$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: T95uqEqoDJQGLD7uMFO5W8MLmxVyNi2veNB3Qylg9j0= Subject key identifier: 06:93:64:0B:1B:CB:B3:CA:9D:4A:BE:8E:14:2A:6E:DB:1A:82:EE:0A Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0B44 Signing time: Sat 04 May 2024 19:54:25 +0000 Manifest this update: Sat 04 May 2024 19:54:25 +0000 Manifest next update: Sat 11 May 2024 19:54:25 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: HPs9Jhy+6KVzEBlzPil1O0Hr0OTXYcfsWut2xChAkaw=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: sJkbQDeSeXtJuYHcNJBC0T5JShrZuLAiCD5cpNfEZrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2893 (0xb4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: May 4 19:54:25 2024 GMT Not After : May 11 19:54:25 2024 GMT Subject: CN=66369271-5ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:57:e4:4c:d5:68:e5:a4:35:02:97:f7:aa: b7:36:19:8a:39:5a:a0:d9:6f:70:72:d7:c4:bf:b7: 6e:f0:28:50:2f:27:23:34:e3:47:cf:90:9a:bc:cc: 93:ca:8b:c7:4d:f8:0a:87:80:28:0b:45:11:4e:f7: 13:69:dd:ad:d3:ad:cb:80:45:5b:68:e8:cb:29:85: 90:95:fd:18:44:2a:37:de:15:e8:c0:80:2a:7c:23: 2c:a9:af:5a:6e:6f:1b:24:15:2f:7a:58:a8:5d:93: 0a:9e:f7:27:ac:de:49:e9:19:c6:c6:9f:89:b4:f6: 06:09:ec:50:7b:70:8c:43:16:b2:43:64:91:5e:07: 1e:54:4a:e4:84:2a:ad:d4:0e:c5:29:77:44:57:0f: 6c:4e:c0:25:57:59:ca:19:40:60:2a:0d:fd:68:33: 99:88:be:c1:2f:4d:c6:b0:d0:fb:5b:b5:16:38:e6: 17:2a:67:7f:42:27:04:02:eb:48:7b:6e:ed:c3:23: 2d:e1:23:4b:23:c7:07:29:a8:ed:11:70:5a:aa:fc: d7:ac:0e:fd:bb:d1:a0:d8:e7:fe:ee:18:50:53:72: bc:eb:b3:e6:8d:9e:f5:81:da:65:34:42:fa:1b:ce: 30:28:b0:18:ae:2a:47:87:04:93:e1:f9:7a:84:bf: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:93:64:0B:1B:CB:B3:CA:9D:4A:BE:8E:14:2A:6E:DB:1A:82:EE:0A X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a7:89:a3:d0:8d:c5:8b:53:d9:c7:5d:47:f6:a6:3d:c9:18: 56:ef:2c:96:7f:1f:77:e7:e4:8b:52:5c:10:d1:c2:3d:d7:c1: 8d:57:5a:8f:b5:9c:04:e4:24:94:fd:e9:18:29:9f:70:a6:08: 68:d3:1f:fe:fc:57:76:80:d9:07:fc:d8:d5:27:23:41:2a:8e: ae:ec:70:dd:f4:38:01:e7:6e:b3:b2:2a:7a:fb:28:10:fa:0a: 4e:f0:e4:5b:69:e7:58:92:60:80:a8:9f:b3:b5:f8:1e:bc:99: 10:21:ca:cf:9f:b9:ed:01:f4:95:b3:d0:a1:40:12:67:05:e6: eb:2f:bc:dd:4c:b5:84:09:38:f2:56:d1:f5:43:08:d6:3c:4c: 29:71:78:1c:66:27:b9:d1:dc:39:0a:83:6d:c6:be:3f:a1:17: d7:7c:29:e8:55:d2:79:81:b2:0b:69:9a:c4:67:77:70:ca:30: fa:05:80:80:90:51:90:5e:ed:68:d8:a3:27:bb:d0:f7:f9:64: 3d:3a:5b:3c:1a:3a:2b:ff:3f:34:7a:9c:e7:a2:b8:a3:a1:93: 5e:63:66:22:86:5d:3a:bb:66:11:90:66:38:12:34:8c:36:52: 77:81:17:37:00:f9:f9:36:09:cc:81:93:dd:67:7b:3f:20:84: 62:90:96:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjQwNTA0MTk1NDI1WhcNMjQwNTExMTk1NDI1WjAYMRYwFAYD VQQDEw02NjM2OTI3MS01ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s5X5EzVaOWkNQKX96q3NhmKOVqg2W9wctfEv7du8ChQLycjNONHz5CavMyT yovHTfgKh4AoC0URTvcTad2t063LgEVbaOjLKYWQlf0YRCo33hXowIAqfCMsqa9a bm8bJBUvelioXZMKnvcnrN5J6RnGxp+JtPYGCexQe3CMQxayQ2SRXgceVErkhCqt 1A7FKXdEVw9sTsAlV1nKGUBgKg39aDOZiL7BL03GsND7W7UWOOYXKmd/QicEAutI e27twyMt4SNLI8cHKajtEXBaqvzXrA79u9Gg2Of+7hhQU3K867PmjZ71gdplNEL6 G84wKLAYripHhwST4fl6hL9RwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaTZAsb y7PKnUq+jhQqbtsagu4KMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGp4mj0I3Fi1PZx11H9qY9yRhW7yyWfx935+SLUlwQ0cI918GNV1qP tZwE5CSU/ekYKZ9wpgho0x/+/Fd2gNkH/NjVJyNBKo6u7HDd9DgB526zsip6+ygQ +gpO8ORbaedYkmCAqJ+ztfgevJkQIcrPn7ntAfSVs9ChQBJnBebrL7zdTLWECTjy VtH1QwjWPEwpcXgcZie50dw5CoNtxr4/oRfXfCnoVdJ5gbILaZrEZ3dwyjD6BYCA kFGQXu1o2KMnu9D3+WQ9Ols8Gjor/z80epznorijoZNeY2Yihl06u2YRkGY4EjSM NlJ3gRc3APn5NgnMgZPdZ3s/IIRikJbV -----END CERTIFICATE-----Generated at Sat May 4 20:37:04 2024 by rpki-client on console-fra.rpki-client.org