$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: 1ARJCWGPbmVOcVZq0dn5MGXTYRkjWXIym/nx3H1qEk4= Subject key identifier: 0D:93:70:0A:D4:DC:CE:53:1B:D6:89:19:58:3A:DB:D9:20:98:32:69 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0C37 Signing time: Sat 04 May 2024 19:07:56 +0000 Manifest this update: Sat 04 May 2024 19:07:56 +0000 Manifest next update: Sat 11 May 2024 19:07:56 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: RsRfePw9dB87a8FEr+CKM7wP33pifKChTME1tckKquY=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: EZlV5I8OJbq3/1fro9aY1nbM1EhKkQZAedazUY1zJHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: May 4 19:07:56 2024 GMT Not After : May 11 19:07:56 2024 GMT Subject: CN=6636878c-21bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:cb:cc:7a:8b:f9:f0:86:59:6e:5c:3f:fc: 3c:4d:2f:df:26:a9:b0:cf:59:7d:e6:82:6f:1e:9e: 4a:6e:f1:3d:ff:03:d5:e8:01:04:d8:ef:d1:cf:c5: 96:be:ab:69:77:95:aa:6e:c9:4a:90:cd:4c:c4:a2: f1:f0:28:7b:81:9e:2f:78:ea:70:05:47:5f:76:8d: fe:f9:2d:2a:f9:7b:c6:16:43:da:cf:9e:c8:28:99: 60:ef:3f:57:f3:15:93:ec:44:ed:1f:b1:89:28:13: 4b:d8:81:37:b9:5f:be:c2:35:a2:26:47:30:6c:11: c2:61:e5:73:5d:c5:aa:b4:47:d1:f2:70:c8:f2:e2: 48:df:07:a3:e0:66:d0:15:64:bb:40:ef:f3:0c:d7: 84:8d:6d:3d:42:c4:c3:04:1b:36:0d:73:16:c7:7f: 26:1e:8c:d0:23:a2:6c:e5:90:ae:2c:b0:7b:de:51: 9a:b6:b2:7a:f1:e8:e7:e9:fc:84:75:b5:ae:6d:e1: 6f:c6:77:3d:b1:7d:f2:f5:7a:b1:a9:b4:66:5b:42: 98:9a:98:33:c9:99:37:c0:45:01:84:5e:23:24:a0: 4f:65:eb:1a:03:29:28:b8:06:16:a2:e2:71:5d:bf: b2:1b:c0:cc:ad:eb:77:1f:a7:b5:36:d4:95:12:5c: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:70:0A:D4:DC:CE:53:1B:D6:89:19:58:3A:DB:D9:20:98:32:69 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:26:da:94:95:8f:8b:57:cc:40:0c:5c:81:a7:fc:41:89:a9: 9a:f4:85:0c:f5:7a:ad:dc:2a:bb:dc:36:39:11:2a:c2:5a:ea: 49:67:8c:7b:5d:a2:0c:06:8d:4d:82:77:f0:4c:e0:e2:58:01: 24:d6:14:2a:05:42:30:a5:21:fd:50:95:bf:6e:5b:41:91:2b: 47:e7:4c:3b:2b:f6:26:43:68:26:d1:4b:8d:21:ce:fb:9f:13: 74:01:45:b8:cc:09:32:10:a0:8b:d2:10:58:1b:8c:a0:d5:6c: 30:7e:43:21:b8:1b:b9:ae:b6:64:60:c9:6f:62:8f:70:99:09: b8:56:0e:29:e4:7d:0c:d4:94:34:c8:48:81:a9:ff:b7:98:52: 47:c6:06:07:37:c7:45:60:01:16:b7:44:27:b0:b5:5c:f0:9f: 36:76:61:18:5b:bc:60:04:6e:34:03:bc:7e:62:d2:47:c2:ec: 71:db:c6:c1:02:54:8e:24:90:68:98:c9:dc:66:bc:60:4f:fd: 64:49:b1:15:b4:31:ce:48:11:1b:67:e6:34:d1:de:cc:9d:bd: 62:78:84:56:c1:ab:1e:64:87:00:6b:42:9f:3f:22:86:ff:64: c9:1d:af:af:1c:53:59:11:bf:76:84:a3:5e:59:9e:ca:78:17: 38:20:4f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjQwNTA0MTkwNzU2WhcNMjQwNTExMTkwNzU2WjAYMRYwFAYD VQQDEw02NjM2ODc4Yy0yMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw3LzHqL+fCGWW5cP/w8TS/fJqmwz1l95oJvHp5KbvE9/wPV6AEE2O/Rz8WW vqtpd5WqbslKkM1MxKLx8Ch7gZ4veOpwBUdfdo3++S0q+XvGFkPaz57IKJlg7z9X 8xWT7ETtH7GJKBNL2IE3uV++wjWiJkcwbBHCYeVzXcWqtEfR8nDI8uJI3wej4GbQ FWS7QO/zDNeEjW09QsTDBBs2DXMWx38mHozQI6Js5ZCuLLB73lGatrJ68ejn6fyE dbWubeFvxnc9sX3y9XqxqbRmW0KYmpgzyZk3wEUBhF4jJKBPZesaAykouAYWouJx Xb+yG8DMret3H6e1NtSVElyJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2TcArU 3M5TG9aJGVg629kgmDJpMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhJtqUlY+LV8xADFyBp/xBiama9IUM9Xqt3Cq73DY5ESrCWupJZ4x7 XaIMBo1NgnfwTODiWAEk1hQqBUIwpSH9UJW/bltBkStH50w7K/YmQ2gm0UuNIc77 nxN0AUW4zAkyEKCL0hBYG4yg1WwwfkMhuBu5rrZkYMlvYo9wmQm4Vg4p5H0M1JQ0 yEiBqf+3mFJHxgYHN8dFYAEWt0QnsLVc8J82dmEYW7xgBG40A7x+YtJHwuxx28bB AlSOJJBomMncZrxgT/1kSbEVtDHOSBEbZ+Y00d7Mnb1ieIRWwaseZIcAa0KfPyKG /2TJHa+vHFNZEb92hKNeWZ7KeBc4IE9z -----END CERTIFICATE-----Generated at Sat May 4 19:58:43 2024 by rpki-client on console-ams.rpki-client.org