$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: ZJ6y6LwGGf5OGu2bp68Dxis72+otnkJNl0xbK2rULQo= Subject key identifier: E3:B0:AC:98:08:A9:A4:50:9A:53:F6:2F:25:39:90:BB:CA:10:64:B6 Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: DE Signing time: Wed 01 May 2024 06:39:43 +0000 Manifest this update: Wed 01 May 2024 06:39:43 +0000 Manifest next update: Wed 08 May 2024 06:39:43 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: 7rkZP9nboMiygfnwf8h+ssT/Hd56zroa/rewm4H7TBE=) 2: C7F5369E1F0E11EEB735227CC4F9AE02.roa (hash: yZxOQZbt1qm5wf6p8v9qV1eaduMTSBW1+4/4dChRR5w=) 3: C71C2F161F0E11EEB735227CC4F9AE02.roa (hash: Ak1F1utzEX2wg4axKVI0PBKyQs0POSoVY4cEk+BjXXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: May 1 06:39:43 2024 GMT Not After : May 8 06:39:43 2024 GMT Subject: CN=6631e3af-b7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:d3:01:7e:09:dc:37:4a:43:cc:bb:61:b1: 15:c7:7f:d1:d9:2f:db:50:b9:14:07:2e:83:1b:e3: 7f:c6:88:7f:a9:5c:9a:90:a3:a0:c5:a9:c7:b7:bc: 18:2a:36:2f:99:1d:a7:0f:a9:26:90:7f:8e:c2:2e: 92:16:b5:2c:11:ba:2a:d5:06:1f:27:d7:37:e2:57: 1e:59:27:39:67:ec:cf:95:88:dc:35:fa:bd:ff:2f: eb:e3:69:c4:8e:02:8e:69:0b:f8:e5:5d:db:12:38: a3:71:89:57:a3:78:1b:40:6a:10:99:3a:aa:b2:22: 11:c8:c1:12:49:61:1d:5e:a8:2a:98:8e:06:9e:0b: 1e:89:e1:e5:a5:90:50:d5:ae:59:5f:b7:bc:1f:00: df:07:15:ca:e5:f0:32:4a:35:0b:09:1a:95:f9:f3: 9e:9d:f1:ee:32:44:d3:85:95:1c:f0:3a:b9:5d:37: c4:80:e7:b4:3f:ef:f5:07:14:a7:fa:55:62:74:9d: 62:c5:7f:cd:34:5e:8d:9a:df:cb:8f:db:5a:9d:75: 7e:6c:09:0a:b9:29:31:80:2b:2e:ce:c3:24:18:77: 44:c2:ae:4f:4d:3f:2e:bb:3d:e7:2c:0f:24:7f:4b: 5b:4b:b7:14:a7:eb:1f:dc:a8:2e:ed:c4:de:74:af: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:AC:98:08:A9:A4:50:9A:53:F6:2F:25:39:90:BB:CA:10:64:B6 X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:52:d7:07:31:d4:bb:63:ff:9a:9b:13:e4:c5:63:3b:03:55: 0e:7d:1c:90:d1:96:65:e2:dc:8a:24:3c:79:72:a4:d3:a0:92: 5f:ba:f1:19:af:60:23:0f:cf:a8:5f:c7:25:7b:94:9a:8f:ff: b9:46:5b:50:1e:56:9d:6a:1d:c4:05:5d:77:ac:7c:1a:fb:f3: ec:78:b6:89:5a:60:8a:0a:1d:ab:00:25:0a:d2:f8:ce:64:bc: c0:04:ca:de:e2:d8:e8:14:86:ce:d5:bb:64:f8:71:74:60:a7: 12:ae:d7:19:99:29:06:11:34:a8:4d:62:e6:40:a5:77:e0:c8: 4c:4c:b7:c4:32:76:75:ae:ea:6b:79:4f:df:8c:98:1a:15:c8: a8:43:11:fc:53:b8:56:c2:a4:7a:e2:db:aa:53:d4:58:31:92: a3:53:3b:02:86:84:83:84:b4:01:77:16:55:cd:b7:11:ee:3a: c4:73:75:af:89:6c:3f:b7:c5:cf:a7:98:89:25:af:cd:76:59: 41:c9:7c:95:93:c3:0e:ba:1b:51:51:f8:86:af:e9:12:a9:bc: ca:bd:d7:f1:5e:a3:6b:ef:08:11:9c:7a:a3:f1:7f:41:f3:4a: 00:75:57:84:20:6e:76:9b:53:6c:74:a7:06:00:4f:09:ad:15: 59:22:e8:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjQwNTAxMDYzOTQzWhcNMjQwNTA4MDYzOTQzWjAYMRYwFAYD VQQDEw02NjMxZTNhZi1iN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHPTAX4J3DdKQ8y7YbEVx3/R2S/bULkUBy6DG+N/xoh/qVyakKOgxanHt7wY KjYvmR2nD6kmkH+Owi6SFrUsEboq1QYfJ9c34lceWSc5Z+zPlYjcNfq9/y/r42nE jgKOaQv45V3bEjijcYlXo3gbQGoQmTqqsiIRyMESSWEdXqgqmI4GngseieHlpZBQ 1a5ZX7e8HwDfBxXK5fAySjULCRqV+fOenfHuMkTThZUc8Dq5XTfEgOe0P+/1BxSn +lVidJ1ixX/NNF6Nmt/Lj9tanXV+bAkKuSkxgCsuzsMkGHdEwq5PTT8uuz3nLA8k f0tbS7cUp+sf3Kgu7cTedK/pswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOwrJgI qaRQmlP2LyU5kLvKEGS2MB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZUtcHMdS7Y/+amxPkxWM7A1UOfRyQ0ZZl4tyKJDx5cqTToJJfuvEZ r2AjD8+oX8cle5Saj/+5RltQHladah3EBV13rHwa+/PseLaJWmCKCh2rACUK0vjO ZLzABMre4tjoFIbO1btk+HF0YKcSrtcZmSkGETSoTWLmQKV34MhMTLfEMnZ1rupr eU/fjJgaFcioQxH8U7hWwqR64tuqU9RYMZKjUzsChoSDhLQBdxZVzbcR7jrEc3Wv iWw/t8XPp5iJJa/NdllByXyVk8MOuhtRUfiGr+kSqbzKvdfxXqNr7wgRnHqj8X9B 80oAdVeEIG52m1NsdKcGAE8JrRVZIuhT -----END CERTIFICATE-----Generated at Wed May 1 07:55:37 2024 by rpki-client on console-fra.rpki-client.org