$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: owekMO8zV5l+l+jIkScgccXfjnbr0mEeCE8ipdouXa8= Subject key identifier: 1E:4C:B4:B4:EF:11:52:FA:AF:D8:3C:7B:F7:6A:17:E8:DF:2D:D7:3B Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 41 Signing time: Tue 21 May 2024 08:07:11 +0000 Manifest this update: Tue 21 May 2024 08:07:10 +0000 Manifest next update: Tue 28 May 2024 08:07:10 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: 8w0W9Oyzb4mtbIpHI0G8n6GZreWG8DoXO23cg609AsY=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: bbMHV8oCUwtDEkC22H+H7bKfD+4ySH6t4g6oHROy/Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: May 21 08:07:10 2024 GMT Not After : May 28 08:07:10 2024 GMT Subject: CN=664c562f-df53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:46:e6:de:4b:c2:c9:34:95:10:c9:95:21: 0d:8f:7f:51:f4:89:04:db:c8:cc:64:a3:cb:70:1c: 1c:89:e4:64:1f:8b:c1:09:1f:80:6a:05:b3:6b:d3: e2:71:05:8c:36:65:11:85:6f:51:91:e8:17:6b:34: 11:d7:80:90:de:e7:77:f6:8d:dc:49:8f:44:de:0a: a5:aa:03:8b:a8:7c:c5:b4:fb:7a:a4:c3:33:27:f2: f7:09:34:e7:d7:b1:73:03:70:bb:af:92:1e:80:e5: 45:ba:49:1f:9d:d3:4a:3e:98:bb:87:20:87:7b:54: 67:09:29:4d:7f:ed:19:83:94:f1:3d:ce:d5:2b:51: 49:f7:d4:b3:ad:d0:49:7e:0a:00:4e:64:1c:54:40: 9a:a5:bd:7c:ba:c4:0d:1a:c8:75:ac:56:5d:4e:78: 1b:0d:87:89:d4:e7:40:1b:c7:a2:1a:95:8e:e6:fe: 8c:d5:78:6d:7b:88:21:e7:ea:79:20:a9:b6:fb:ee: ab:64:27:0a:cb:6e:54:f6:4f:45:3c:4e:45:21:8f: ed:ff:1d:cc:ad:eb:30:d2:68:2a:88:91:4f:08:40: 4b:fb:44:be:b7:bc:5f:1f:b3:b2:49:6d:58:55:48: 6e:3e:9c:93:e0:81:32:dd:26:d3:e0:a3:0b:30:d5: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:B4:B4:EF:11:52:FA:AF:D8:3C:7B:F7:6A:17:E8:DF:2D:D7:3B X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:44:0c:74:a0:bd:03:b0:ae:54:c9:3e:86:ce:0a:f9:13:67: e1:e0:1d:6c:a1:1f:07:e0:b6:88:1c:ca:cd:a0:92:45:70:c4: 16:7d:d6:f0:96:7a:7a:b1:21:86:db:1b:50:6a:ec:9b:85:8e: 61:96:ad:ce:34:d9:b3:31:7d:72:64:c3:30:66:a2:93:0e:82: 3f:28:3d:31:7e:b9:59:49:1c:d0:d1:4e:0e:90:33:d4:8d:d1: a3:07:9a:70:2f:09:dc:c8:ae:bc:66:64:7b:80:d0:5a:da:ef: cb:b7:4e:ca:c5:b0:94:db:68:d1:34:48:d4:e0:fe:c8:d4:2a: b9:c3:8b:9c:82:e4:db:39:77:06:9e:a0:f6:32:cc:22:db:90: 33:48:66:83:6b:aa:b1:35:23:c9:95:2d:58:13:2f:01:41:d2: 97:98:15:90:a0:01:24:49:a3:5d:15:81:82:92:80:30:e1:79: 7d:a6:8d:f4:f0:8d:b0:d8:d1:fc:44:a1:fd:fa:99:b4:60:93: 4b:6e:1a:ed:81:f8:85:29:ae:b8:46:7d:cb:1b:7f:a7:6d:9e: 10:88:9b:b9:f6:fe:e8:8f:19:eb:27:d7:0a:2f:be:5b:4b:70: 60:5d:52:78:f3:b1:8d:ef:2d:4d:b5:c7:99:4d:69:39:30:11: 84:ef:8d:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkQ1QTExMC8GA1UEBRMoMzNFNTQyNUQwMzY4RjgyRkY4NUI5Qjg0N0Y0MTIzOEFE NThENEU1MDAeFw0yNDA1MjEwODA3MTBaFw0yNDA1MjgwODA3MTBaMBgxFjAUBgNV BAMTDTY2NGM1NjJmLWRmNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBIkbm3kvCyTSVEMmVIQ2Pf1H0iQTbyMxko8twHByJ5GQfi8EJH4BqBbNr0+Jx BYw2ZRGFb1GR6BdrNBHXgJDe53f2jdxJj0TeCqWqA4uofMW0+3qkwzMn8vcJNOfX sXMDcLuvkh6A5UW6SR+d00o+mLuHIId7VGcJKU1/7RmDlPE9ztUrUUn31LOt0El+ CgBOZBxUQJqlvXy6xA0ayHWsVl1OeBsNh4nU50Abx6IalY7m/ozVeG17iCHn6nkg qbb77qtkJwrLblT2T0U8TkUhj+3/Hcyt6zDSaCqIkU8IQEv7RL63vF8fs7JJbVhV SG4+nJPggTLdJtPgowsw1YvpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHky0tO8R Uvqv2Dx792oX6N8t1zswHwYDVR0jBBgwFoAUM+VCXQNo+C/4W5uEf0EjitWNTlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRDVBLzVGQjdEQzA4QjlB QTExRUVCMERDRDgzNEM0RjlBRTAyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTS1WQ1hRTm8tQ180VzV1RWYwRWppdFdOVGxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RDVBLzVGQjdEQzA4QjlBQTExRUVCMERDRDgzNEM0RjlBRTAyL00tVkNYUU5vLUNf NFc1dUVmMEVqaXRXTlRsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9EDHSgvQOwrlTJPobOCvkTZ+HgHWyhHwfgtogcys2gkkVwxBZ91vCW enqxIYbbG1Bq7JuFjmGWrc402bMxfXJkwzBmopMOgj8oPTF+uVlJHNDRTg6QM9SN 0aMHmnAvCdzIrrxmZHuA0Fra78u3TsrFsJTbaNE0SNTg/sjUKrnDi5yC5Ns5dwae oPYyzCLbkDNIZoNrqrE1I8mVLVgTLwFB0peYFZCgASRJo10VgYKSgDDheX2mjfTw jbDY0fxEof36mbRgk0tuGu2B+IUprrhGfcsbf6dtnhCIm7n2/uiPGesn1wovvltL cGBdUnjzsY3vLU21x5lNaTkwEYTvjUo= -----END CERTIFICATE-----Generated at Tue May 21 10:12:56 2024 by rpki-client on console-ams.rpki-client.org