$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: UL1pMLJIGRVP6X8DLVVharByDaxrZ5BPxQgHVsZ+loc= Subject key identifier: 18:D6:3A:EE:EE:79:5B:8D:EB:C4:BF:DB:18:94:FB:7E:86:B2:3B:DE Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 3B Signing time: Wed 15 May 2024 08:26:44 +0000 Manifest this update: Wed 15 May 2024 08:26:43 +0000 Manifest next update: Wed 22 May 2024 08:26:43 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: /aWLSIuic49R+GWAy90TihNZipfvOmNVbyc5ipVCAmk=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: /3mHHQ5ywC61lDBuvznFXCgZZLB0pg7SUYIieP44Gxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: May 15 08:26:43 2024 GMT Not After : May 22 08:26:43 2024 GMT Subject: CN=664471c3-ee33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:c1:5f:35:81:3f:c8:9a:e5:cf:b4:57:2b: 5e:fb:cf:c8:af:1d:ef:28:50:54:28:9e:67:34:00: c9:0e:04:71:f5:1a:94:9f:bb:b8:11:aa:68:5a:e7: 74:a6:ee:22:fa:c1:18:dd:3c:f6:4f:a7:a4:ec:34: b0:e0:64:de:84:75:fa:77:f9:c8:e1:b3:a9:a0:62: ec:e1:21:c1:3b:b8:7a:ed:84:4d:e3:f3:54:71:5f: 93:f6:04:ed:01:7a:b2:82:a2:7c:36:e3:7b:58:6c: d7:19:31:0e:e2:a2:d2:88:e5:82:1a:81:d8:44:5c: 29:0d:aa:f7:31:fa:21:2e:6f:04:ed:06:2d:b2:da: 54:68:74:c8:8c:60:cf:cc:7e:a3:06:5a:b3:f7:98: 2b:fa:12:ac:04:65:e1:8c:b9:67:cb:34:fc:ba:ad: 7f:56:71:93:e6:ed:12:08:79:a1:67:dd:0d:16:0f: b7:81:71:ce:10:83:76:4c:7a:05:da:70:9b:6b:e9: 9c:69:26:77:d3:63:77:36:c6:58:64:ad:6c:43:86: 09:fa:2f:ca:ce:e3:b6:62:1a:f1:87:d7:02:6d:29: fa:bd:cf:05:48:fb:7a:14:91:2c:72:87:0b:b4:af: cd:d0:14:68:5b:20:89:15:48:85:6a:34:ca:0f:18: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D6:3A:EE:EE:79:5B:8D:EB:C4:BF:DB:18:94:FB:7E:86:B2:3B:DE X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1c:32:2c:c3:92:89:fe:18:ea:b2:bc:15:3b:0f:b5:32:cb: 3b:b3:14:7a:f7:2a:71:f8:c2:e0:54:c1:47:04:bc:c0:b5:64: 6a:87:4b:b1:c1:4c:c6:1e:0c:97:80:38:1f:a2:de:95:7c:dc: fd:21:74:fb:f0:a4:1d:fc:43:f2:be:ca:bf:24:f9:70:23:34: c6:5d:62:6e:10:ee:d9:33:dd:83:b0:d5:14:2c:30:35:aa:ea: a0:8b:53:03:13:65:cc:68:50:b8:7f:4e:73:ec:4c:81:97:ea: b4:af:06:85:da:4b:79:6e:b4:d5:fb:13:0c:76:9e:be:39:ae: 27:54:79:82:88:4f:98:06:42:e9:45:d5:a2:57:cf:64:20:db: 46:6d:dc:bd:2d:cf:6b:52:db:fe:78:b5:fd:d1:47:4e:b8:5d: d2:57:7d:7f:70:a9:29:32:88:cd:22:a9:be:c7:00:bf:a0:7f: 40:98:50:6a:99:d7:05:a5:85:ed:07:f1:fd:a3:e7:83:c8:40: 4d:d8:79:2c:27:fc:45:16:d9:78:77:da:15:10:95:0d:14:40: 0d:7b:5a:ee:72:e8:9c:cb:d5:8e:92:71:8a:20:d0:b4:ae:b2: b3:e5:ce:93:f1:08:5c:87:d2:0f:78:7c:d1:76:f0:84:bf:d0: f1:1b:27:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDA0RTExMC8GA1UEBRMoNTUzOTBGM0Y2QjNCMzBFRDRBOUM2RkI5QUQ4Mjk3QjhF Rjk5MDZFMDAeFw0yNDA1MTUwODI2NDNaFw0yNDA1MjIwODI2NDNaMBgxFjAUBgNV BAMTDTY2NDQ3MWMzLWVlMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC038FfNYE/yJrlz7RXK177z8ivHe8oUFQonmc0AMkOBHH1GpSfu7gRqmha53Sm 7iL6wRjdPPZPp6TsNLDgZN6Edfp3+cjhs6mgYuzhIcE7uHrthE3j81RxX5P2BO0B erKConw243tYbNcZMQ7iotKI5YIagdhEXCkNqvcx+iEubwTtBi2y2lRodMiMYM/M fqMGWrP3mCv6EqwEZeGMuWfLNPy6rX9WcZPm7RIIeaFn3Q0WD7eBcc4Qg3ZMegXa cJtr6ZxpJnfTY3c2xlhkrWxDhgn6L8rO47ZiGvGH1wJtKfq9zwVI+3oUkSxyhwu0 r83QFGhbIIkVSIVqNMoPGAKDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGNY67u55 W43rxL/bGJT7foayO94wHwYDVR0jBBgwFoAUVTkPP2s7MO1KnG+5rYKXuO+ZBuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MDRFLzQ5REY2NTNFQkY0 MjExRUU5QjM1OTY1NkM0RjlBRTAyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlRrUFAyczdNTzFLbkctNXJZS1h1Ty1aQnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MDRFLzQ5REY2NTNFQkY0MjExRUU5QjM1OTY1NkM0RjlBRTAyL1ZUa1BQMnM3TU8x S25HLTVyWUtYdU8tWkJ1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIcMizDkon+GOqyvBU7D7UyyzuzFHr3KnH4wuBUwUcEvMC1ZGqHS7HB TMYeDJeAOB+i3pV83P0hdPvwpB38Q/K+yr8k+XAjNMZdYm4Q7tkz3YOw1RQsMDWq 6qCLUwMTZcxoULh/TnPsTIGX6rSvBoXaS3lutNX7Ewx2nr45ridUeYKIT5gGQulF 1aJXz2Qg20Zt3L0tz2tS2/54tf3RR064XdJXfX9wqSkyiM0iqb7HAL+gf0CYUGqZ 1wWlhe0H8f2j54PIQE3YeSwn/EUW2Xh32hUQlQ0UQA17Wu5y6JzL1Y6ScYog0LSu srPlzpPxCFyH0g94fNF28IS/0PEbJ9Y= -----END CERTIFICATE-----Generated at Wed May 15 09:27:28 2024 by rpki-client on console-fra.rpki-client.org