$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json) Hash identifier: kuoQ0ic1Isz/Nmc0DIFVYIk78O286uOeLtkv4zO7cGw= Subject key identifier: E4:45:87:D5:A8:FB:C4:8B:FD:48:AC:9D:F7:8B:F3:46:AD:62:DC:86 Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft Manifest number: 0394 Signing time: Tue 07 May 2024 02:35:57 +0000 Manifest this update: Tue 07 May 2024 02:35:57 +0000 Manifest next update: Tue 14 May 2024 02:35:57 +0000 Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: yhmCFKn7MR45g28hhVTILPSEmlGwIx4ttb+NA66/YlM=) 2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: 5uzkHfFFMLToyMXonIWoqmfqNCeTdigSyRXgd7owJCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Validity Not Before: May 7 02:35:57 2024 GMT Not After : May 14 02:35:57 2024 GMT Subject: CN=6639938d-55d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:36:c5:04:23:12:75:60:10:6b:d2:8f:e5: ef:e3:4e:87:78:8c:55:96:28:11:83:92:46:7f:9a: 7d:12:f7:36:17:66:f8:7f:75:86:83:01:67:bc:7b: 44:fc:e5:49:42:f9:83:f6:da:b3:77:20:2c:70:e4: d1:26:b8:63:2f:97:f6:12:81:e5:cc:2f:58:eb:5a: 47:81:e6:3b:df:95:2f:78:b9:5f:0a:5c:a4:c4:ea: 2f:be:a9:a7:03:41:d9:13:01:08:8d:32:3b:11:e7: 5a:f0:b2:d6:c2:74:85:55:c4:39:58:50:b2:c7:a7: cc:c0:ae:d9:62:e5:55:66:12:6d:8f:aa:af:9d:89: 48:08:60:76:4f:1e:cb:f7:60:2c:f7:9c:fe:b9:f5: 82:81:46:35:e6:21:aa:31:53:e5:5d:3f:27:7b:3a: b5:1d:58:a6:f9:9d:40:c5:cd:db:ba:92:71:c3:d4: 27:4b:40:dd:8b:97:99:7a:26:d3:5e:4a:a4:b4:1d: 26:2b:6e:b0:29:8e:11:89:97:63:9f:33:77:90:d7: 6f:c5:b8:a4:b0:d6:4e:ca:ec:c8:cf:10:a8:24:0e: 05:62:a8:e7:ba:e5:ea:ec:e6:5c:57:24:f0:0c:9c: 22:3b:92:49:96:dc:70:f4:eb:17:62:13:9b:31:5d: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:45:87:D5:A8:FB:C4:8B:FD:48:AC:9D:F7:8B:F3:46:AD:62:DC:86 X509v3 Authority Key Identifier: keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:08:73:8b:2e:76:1f:89:63:11:ea:f6:94:69:ad:2f:cc:71: dc:6b:6b:80:a4:8f:04:f2:d4:95:e1:55:18:6a:2b:f1:aa:72: 10:0b:c8:52:7b:e6:fc:57:41:be:80:24:0a:ed:ce:b2:c5:d0: b6:b4:12:69:1f:a3:7d:d9:e5:a3:9b:ea:73:8a:59:9f:2c:bc: a3:0e:ae:bb:6f:56:de:f6:41:ab:5b:e2:b6:4f:58:3d:10:b2: 3b:46:0a:fa:bd:54:e7:94:98:aa:b9:d9:d3:05:5d:a4:d3:d2: 7a:ec:9d:2d:52:61:e2:3d:9b:80:8d:f4:7f:d3:2b:0b:40:e2: 81:b0:0f:b8:75:5b:4d:a4:2e:ef:a0:17:1f:85:56:d3:f5:ea: d5:3b:24:a7:5f:f5:8f:c7:0c:a3:f6:e2:7a:28:14:08:a6:d4: 73:b8:a5:11:58:20:88:2c:ee:b8:67:29:01:b6:aa:3c:4e:1e: 4e:1a:c5:3c:6a:69:c6:85:c3:a3:f4:9e:28:73:0b:e8:ee:b4: 41:0b:d6:c7:0f:98:a6:e7:6d:ba:2d:01:83:60:22:96:c1:b7: 8a:ff:93:bd:5b:be:8c:42:5e:d2:e1:b4:ce:f1:0e:0b:6c:f2: f9:cb:d2:00:a3:fd:6c:2a:c8:ea:31:be:e0:24:33:05:30:8b: be:60:d2:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCRkYxMTAvBgNVBAUTKDU0NDExRkU3MzMyRDJFRjRGRjI3NUU1OUQ1REVGRUQx Q0NFOTYwMTQwHhcNMjQwNTA3MDIzNTU3WhcNMjQwNTE0MDIzNTU3WjAYMRYwFAYD VQQDEw02NjM5OTM4ZC01NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Tc2xQQjEnVgEGvSj+Xv406HeIxVligRg5JGf5p9Evc2F2b4f3WGgwFnvHtE /OVJQvmD9tqzdyAscOTRJrhjL5f2EoHlzC9Y61pHgeY735UveLlfClykxOovvqmn A0HZEwEIjTI7Eeda8LLWwnSFVcQ5WFCyx6fMwK7ZYuVVZhJtj6qvnYlICGB2Tx7L 92As95z+ufWCgUY15iGqMVPlXT8nezq1HVim+Z1Axc3bupJxw9QnS0Ddi5eZeibT XkqktB0mK26wKY4RiZdjnzN3kNdvxbiksNZOyuzIzxCoJA4FYqjnuuXq7OZcVyTw DJwiO5JJltxw9OsXYhObMV1kFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORFh9Wo +8SL/UisnfeL80atYtyGMB8GA1UdIwQYMBaAFFRBH+czLS70/ydeWdXe/tHM6WAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJGRi9FM0RDMjlFNjUw REMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2VF9KMTVaMWQ3LTBjenBZ QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFRWY1ek10THZUX0oxNVoxZDctMGN6cFlCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUJGRi9FM0RDMjlFNjUwREMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2 VF9KMTVaMWQ3LTBjenBZQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+CHOLLnYfiWMR6vaUaa0vzHHca2uApI8E8tSV4VUYaivxqnIQC8hS e+b8V0G+gCQK7c6yxdC2tBJpH6N92eWjm+pzilmfLLyjDq67b1be9kGrW+K2T1g9 ELI7Rgr6vVTnlJiqudnTBV2k09J67J0tUmHiPZuAjfR/0ysLQOKBsA+4dVtNpC7v oBcfhVbT9erVOySnX/WPxwyj9uJ6KBQIptRzuKURWCCILO64ZykBtqo8Th5OGsU8 amnGhcOj9J4ocwvo7rRBC9bHD5im5226LQGDYCKWwbeK/5O9W76MQl7S4bTO8Q4L bPL5y9IAo/1sKsjqMb7gJDMFMIu+YNK6 -----END CERTIFICATE-----Generated at Tue May 7 03:12:22 2024 by rpki-client on console-fra.rpki-client.org