$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: sf42oF8Hhssp4x70v9r1mTG+vGqKpUu7KTi1bFDLJQs= Subject key identifier: C7:45:3F:FD:4D:24:0F:61:3B:0F:4D:27:49:6B:77:22:E3:51:0D:42 Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 01E2 Signing time: Fri 03 May 2024 04:23:27 +0000 Manifest this update: Fri 03 May 2024 04:23:26 +0000 Manifest next update: Fri 10 May 2024 04:23:26 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: v3FJxtiBSEYcJZVnG93Xfnpl7B1F988FI27/TTx/kRQ=) 2: 7142EF7E30F511ED91FE0B2CC4F9AE02.roa (hash: ZP/VACRnCaJ72dZ7t6OcfiFZ929QXi3wbdzsqcxNRQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: May 3 04:23:26 2024 GMT Not After : May 10 04:23:26 2024 GMT Subject: CN=663466be-18d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b0:2e:5b:13:86:3f:83:80:86:4b:ec:5d:51: 57:31:bf:e0:25:84:2c:eb:48:b3:cb:52:2a:17:ab: 25:9b:7f:69:4f:41:94:c5:8b:0e:0d:73:9b:ad:42: 89:29:ba:15:ac:3c:67:b8:52:c2:ec:b6:26:84:f4: 94:4c:1e:bb:7d:7c:53:9d:da:ca:93:ed:88:91:6e: 51:88:1c:14:ca:32:54:98:fe:f0:39:2f:01:db:b6: c4:96:15:61:50:15:bb:06:5a:1c:af:d4:7a:b8:39: d5:5e:d4:6a:00:66:67:38:86:80:59:4c:2b:fd:c6: bb:e7:21:9d:cc:e2:a1:6f:cb:e9:58:f5:5d:66:3d: 18:dd:9a:c6:0b:09:ba:b3:9f:5e:42:63:8d:d2:e9: e3:ad:f2:54:82:b9:3e:7e:24:53:86:2f:ec:61:f9: 28:fa:07:d6:3c:0b:52:75:1b:a5:08:22:27:00:80: e0:ab:76:a3:39:30:ae:39:5b:fd:0c:b7:76:89:0c: bb:97:f0:bd:f3:93:7e:5f:15:89:3c:91:a4:a9:5e: b2:0f:8d:71:89:4f:18:6e:65:c1:77:dd:99:72:51: f3:40:8c:16:bc:03:22:8d:ce:27:75:e0:ea:29:94: 3a:97:c7:ed:f2:ac:e9:5a:66:fb:c3:88:b5:1b:a8: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:3F:FD:4D:24:0F:61:3B:0F:4D:27:49:6B:77:22:E3:51:0D:42 X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:cb:5f:cc:7e:86:98:d8:f3:c9:f2:73:6c:48:4d:d3:1d:aa: 28:45:0f:44:f1:bc:31:88:63:58:0b:4d:01:1f:51:93:16:cd: a5:c2:64:6d:ea:d6:a3:fb:99:19:a0:2c:02:7b:a8:30:5d:ff: 33:c2:d8:08:6e:a6:47:d4:4f:ef:09:59:1c:35:fd:0f:da:62: 14:02:49:0b:5d:b2:5a:79:e7:63:e7:f5:58:ae:e1:2c:e6:a6: 9d:2c:1b:fc:47:4e:ae:7a:21:63:96:fd:64:b8:69:9c:e3:63: f3:14:fd:72:9d:ae:58:59:0e:9d:61:95:20:4b:70:08:92:4d: 06:fd:84:df:06:56:91:ba:2c:be:56:73:2a:df:25:3f:dd:89: 82:ab:e0:8e:41:74:20:61:95:8f:5b:05:2c:b3:9b:8d:20:65: a9:39:2c:a7:30:f9:3c:fb:6a:85:a6:4c:ee:16:94:e0:53:fe: e4:b2:37:8b:86:e2:d9:76:52:27:14:a3:52:dd:fe:1e:90:64: d3:99:2f:a8:11:76:50:90:31:06:80:02:4a:fb:c2:4d:f9:51: 1a:50:01:6d:ff:b0:8a:79:ca:dc:a3:8c:4e:6a:cb:e3:d3:af: fe:6d:62:d3:ef:1d:1e:b2:66:0d:07:db:f6:e6:c4:a3:f3:d9: f8:d1:d2:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjQwNTAzMDQyMzI2WhcNMjQwNTEwMDQyMzI2WjAYMRYwFAYD VQQDEw02NjM0NjZiZS0xOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bAuWxOGP4OAhkvsXVFXMb/gJYQs60izy1IqF6slm39pT0GUxYsODXObrUKJ KboVrDxnuFLC7LYmhPSUTB67fXxTndrKk+2IkW5RiBwUyjJUmP7wOS8B27bElhVh UBW7Blocr9R6uDnVXtRqAGZnOIaAWUwr/ca75yGdzOKhb8vpWPVdZj0Y3ZrGCwm6 s59eQmON0unjrfJUgrk+fiRThi/sYfko+gfWPAtSdRulCCInAIDgq3ajOTCuOVv9 DLd2iQy7l/C985N+XxWJPJGkqV6yD41xiU8YbmXBd92ZclHzQIwWvAMijc4ndeDq KZQ6l8ft8qzpWmb7w4i1G6iLZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdFP/1N JA9hOw9NJ0lrdyLjUQ1CMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxy1/MfoaY2PPJ8nNsSE3THaooRQ9E8bwxiGNYC00BH1GTFs2lwmRt 6taj+5kZoCwCe6gwXf8zwtgIbqZH1E/vCVkcNf0P2mIUAkkLXbJaeedj5/VYruEs 5qadLBv8R06ueiFjlv1kuGmc42PzFP1yna5YWQ6dYZUgS3AIkk0G/YTfBlaRuiy+ VnMq3yU/3YmCq+COQXQgYZWPWwUss5uNIGWpOSynMPk8+2qFpkzuFpTgU/7ksjeL huLZdlInFKNS3f4ekGTTmS+oEXZQkDEGgAJK+8JN+VEaUAFt/7CKecrco4xOasvj 06/+bWLT7x0esmYNB9v25sSj89n40dK6 -----END CERTIFICATE-----Generated at Fri May 3 06:28:37 2024 by rpki-client on console-fra.rpki-client.org