0:27:bb:08:f1:62:24:f9:b0:93:cd:2c:51:68: 18:ab:33:7a:66:3b:41:ae:a8:73:14:08:6d:32:77: 31:4d:8b:6b:10:07:26:5f:7e:f6:7b:fa:6d:46:ca: 17:af:3f:fb:2f:f8:2d:c5:c7:eb:20:66:6f:74:27: d1:db:97:32:94:1f:f1:45:74:09:78:2d:fe:a6:7a: c4:95:0c:9c:40:4d:6c:c6:39:7f:b3:66:2d:da:d7: d3:f4:31:17:c7:79:ec:f5:46:e5:9e:67:f1:02:df: 12:e0:58:d5:f0:b2:0d:39:70:14:2a:e7:90:d5:da: c7:eb:42:cf:e4:12:a6:db:d6:85:75:36:6a:6a:fa: 41:19:58:27:c2:78:d1:38:2a:e1:a5:98:ae:de:65: 42:aa:2d:eb:65:fc:bd:17:9a:7f:7d:48:94:01:e4: 2c:71:a2:66:55:84:29:a9:c4:72:7f:b8:79:5b:d9: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:F2:39:D3:25:C0:AA:AF:A9:26:EC:3C:4D:2C:09:FD:CF:EE:C7 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7d:81:2c:20:01:02:64:9e:c9:85:2f:b9:14:66:3f:39:5e: 50:c5:dd:7b:84:f4:42:e1:7a:5b:d0:cd:14:22:b5:fe:22:7d: 8c:cd:6c:82:60:8a:dc:3a:ad:ba:e9:77:c7:4b:fd:04:09:fa: b3:44:16:c8:a5:52:dd:b2:92:f8:fc:7f:11:71:0f:24:8d:69: 17:aa:6a:1f:7c:0e:2b:a0:37:99:3f:87:2c:a9:6b:c3:25:62: 4e:e7:7f:26:c1:60:fc:63:af:d8:97:94:93:4f:35:34:6f:0f: f9:df:da:67:25:74:22:82:74:91:71:1a:94:0d:42:b6:76:80: 69:f3:5c:f9:8a:6d:c7:7a:46:89:7f:e2:d5:31:6c:cb:0f:4c: 89:87:da:0f:5b:60:9f:37:13:53:4b:b1:73:80:87:bc:c5:d4: cb:f3:2b:b1:b6:d3:c1:f3:2a:a1:b1:4d:7b:e0:2e:00:40:50: cc:c6:19:76:b4:91:d8:19:70:6b:86:13:3d:a9:3d:29:97:11: f7:b7:9e:81:28:75:3a:5d:52:30:72:73:92:17:b5:89:c3:b3: 5b:ce:19:b9:11:e9:b5:81:07:2a:00:73:0a:7c:02:c6:79:64: 6e:dd:88:3a:37:c2:e1:f9:1f:39:03:76:20:43:2c:18:23:cf: 1b:57:b8:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjQwNTE4MjMzMTE4WhcNMjQwNTI1MjMzMTE4WjAYMRYwFAYD VQQDEw02NjQ5M2E0Ni1mZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg5SkckQFkdgv9wVGqXW3E6/kgfu1jFzC8sFt90oJM46+3lKSSLaU7IhYLbm rkL/SLKawZ1dtCFFY3T0KHkfhGtz+HL5+o3QEgTn0Ce7CPFiJPmwk80sUWgYqzN6 ZjtBrqhzFAhtMncxTYtrEAcmX372e/ptRsoXrz/7L/gtxcfrIGZvdCfR25cylB/x RXQJeC3+pnrElQycQE1sxjl/s2Yt2tfT9DEXx3ns9UblnmfxAt8S4FjV8LINOXAU KueQ1drH60LP5BKm29aFdTZqavpBGVgnwnjROCrhpZiu3mVCqi3rZfy9F5p/fUiU AeQscaJmVYQpqcRyf7h5W9mgSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuZ8jnT JcCqr6km7DxNLAn9z+7HMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMfYEsIAECZJ7JhS+5FGY/OV5Qxd17hPRC4Xpb0M0UIrX+In2MzWyC YIrcOq266XfHS/0ECfqzRBbIpVLdspL4/H8RcQ8kjWkXqmoffA4roDeZP4csqWvD JWJO538mwWD8Y6/Yl5STTzU0bw/539pnJXQignSRcRqUDUK2doBp81z5im3HekaJ f+LVMWzLD0yJh9oPW2CfNxNTS7FzgIe8xdTL8yuxttPB8yqhsU174C4AQFDMxhl2 tJHYGXBrhhM9qT0plxH3t56BKHU6XVIwcnOSF7WJw7Nbzhm5Eem1gQcqAHMKfALG eWRu3Yg6N8Lh+R85A3YgQywYI88bV7iS -----END CERTIFICATE-----Generated at Sun May 19 00:16:21 2024 by rpki-client on console-fra.rpki-client.org