$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json) Hash identifier: hNvaQpw+lqb1uowktFHjfa9r11TykIOF+3UA7p3Sd20= Subject key identifier: 81:DF:41:93:E8:16:28:E3:A1:05:F4:72:52:64:09:F4:F2:29:11:BE Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft Manifest number: F5 Signing time: Wed 01 May 2024 06:02:55 +0000 Manifest this update: Wed 01 May 2024 06:02:55 +0000 Manifest next update: Wed 08 May 2024 06:02:55 +0000 Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: QlLJvpVI9vgbKKVwT4nwAarcfTRT80fW1TCv+p6ITCg=) 2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: 7UWfHlBuZH2ZC1u5Wy8vFthG0v1TkAWBI951bKF55mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Validity Not Before: May 1 06:02:55 2024 GMT Not After : May 8 06:02:55 2024 GMT Subject: CN=6631db0f-9a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:5b:31:5f:58:d1:b6:9d:b3:33:15:72:c0: fb:8e:61:db:4b:09:9c:e8:a6:42:7b:ec:ea:24:54: 8c:56:d9:87:65:ca:01:2c:86:64:1c:17:ee:50:eb: 0a:bd:18:a8:eb:b9:98:24:18:c9:02:10:dd:50:88: 68:4a:87:8a:0c:61:1e:53:6e:b7:db:d2:86:ca:77: ce:d0:b4:cf:01:78:f1:ef:4d:7d:fb:b7:1a:c4:0c: 34:a9:16:37:69:98:07:ee:a9:f9:cd:9a:03:22:34: 9d:dc:32:2a:fb:d7:46:e0:14:bf:68:da:ef:8a:a3: 0c:ce:33:8a:95:1c:6c:05:1f:a7:8f:62:c5:93:67: 73:66:8e:15:03:16:93:b7:20:ea:c0:bf:e5:c9:be: 68:31:71:bf:e9:4d:cd:4c:b3:1f:35:6a:24:0e:da: d6:a8:97:72:be:0a:56:3c:2d:ea:2f:67:f4:c5:99: 59:3d:85:68:10:9c:a3:a0:a5:d4:d2:cf:71:11:b3: a2:06:2b:44:91:dd:d2:0a:5c:f3:39:62:4d:92:d1: 55:86:17:4a:87:c5:54:5a:70:b4:a8:7e:0f:ba:57: f7:a7:a5:aa:d8:af:30:2e:0b:ef:f6:09:c3:94:98: 16:bc:44:00:78:e7:93:43:ed:fa:20:64:44:98:61: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DF:41:93:E8:16:28:E3:A1:05:F4:72:52:64:09:F4:F2:29:11:BE X509v3 Authority Key Identifier: keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ab:6b:05:8a:bb:4f:4c:2b:1b:02:1b:6b:2e:bb:27:d9:db: 2a:5a:1a:0e:8e:81:69:52:95:e5:82:a2:47:46:c6:a5:9a:f9: e3:bd:5d:ce:78:29:e9:9f:ea:3c:37:cd:16:2e:28:9c:71:f4: 61:8f:ac:92:6b:46:83:ad:41:c2:bd:b9:50:fb:e0:13:26:04: 5d:ca:ae:16:80:1d:3f:96:a4:57:e3:7b:26:53:8c:3d:1e:5a: 35:21:19:fb:7b:2f:d3:d7:d8:ad:97:12:79:61:e6:56:38:bd: cc:81:f7:b3:26:f8:b4:bb:5a:ee:9e:35:2d:53:ba:6e:83:47: 5b:00:64:ff:b8:67:e0:03:e8:b6:68:3a:3e:b8:a9:43:cd:bf: 57:0f:4c:6f:48:ce:20:bf:b8:6a:bd:9c:43:49:e3:b9:b0:df: 21:4b:fb:2b:7e:d8:ca:8b:f0:1a:4e:1d:e2:3d:6c:a3:08:62: 95:6b:51:fd:f3:26:5f:a1:c1:6a:52:2a:08:33:c3:71:07:26: bf:59:20:0f:b3:dc:b9:84:9b:fa:0a:11:77:d4:83:e8:68:5f: 5d:a2:cf:d2:d8:cb:04:b7:70:31:ea:97:a3:eb:87:3f:cf:fa: da:93:34:16:d1:dc:28:87:23:89:c9:78:e4:1f:f7:32:18:2d: e7:ee:65:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3 RjkzNkM5OTQwHhcNMjQwNTAxMDYwMjU1WhcNMjQwNTA4MDYwMjU1WjAYMRYwFAYD VQQDEw02NjMxZGIwZi05YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtudbMV9Y0badszMVcsD7jmHbSwmc6KZCe+zqJFSMVtmHZcoBLIZkHBfuUOsK vRio67mYJBjJAhDdUIhoSoeKDGEeU26329KGynfO0LTPAXjx7019+7caxAw0qRY3 aZgH7qn5zZoDIjSd3DIq+9dG4BS/aNrviqMMzjOKlRxsBR+nj2LFk2dzZo4VAxaT tyDqwL/lyb5oMXG/6U3NTLMfNWokDtrWqJdyvgpWPC3qL2f0xZlZPYVoEJyjoKXU 0s9xEbOiBitEkd3SClzzOWJNktFVhhdKh8VUWnC0qH4Pulf3p6Wq2K8wLgvv9gnD lJgWvEQAeOeTQ+36IGREmGH5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHfQZPo FijjoQX0clJkCfTyKRG+MB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3 Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt UElYZ1pGZHdaVXRfazJ5WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHq2sFirtPTCsbAhtrLrsn2dsqWhoOjoFpUpXlgqJHRsalmvnjvV3O eCnpn+o8N80WLiiccfRhj6ySa0aDrUHCvblQ++ATJgRdyq4WgB0/lqRX43smU4w9 Hlo1IRn7ey/T19itlxJ5YeZWOL3MgfezJvi0u1runjUtU7pug0dbAGT/uGfgA+i2 aDo+uKlDzb9XD0xvSM4gv7hqvZxDSeO5sN8hS/srftjKi/AaTh3iPWyjCGKVa1H9 8yZfocFqUioIM8NxBya/WSAPs9y5hJv6ChF31IPoaF9dos/S2MsEt3Ax6pej64c/ z/rakzQW0dwohyOJyXjkH/cyGC3n7mV+ -----END CERTIFICATE-----Generated at Wed May 1 07:07:05 2024 by rpki-client on console-fra.rpki-client.org