$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: UjfIgYGzwb2s3GpQeY0GpDum4laMQz2l+ELBWLjIlXs= Subject key identifier: 28:5A:79:07:FD:2F:E8:0E:44:37:11:5B:9D:FA:5F:20:74:6C:44:75 Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 33BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 33BF Signing time: Wed 08 May 2024 15:10:47 +0000 Manifest this update: Wed 08 May 2024 15:10:46 +0000 Manifest next update: Wed 15 May 2024 15:10:46 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: /qmGi4/jOTQDm3NKyjU2a0deyoxLr6vJhcz69Fmowdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: May 8 15:10:46 2024 GMT Not After : May 15 15:10:46 2024 GMT Subject: CN=663b95f7-ec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:af:fe:5c:e6:1c:26:2f:c9:53:54:15:c7: 5a:1f:0c:ca:ff:fb:e6:4a:9b:a4:50:6b:01:d7:c8: be:6e:b6:be:bd:ea:5a:31:66:1c:f3:74:c5:55:79: b3:2f:55:b5:b5:22:59:f8:54:17:b4:19:e0:39:d9: 4b:2a:2c:eb:e1:14:7d:32:a8:a8:3f:6f:10:b9:54: e0:d7:cc:78:c6:bc:14:52:c6:07:6d:8f:12:22:84: b9:36:dd:5b:27:ca:fe:2a:f5:55:5e:21:ee:3b:af: 2f:59:65:ce:7e:2d:34:35:a4:94:d0:d2:9d:a2:7e: 6c:7f:6f:3e:99:d0:0f:51:d9:2a:3c:1f:4c:19:20: 09:bf:43:a1:a9:08:d0:1e:9b:78:f4:64:80:cd:eb: bc:8f:9e:80:1d:bd:f1:1d:c0:39:52:ff:40:92:ae: f4:6b:c7:bc:a9:cf:2a:44:f6:d9:06:fc:94:88:56: ec:58:a5:62:96:97:ed:2b:b7:17:c3:51:bc:21:af: 5f:a2:8f:bd:ee:ca:3f:c2:f6:d4:9b:04:ce:92:df: 1c:df:dc:51:76:cd:97:ec:1e:41:fc:ff:20:c7:3a: 3b:0f:ab:2a:61:92:cc:da:f5:e7:75:ef:27:14:9f: 88:f6:9e:cc:6c:15:30:dd:af:67:1b:cf:3a:a1:cc: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:79:07:FD:2F:E8:0E:44:37:11:5B:9D:FA:5F:20:74:6C:44:75 X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:40:03:39:af:17:e7:a6:0f:b3:ab:32:a6:c1:ee:ed:1d:7e: f4:8d:32:bb:98:a8:80:c7:4f:7f:08:36:72:c0:83:c0:fa:d2: 38:83:a8:7b:61:7e:cc:0d:6d:cc:78:82:e0:04:00:a8:37:5e: a4:0c:13:21:cd:ea:bf:c1:eb:86:7a:52:a5:7d:1d:80:02:66: 1d:6a:e6:1a:d3:40:ba:50:4d:86:02:4a:df:ed:7f:6c:44:9d: fd:ea:b0:f1:a5:de:2f:17:a1:a7:af:96:65:2b:24:b2:20:22: af:6a:3a:78:e8:58:e4:29:f4:3a:d0:b0:a3:d9:cf:39:d7:bc: 65:ee:5e:97:6c:dd:30:65:b4:be:92:93:bd:8e:d9:e1:18:d1: 9b:d3:2b:e6:01:10:1f:06:cc:ee:e5:ce:3f:a8:91:d8:3a:ae: 85:43:00:ef:1b:2e:a3:95:20:bf:a6:e2:3b:34:77:07:15:a6: 3b:87:86:50:c4:0b:76:f9:61:70:ff:67:11:21:a1:0f:c6:a4: c7:c2:1e:27:60:97:d7:a8:31:67:f1:70:99:0b:bd:42:25:fd: 6d:8f:1c:f6:42:a3:a9:66:a8:9b:04:7a:1d:e6:db:92:9f:97: e6:62:75:6c:0c:54:45:95:a0:b9:9d:3b:5e:c1:41:b0:91:75: a0:8f:7c:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjQwNTA4MTUxMDQ2WhcNMjQwNTE1MTUxMDQ2WjAYMRYwFAYD VQQDEw02NjNiOTVmNy1lYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN2v/lzmHCYvyVNUFcdaHwzK//vmSpukUGsB18i+bra+vepaMWYc83TFVXmz L1W1tSJZ+FQXtBngOdlLKizr4RR9MqioP28QuVTg18x4xrwUUsYHbY8SIoS5Nt1b J8r+KvVVXiHuO68vWWXOfi00NaSU0NKdon5sf28+mdAPUdkqPB9MGSAJv0OhqQjQ Hpt49GSAzeu8j56AHb3xHcA5Uv9Akq70a8e8qc8qRPbZBvyUiFbsWKVilpftK7cX w1G8Ia9foo+97so/wvbUmwTOkt8c39xRds2X7B5B/P8gxzo7D6sqYZLM2vXnde8n FJ+I9p7MbBUw3a9nG886ocyxYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChaeQf9 L+gORDcRW536XyB0bER1MB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOQAM5rxfnpg+zqzKmwe7tHX70jTK7mKiAx09/CDZywIPA+tI4g6h7 YX7MDW3MeILgBACoN16kDBMhzeq/weuGelKlfR2AAmYdauYa00C6UE2GAkrf7X9s RJ396rDxpd4vF6Gnr5ZlKySyICKvajp46FjkKfQ60LCj2c8517xl7l6XbN0wZbS+ kpO9jtnhGNGb0yvmARAfBszu5c4/qJHYOq6FQwDvGy6jlSC/puI7NHcHFaY7h4ZQ xAt2+WFw/2cRIaEPxqTHwh4nYJfXqDFn8XCZC71CJf1tjxz2QqOpZqibBHod5tuS n5fmYnVsDFRFlaC5nTtewUGwkXWgj3xK -----END CERTIFICATE-----Generated at Wed May 8 18:13:58 2024 by rpki-client on console-fra.rpki-client.org