$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: n1oLIZZXtH4cLYbTc8kL/FKA0ynsmSBtCWqQr0dYXkw= Subject key identifier: C8:35:5A:A3:55:15:92:A9:65:97:F3:5A:BA:49:5A:CE:53:6B:01:4C Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 4F46 Signing time: Thu 02 May 2024 15:29:25 +0000 Manifest this update: Thu 02 May 2024 15:29:25 +0000 Manifest next update: Thu 09 May 2024 15:29:25 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: p0+l9F+gvfWMpRN8YaCrRMv0IpDZK0V+aGvqMvS3+4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7056 (0x1b90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: May 2 15:29:25 2024 GMT Not After : May 9 15:29:25 2024 GMT Subject: CN=6633b155-d63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e7:9a:55:29:4d:92:a9:7a:84:95:d2:a3:b9: 19:4d:98:94:42:68:d6:bf:ee:90:bf:49:cb:39:9f: 5e:90:c3:8c:86:7b:43:b4:65:c3:4a:79:87:20:ae: 20:28:64:d8:88:40:56:13:b1:4f:23:87:32:ec:11: ce:65:cf:67:98:31:08:49:b5:98:32:91:ac:6f:de: b9:c3:bf:34:60:72:d3:b1:52:2f:58:65:ae:70:a6: 5a:dc:14:f1:5a:65:e1:4c:6d:71:e4:65:af:06:68: e2:b1:c6:82:45:2f:4c:a4:a4:b0:d1:93:2d:36:58: fa:1d:25:7d:f0:62:3b:28:77:83:4f:c5:ba:86:cf: d1:42:df:cd:0a:5b:88:65:eb:90:a8:f6:20:9e:98: fb:0e:41:08:36:6a:08:3d:5a:5f:f5:7e:b3:61:f5: 68:db:04:87:c9:37:3b:ec:ea:2c:c7:ae:91:75:ec: ac:ec:b2:10:51:d8:19:91:75:90:a4:bf:45:15:53: 8b:48:7d:ea:e8:e1:5a:ed:16:32:d8:02:27:fe:4e: ef:97:87:23:ba:47:e4:e6:ff:17:61:86:94:c9:07: 3e:5c:ba:f2:50:ce:21:98:c7:ef:14:de:c6:83:c3: 77:8b:f0:24:35:69:a8:c8:77:85:ed:c6:54:fa:d3: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:5A:A3:55:15:92:A9:65:97:F3:5A:BA:49:5A:CE:53:6B:01:4C X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:b1:9f:db:03:49:61:5d:ae:2a:c1:8a:dd:ea:0a:03:0d: bd:5c:c5:e8:7e:c0:19:60:c9:0e:27:e9:86:8e:85:7e:7b:3f: ac:1e:c6:78:57:bc:1b:34:22:7f:7d:c0:1f:3a:89:7c:ef:bc: 66:88:f4:cc:04:21:9d:9b:72:b5:40:cb:d2:54:c5:70:dc:40: b0:ac:47:f2:bd:94:e6:51:85:98:f3:a8:64:04:89:33:3a:db: 36:28:20:ec:47:93:6a:d1:7a:f9:eb:33:06:8b:34:9d:bb:15: b2:7b:14:0c:18:23:1a:d0:91:5f:9b:ba:b0:58:31:bf:63:b7: 91:0e:b5:f0:37:98:04:86:01:82:5f:b4:ca:4f:3e:8f:5e:6f: fb:e3:75:44:3a:81:57:76:8f:5a:fc:74:1f:04:e9:44:c9:75: ce:e5:0b:ed:8d:2e:34:72:db:57:0e:d8:42:ed:b2:6a:f9:0d: 0d:0a:59:40:34:10:dd:0d:29:69:c6:14:66:38:fb:2f:c7:2b: b0:e9:75:bd:85:ab:8f:ef:73:64:1f:69:86:63:e7:0a:fb:07: fb:74:82:12:3a:20:9c:5a:26:e8:37:35:8a:85:e2:3f:0e:c8: 41:44:82:2e:af:9a:e7:cc:c4:b0:9e:11:09:07:21:45:40:12: 7e:0f:0e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjQwNTAyMTUyOTI1WhcNMjQwNTA5MTUyOTI1WjAYMRYwFAYD VQQDEw02NjMzYjE1NS1kNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OeaVSlNkql6hJXSo7kZTZiUQmjWv+6Qv0nLOZ9ekMOMhntDtGXDSnmHIK4g KGTYiEBWE7FPI4cy7BHOZc9nmDEISbWYMpGsb965w780YHLTsVIvWGWucKZa3BTx WmXhTG1x5GWvBmjiscaCRS9MpKSw0ZMtNlj6HSV98GI7KHeDT8W6hs/RQt/NCluI ZeuQqPYgnpj7DkEINmoIPVpf9X6zYfVo2wSHyTc77Oosx66Rdeys7LIQUdgZkXWQ pL9FFVOLSH3q6OFa7RYy2AIn/k7vl4cjukfk5v8XYYaUyQc+XLryUM4hmMfvFN7G g8N3i/AkNWmoyHeF7cZU+tPJfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg1WqNV FZKpZZfzWrpJWs5TawFMMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rbGf2wNJYV2uKsGK3eoKAw29XMXofsAZYMkOJ+mGjoV+ez+sHsZ4 V7wbNCJ/fcAfOol877xmiPTMBCGdm3K1QMvSVMVw3ECwrEfyvZTmUYWY86hkBIkz Ots2KCDsR5Nq0Xr56zMGizSduxWyexQMGCMa0JFfm7qwWDG/Y7eRDrXwN5gEhgGC X7TKTz6PXm/743VEOoFXdo9a/HQfBOlEyXXO5QvtjS40cttXDthC7bJq+Q0NCllA NBDdDSlpxhRmOPsvxyuw6XW9hauP73NkH2mGY+cK+wf7dIISOiCcWiboNzWKheI/ DshBRIIur5rnzMSwnhEJByFFQBJ+Dw6l -----END CERTIFICATE-----Generated at Thu May 2 17:18:56 2024 by rpki-client on console-ams.rpki-client.org