$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: /Q5vDrnZk2ph4B5iZUoxQhQq9/B8N5kCFOSh5ed2I74= Subject key identifier: 34:5B:B9:36:8A:A4:8A:05:E3:68:44:3B:C1:0D:8D:F0:85:38:7E:0C Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 03FC Signing time: Fri 03 May 2024 02:41:46 +0000 Manifest this update: Fri 03 May 2024 02:41:46 +0000 Manifest next update: Fri 10 May 2024 02:41:46 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: klxTSqDBbVmRVttKf5LeFqlXSF9D/vKAJLXii1RFCAw=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: knanjKHlyrjF7vjsmUcV7GPw77UwfPcv9tpn5QgFxWQ=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: uKHcXkN2gdy3sQKO6DoJGAq26a1INYNH8o/S6Z79Y6c=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: J+gY8qOEhcuRyujjCO0gYnnoKOCMqUrF6Mj9pXDgAl8=) 5: 3F7DF1DAE27C11EDAE21C974C4F9AE02.roa (hash: 7+iwGvBe2i2+1Iw3Ji78E2B2nQ4C3/BeDh7VWnAt1yI=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: m8IZ4qLO4phX6wK28elZrB9qe1Jr07UMQgFPwPXqMHs=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: ejFMT70IjHWQKzZaSEDxOf+KHahnD09ISiZqpnsDA5o=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: 0DGna2tww9RB/UuCw1bERJWQSSMHCxUHVLlu1VAXUAE=) 9: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: W6QZl9Glv/kELLKjMr+HNq0CvcjhcYZftIr2gJTYbLg=) 10: D359E238716B11ED9F349A49C4F9AE02.roa (hash: cCtIEM0HBTy24WARxsJCpIZbbxiDWPMzfNXWUKKoGow=) 11: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: kuBnPcdiRio8yetCCkhSBY/OQLDS0maenZbYKmkkEGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: May 3 02:41:46 2024 GMT Not After : May 10 02:41:46 2024 GMT Subject: CN=66344eea-f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:57:77:2b:e4:ca:8b:3c:75:5e:c0:f3:d5: 93:66:da:9a:f0:7a:ac:b1:11:27:31:77:da:5c:fd: f9:12:7b:79:3e:e4:62:91:35:35:da:7d:e0:e1:dd: cb:0b:c2:4e:f9:1a:17:bc:7e:a3:68:b8:6a:9a:c8: 0d:a1:3e:3a:24:2d:56:8c:be:88:c6:e0:f5:c6:a1: 34:5d:e7:cf:09:36:12:00:0a:56:30:35:eb:af:49: 8f:ca:55:f1:d4:95:db:93:ab:9c:a3:bb:ac:dc:3f: a0:d0:da:41:6f:5c:13:35:35:de:c2:2d:04:af:d5: ce:2c:c1:eb:99:99:c4:44:73:23:00:42:e7:4f:7c: 72:4e:c7:3e:57:bc:4d:dc:be:f7:6b:e4:37:e1:d7: 1e:c2:b3:91:c8:36:b3:95:db:81:fc:44:7b:56:fa: 47:c3:54:99:3a:2d:e0:62:9a:f9:f9:5b:4f:61:cd: 07:75:5a:5f:91:c4:25:6c:fd:ba:ec:f8:1a:7c:04: 47:9f:13:70:f8:c5:2e:ab:77:b9:36:75:80:99:ec: 18:ff:33:da:f0:cb:95:e3:18:11:c9:6e:95:a5:4c: ac:c9:9f:2c:e2:2c:b0:07:93:c2:42:02:3c:fe:85: ca:2a:5f:51:34:e4:bc:cf:64:8e:85:0a:20:2f:91: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5B:B9:36:8A:A4:8A:05:E3:68:44:3B:C1:0D:8D:F0:85:38:7E:0C X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:00:64:7a:ae:0c:74:61:e9:83:97:b9:cc:fd:71:cb:75:b8: 02:5d:d9:ba:26:cd:e5:41:a2:23:14:c7:f3:bf:3e:8f:d7:61: 87:50:aa:71:c9:31:66:5e:07:f8:f2:c4:a5:f1:94:bf:b5:eb: aa:d7:49:90:d4:7e:82:8c:ef:52:c9:cc:6e:d7:0c:e9:8b:3e: 59:b5:a1:f0:28:f8:b8:b6:66:1b:60:d0:d5:41:2e:ce:96:56: fc:18:96:10:a1:74:ba:32:f7:7f:c3:38:d2:9a:ad:cd:69:23: 5b:f1:7d:81:5a:fd:b6:e2:9c:a0:f0:7b:6f:71:fa:df:0d:36: dd:3f:5b:2a:98:6c:b6:0a:82:d2:90:ae:ee:f9:c7:09:12:b8: a2:f7:5e:6d:00:cb:92:c0:36:3e:e0:ca:cc:21:27:d6:ff:6d: fb:cd:e6:4c:37:38:b9:ce:1d:23:3b:69:69:b8:eb:5b:53:6d: a4:b9:c4:b7:e2:b8:f9:c5:8f:f5:b3:a1:4f:ba:5d:cd:43:3f: dc:b7:c7:86:8e:3b:34:27:9b:dc:d5:1f:08:de:b7:40:80:aa: ff:81:73:5c:19:e3:4c:55:c9:ac:95:fd:ea:19:5b:7e:4d:85: 0b:ae:cd:e9:1e:0d:d6:90:34:2e:e3:58:7f:14:99:bc:28:71: f7:28:e1:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjQwNTAzMDI0MTQ2WhcNMjQwNTEwMDI0MTQ2WjAYMRYwFAYD VQQDEw02NjM0NGVlYS1mOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzpXdyvkyos8dV7A89WTZtqa8HqssREnMXfaXP35Ent5PuRikTU12n3g4d3L C8JO+RoXvH6jaLhqmsgNoT46JC1WjL6IxuD1xqE0XefPCTYSAApWMDXrr0mPylXx 1JXbk6uco7us3D+g0NpBb1wTNTXewi0Er9XOLMHrmZnERHMjAELnT3xyTsc+V7xN 3L73a+Q34dcewrORyDazlduB/ER7VvpHw1SZOi3gYpr5+VtPYc0HdVpfkcQlbP26 7PgafARHnxNw+MUuq3e5NnWAmewY/zPa8MuV4xgRyW6VpUysyZ8s4iywB5PCQgI8 /oXKKl9RNOS8z2SOhQogL5F+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRbuTaK pIoF42hEO8ENjfCFOH4MMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKAGR6rgx0YemDl7nM/XHLdbgCXdm6Js3lQaIjFMfzvz6P12GHUKpx yTFmXgf48sSl8ZS/teuq10mQ1H6CjO9Sycxu1wzpiz5ZtaHwKPi4tmYbYNDVQS7O llb8GJYQoXS6Mvd/wzjSmq3NaSNb8X2BWv224pyg8HtvcfrfDTbdP1sqmGy2CoLS kK7u+ccJErii915tAMuSwDY+4MrMISfW/237zeZMNzi5zh0jO2lpuOtbU22kucS3 4rj5xY/1s6FPul3NQz/ct8eGjjs0J5vc1R8I3rdAgKr/gXNcGeNMVcmslf3qGVt+ TYULrs3pHg3WkDQu41h/FJm8KHH3KOF4 -----END CERTIFICATE-----Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org