$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: u+vRstPT0KSmXTUWvvQCCmEpzx/Jik/i4M6GFe5La0g= Subject key identifier: B1:E0:C5:55:5B:B2:47:17:7D:C9:1C:FB:A0:05:7F:76:A2:A2:67:1F Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 0341 Signing time: Sat 27 Apr 2024 02:52:46 +0000 Manifest this update: Sat 27 Apr 2024 02:52:46 +0000 Manifest next update: Sat 04 May 2024 02:52:46 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: zp1xh/SBDUIXCpbppDuU2OrgFdcpMEEzcLA8mzeRvaQ=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: lpgIVVU0cv+cmcURAn8z405VuRQu+P37Bg9Ma7ssqFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: Apr 27 02:52:46 2024 GMT Not After : May 4 02:52:46 2024 GMT Subject: CN=662c687e-2d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:5a:0c:12:4d:23:b8:41:2c:0e:24:72:b1: 48:b3:41:41:96:ad:08:c2:10:13:d2:93:2f:f0:92: 3c:f3:9e:22:40:35:e4:55:bd:ac:36:f7:cf:77:14: 3e:93:37:52:f1:02:1d:95:c7:60:28:76:2f:b6:fd: 75:d0:86:f4:97:e0:7e:ce:15:3d:91:98:d3:ec:b0: f4:fa:ec:26:d6:80:82:dd:04:8f:c1:14:ba:b5:e6: 41:72:2e:f2:99:f7:d0:5c:75:f4:e9:64:70:3e:a1: 22:ba:12:29:b8:d2:64:bf:0b:e7:02:4f:4e:45:4e: 29:fa:83:08:3a:0a:57:78:b9:6f:95:48:69:76:d9: 59:ee:f1:b1:3a:a4:14:7d:94:59:8f:5d:16:a7:b4: 34:2c:4e:76:54:5d:01:c5:2c:39:f7:b7:e8:91:34: d2:bb:55:f3:3d:68:f7:ad:22:f1:7b:56:de:9b:9a: 5f:2c:b7:36:f9:6c:24:09:64:22:86:6b:a9:7d:f9: ff:3a:b1:9d:d0:68:fe:76:34:13:89:4c:e9:4c:0d: ac:5f:fe:a2:d2:f1:fd:c4:f9:32:1b:27:f9:75:3a: d4:d2:83:22:5e:54:54:a3:42:bf:f0:22:d4:7c:22: 7e:00:76:73:b3:44:80:22:67:a8:e5:9f:fa:bb:dc: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E0:C5:55:5B:B2:47:17:7D:C9:1C:FB:A0:05:7F:76:A2:A2:67:1F X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1c:7f:97:12:c1:bd:82:cb:c9:81:3f:6f:cd:58:0c:0d:15: fd:aa:f2:ba:bc:36:80:d3:b8:65:30:34:1c:b9:4e:6b:4e:83: 1c:4d:da:43:e4:1c:1d:c0:3f:97:b3:94:9f:8b:83:75:79:4b: 40:b4:65:03:88:9a:f2:1d:f1:f8:b1:42:22:93:33:a0:38:ff: 6c:87:6c:86:07:11:11:c1:62:89:a8:fc:63:ec:fb:4e:a5:f7: 30:14:10:72:e8:4a:70:0f:19:ed:76:ec:ee:6a:90:69:b3:f6: 8d:60:bb:3f:ba:97:6c:dc:4e:ec:40:48:a1:55:4c:c3:31:1e: 5b:76:b4:0a:74:7b:a9:d3:44:81:5e:fa:28:04:c6:03:09:96: d8:a5:55:ad:53:ac:45:64:d2:c5:e8:aa:62:4c:c8:74:51:bb: 08:41:dc:93:e3:da:f5:53:b5:10:dd:a3:e8:4b:99:17:64:c6: 56:66:96:6c:bc:f7:4d:23:eb:c4:25:96:e5:21:94:b5:67:f1: eb:af:1f:e2:53:51:04:16:6c:87:cf:0d:fb:d7:b3:36:2f:80: 1a:a3:f1:86:de:a8:e8:b9:01:65:fa:d3:d6:51:0b:12:61:bd: 1f:80:32:3b:89:bf:8d:f1:16:f6:57:35:73:7b:15:80:c3:04: 63:20:72:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjQwNDI3MDI1MjQ2WhcNMjQwNTA0MDI1MjQ2WjAYMRYwFAYD VQQDEw02NjJjNjg3ZS0yZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLVaDBJNI7hBLA4kcrFIs0FBlq0IwhAT0pMv8JI8854iQDXkVb2sNvfPdxQ+ kzdS8QIdlcdgKHYvtv110Ib0l+B+zhU9kZjT7LD0+uwm1oCC3QSPwRS6teZBci7y mffQXHX06WRwPqEiuhIpuNJkvwvnAk9ORU4p+oMIOgpXeLlvlUhpdtlZ7vGxOqQU fZRZj10Wp7Q0LE52VF0BxSw597fokTTSu1XzPWj3rSLxe1bem5pfLLc2+WwkCWQi hmupffn/OrGd0Gj+djQTiUzpTA2sX/6i0vH9xPkyGyf5dTrU0oMiXlRUo0K/8CLU fCJ+AHZzs0SAImeo5Z/6u9x/RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHgxVVb skcXfckc+6AFf3aiomcfMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvHH+XEsG9gsvJgT9vzVgMDRX9qvK6vDaA07hlMDQcuU5rToMcTdpD 5BwdwD+Xs5Sfi4N1eUtAtGUDiJryHfH4sUIikzOgOP9sh2yGBxERwWKJqPxj7PtO pfcwFBBy6EpwDxntduzuapBps/aNYLs/upds3E7sQEihVUzDMR5bdrQKdHup00SB XvooBMYDCZbYpVWtU6xFZNLF6KpiTMh0UbsIQdyT49r1U7UQ3aPoS5kXZMZWZpZs vPdNI+vEJZblIZS1Z/Hrrx/iU1EEFmyHzw3717M2L4Aao/GG3qjouQFl+tPWUQsS Yb0fgDI7ib+N8Rb2VzVzexWAwwRjIHKS -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org