$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: +FkzffxtzelzAKqNZbniY7x3Tbi1Fhew319l+f4isDU= Subject key identifier: DA:93:AE:50:7C:0A:DF:6B:4F:D5:EC:CA:B6:48:CA:74:D0:D5:B0:AE Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0B74 Signing time: Mon 06 May 2024 19:31:39 +0000 Manifest this update: Mon 06 May 2024 19:31:38 +0000 Manifest next update: Mon 13 May 2024 19:31:38 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: BNrWyAV5c8twCoO1PTlUCsINllGgcKMuGtFoVIr4SRk=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: 66edL3EK4gSIu1IxUHMffIvk4CS8RvRB57qwlvzFqfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: May 6 19:31:38 2024 GMT Not After : May 13 19:31:38 2024 GMT Subject: CN=6639301b-571a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:42:a5:6e:37:a2:3d:e0:82:d5:dc:df:18:bd: b8:12:c0:f9:c3:67:a9:10:e2:27:e2:f1:ed:c4:a6: 7d:b3:42:ad:fc:83:f1:aa:ca:01:ee:f8:db:a6:e4: 77:17:6e:1b:c8:da:f6:95:f6:17:9c:91:4b:be:3f: 0a:7c:9c:86:5e:2a:d0:f0:eb:ea:04:19:18:7f:b3: 56:bb:71:8c:99:1a:eb:06:5a:d7:21:63:fa:42:f9: 12:c6:6c:17:a2:e8:c6:ee:1b:68:93:39:17:37:e3: 50:90:ec:b0:2c:bf:1b:3d:fc:5e:e9:41:b1:7a:2f: 01:1c:f3:b5:29:6a:0b:ce:66:1d:14:45:e0:52:e9: 93:f8:a1:f1:6e:d4:68:1f:88:2d:a3:38:ac:2c:56: c8:a8:5c:a7:f4:17:02:86:a3:30:bb:fe:64:62:a1: fe:a1:60:d2:06:50:39:34:bf:b1:95:a9:e4:15:15: 2e:93:53:ab:9e:4b:80:4e:f1:0f:a2:5d:db:68:2a: c9:ab:76:cf:a2:b1:5a:13:6b:70:5a:e2:ec:48:e5: 7d:ec:91:d7:39:a0:af:21:d6:39:8d:26:15:db:49: e7:30:c8:2c:32:96:a0:c3:e4:be:6f:4c:a7:bf:17: 21:6d:aa:8b:81:23:c5:03:0e:78:f2:14:40:9e:40: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:AE:50:7C:0A:DF:6B:4F:D5:EC:CA:B6:48:CA:74:D0:D5:B0:AE X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:1a:78:8e:3a:10:58:9b:5b:a4:3f:f3:cb:7d:cf:88:6f:98: cb:3b:8d:ab:16:11:95:f0:8c:81:af:3d:b2:11:16:0d:1a:50: 0f:7f:5c:73:bf:f8:93:47:d5:84:1f:37:a6:b6:9f:bd:a5:bd: 80:60:18:5d:af:10:20:ec:26:e5:49:6d:cd:8f:05:96:50:8c: dc:3d:50:92:1a:57:1a:b2:48:62:bb:73:57:59:54:f4:2a:11: 66:9b:e4:02:dd:1c:ff:8d:8c:5f:d7:2d:83:9d:20:c2:a7:99: d2:86:96:fc:70:bf:fa:5b:4f:ee:bb:ed:67:ed:8b:a4:dc:c3: d6:16:62:fb:18:a9:1a:dd:8e:d3:59:98:48:d9:85:f9:f0:f7: 5c:96:87:97:31:53:2b:ff:d1:76:33:10:73:20:e9:1b:db:bc: e3:c4:3b:b1:70:fb:cf:ba:42:7f:ea:a2:f7:a6:c9:01:3c:89: b2:47:6e:4f:ba:29:19:51:e7:e3:f4:38:96:3c:56:b5:93:02: cc:47:80:55:f9:b9:6c:12:a1:99:bc:d3:44:9e:ae:ba:ee:c3: dd:ea:76:43:f9:bd:55:fa:29:1f:41:56:05:c3:e1:49:15:48: 80:fe:ca:c0:1f:d1:ed:46:b6:ae:dc:ee:83:01:f2:e2:f3:e6: ab:fb:87:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjQwNTA2MTkzMTM4WhcNMjQwNTEzMTkzMTM4WjAYMRYwFAYD VQQDEw02NjM5MzAxYi01NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kKlbjeiPeCC1dzfGL24EsD5w2epEOIn4vHtxKZ9s0Kt/IPxqsoB7vjbpuR3 F24byNr2lfYXnJFLvj8KfJyGXirQ8OvqBBkYf7NWu3GMmRrrBlrXIWP6QvkSxmwX oujG7htokzkXN+NQkOywLL8bPfxe6UGxei8BHPO1KWoLzmYdFEXgUumT+KHxbtRo H4gtozisLFbIqFyn9BcChqMwu/5kYqH+oWDSBlA5NL+xlankFRUuk1OrnkuATvEP ol3baCrJq3bPorFaE2twWuLsSOV97JHXOaCvIdY5jSYV20nnMMgsMpagw+S+b0yn vxchbaqLgSPFAw548hRAnkAzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqTrlB8 Ct9rT9XsyrZIynTQ1bCuMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUGniOOhBYm1ukP/PLfc+Ib5jLO42rFhGV8IyBrz2yERYNGlAPf1xz v/iTR9WEHzemtp+9pb2AYBhdrxAg7CblSW3NjwWWUIzcPVCSGlcaskhiu3NXWVT0 KhFmm+QC3Rz/jYxf1y2DnSDCp5nShpb8cL/6W0/uu+1n7Yuk3MPWFmL7GKka3Y7T WZhI2YX58PdcloeXMVMr/9F2MxBzIOkb27zjxDuxcPvPukJ/6qL3pskBPImyR25P uikZUefj9DiWPFa1kwLMR4BV+blsEqGZvNNEnq667sPd6nZD+b1V+ikfQVYFw+FJ FUiA/srAH9HtRrau3O6DAfLi8+ar+4dU -----END CERTIFICATE-----Generated at Mon May 6 20:19:44 2024 by rpki-client on console-ams.rpki-client.org