$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: OuEHNNkA5W3p1yA/+FZDuyenxJJ7UQYniv5+5cxuAm4= Subject key identifier: E6:FF:51:DA:F1:66:03:64:28:E4:BA:6D:FA:D5:6B:D7:A2:07:5E:21 Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: 3A Signing time: Wed 15 May 2024 08:26:53 +0000 Manifest this update: Wed 15 May 2024 08:26:52 +0000 Manifest next update: Wed 22 May 2024 08:26:52 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: cTKBu49sgksYD/76oDH+1ben+/6elFKpnxP6go4bxHw=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: CHWwiBoqVfGSoUjKXV1vohV3Io3pYex631KwXmxz4bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Validity Not Before: May 15 08:26:52 2024 GMT Not After : May 22 08:26:52 2024 GMT Subject: CN=664471cd-88e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:e5:6c:b1:bd:a5:8b:a6:8c:61:60:63:bc: a6:dc:13:93:29:4c:0b:51:fa:97:18:fb:af:04:c7: f7:ba:33:fc:e4:38:ad:65:90:0b:65:4a:b4:5a:97: fe:05:eb:c7:00:a7:12:3d:0b:e6:a2:c3:21:13:6a: 50:7a:03:a6:84:0a:9c:b2:05:a2:4b:85:e2:e8:92: 04:4e:50:a8:b3:00:4c:a3:eb:54:b2:c6:ce:17:ce: 8e:6f:2a:c3:d4:c7:b1:cd:22:bc:99:97:1b:c6:7d: 0d:a1:38:bf:ba:73:cd:be:24:5a:a4:00:13:91:38: 18:90:9a:45:0b:ab:d4:b4:26:43:8f:01:2f:4f:92: 19:1d:48:77:e9:82:2c:dc:a3:a9:a2:e3:4f:da:03: fa:d2:61:09:08:77:79:8b:92:99:9b:91:c1:72:90: ae:99:13:4f:0f:39:8e:30:d7:14:f7:a5:d6:01:bc: 36:31:1a:8d:ae:72:7d:3e:be:e1:f7:bc:b2:16:d5: 8c:4c:ef:e9:71:ac:8f:3c:e7:1b:ba:b1:70:50:e2: 94:b7:4c:66:ef:46:2c:cd:19:c6:27:1a:9c:bd:99: 87:56:1d:8d:fa:e2:23:f0:55:d2:73:f4:19:ed:ea: cc:c7:a4:d7:42:ae:20:e1:76:8b:39:45:4f:4a:2b: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:51:DA:F1:66:03:64:28:E4:BA:6D:FA:D5:6B:D7:A2:07:5E:21 X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:51:95:14:42:47:2f:6d:37:9e:e1:79:92:76:7a:6a:5f:4b: 7e:ba:87:c8:79:df:47:62:7b:da:26:b0:ba:cd:01:bb:ca:eb: 98:17:61:50:8b:5e:d9:8d:28:fa:4f:d8:ee:b0:6d:b7:9b:bd: 22:6b:0b:bd:10:55:a2:f5:db:34:2e:23:3a:a3:d9:f1:3d:5d: 32:5c:a1:0b:f2:38:40:fc:b0:5d:7b:4c:0e:c6:b3:01:2e:3d: 48:2b:3e:83:2e:1a:e2:d0:25:20:31:68:51:ac:7b:d8:d4:4f: fc:46:2b:16:51:e5:c9:d8:4b:7c:79:87:36:b7:94:3a:b1:9f: 27:30:62:9b:a9:0c:c2:9f:5e:64:fd:fd:d5:5f:7a:1b:c9:a2: c3:c7:46:69:14:a3:ee:da:d0:52:15:f4:49:76:5e:62:01:5d: be:d2:6b:09:f1:a5:06:b3:dc:f8:69:ac:a6:b2:3e:72:97:bd: 27:17:9c:77:4f:20:d3:70:bd:d3:6a:2a:db:d3:86:a2:c2:05: 0a:07:4c:fb:7c:ad:6e:03:ef:5d:fc:f9:70:50:d1:36:e8:1a: a6:2d:55:4b:08:89:39:7f:e0:40:33:a6:af:a9:70:7a:55:03: 94:08:4c:c0:5f:85:eb:20:76:75:69:5f:f5:d7:f0:76:f8:90: e3:26:2d:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjJFQjExMC8GA1UEBRMoNTU1OTgzMUFEQ0VERUNBNUZBOTJGQzRFQjVEMkVERTYy RTM3QThDRDAeFw0yNDA1MTUwODI2NTJaFw0yNDA1MjIwODI2NTJaMBgxFjAUBgNV BAMTDTY2NDQ3MWNkLTg4ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt+uVssb2li6aMYWBjvKbcE5MpTAtR+pcY+68Ex/e6M/zkOK1lkAtlSrRal/4F 68cApxI9C+aiwyETalB6A6aECpyyBaJLheLokgROUKizAEyj61Syxs4Xzo5vKsPU x7HNIryZlxvGfQ2hOL+6c82+JFqkABOROBiQmkULq9S0JkOPAS9PkhkdSHfpgizc o6mi40/aA/rSYQkId3mLkpmbkcFykK6ZE08POY4w1xT3pdYBvDYxGo2ucn0+vuH3 vLIW1YxM7+lxrI885xu6sXBQ4pS3TGbvRizNGcYnGpy9mYdWHY364iPwVdJz9Bnt 6szHpNdCriDhdos5RU9KK/dbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5v9R2vFm A2Qo5Lpt+tVr16IHXiEwHwYDVR0jBBgwFoAUVVmDGtzt7KX6kvxOtdLt5i43qM0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMkVCLzQzMEI1QTc4QkY0 MzExRUU4RkQzMDc1OEM0RjlBRTAyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FN MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlZtREd0enQ3S1g2a3Z4T3RkTHQ1aTQzcU0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MkVCLzQzMEI1QTc4QkY0MzExRUU4RkQzMDc1OEM0RjlBRTAyL1ZWbURHdHp0N0tY Nmt2eE90ZEx0NWk0M3FNMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxRlRRCRy9tN57heZJ2empfS366h8h530die9omsLrNAbvK65gXYVCL XtmNKPpP2O6wbbebvSJrC70QVaL12zQuIzqj2fE9XTJcoQvyOED8sF17TA7GswEu PUgrPoMuGuLQJSAxaFGse9jUT/xGKxZR5cnYS3x5hza3lDqxnycwYpupDMKfXmT9 /dVfehvJosPHRmkUo+7a0FIV9El2XmIBXb7SawnxpQaz3PhprKayPnKXvScXnHdP INNwvdNqKtvThqLCBQoHTPt8rW4D7138+XBQ0TboGqYtVUsIiTl/4EAzpq+pcHpV A5QITMBfhesgdnVpX/XX8Hb4kOMmLfo= -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org