$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft File: VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json) Hash identifier: Q8eC8I9t2CAwb976TJxrr7aQ/24+P9KJrUvxoD0sk50= Subject key identifier: 9D:4E:47:02:E0:B7:5B:F8:25:1D:C6:5C:33:C7:80:BA:57:BD:9D:DB Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft Manifest number: 58 Signing time: Wed 15 May 2024 07:58:36 +0000 Manifest this update: Wed 15 May 2024 07:58:36 +0000 Manifest next update: Wed 22 May 2024 07:58:36 +0000 Files and hashes: 1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: NiMbXiFMFFl3nJMNQ2mpA0kxpnvperlEPqOpsQBHSJc=) 2: 88EF68A493FB11EEB38F6C43C4F9AE02.roa (hash: N7gXYPnxWIl9zdSTmIwWyh3CoXzXJ9+PxoO1xsssmaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: May 15 07:58:36 2024 GMT Not After : May 22 07:58:36 2024 GMT Subject: CN=66446b2c-7281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:26:e4:4d:ed:b3:33:9a:4a:1c:07:b2:e9: 32:1b:4c:ce:cc:35:24:93:cb:b5:ec:3b:43:11:92: 6d:d1:5b:b3:47:91:30:38:73:1d:b6:44:50:36:dd: 06:6d:36:c4:c7:d1:a7:36:c1:37:4e:fc:a5:fc:97: 9a:9d:8a:5d:47:5a:5f:f7:45:b5:fa:7e:29:bb:92: 77:4b:d7:9a:a8:2c:a0:3d:31:20:98:6e:41:d8:bc: 01:e3:1a:d6:3e:e8:d9:a7:41:e9:a8:24:ad:fe:07: d8:2e:b9:1e:96:6b:a5:bd:c3:6a:ad:e6:8f:0e:64: 28:1b:52:b2:5c:7f:be:75:4a:11:87:05:8e:6e:1d: 01:5e:f8:44:70:aa:62:65:52:04:dd:70:6d:52:cd: 1d:74:fb:e9:39:2e:9c:52:ac:db:ec:fc:86:4c:38: e2:be:72:af:94:a6:b0:c5:9f:ee:18:fa:8e:80:b3: a2:2c:90:3e:26:07:c7:6f:d4:b6:31:6e:f5:73:c4: b9:15:8d:2e:30:1a:a2:9f:81:ba:0b:b5:da:d5:a0: 6c:9f:68:5e:f6:7d:b8:5c:4a:80:c5:aa:e3:3a:f0: 75:b7:43:f6:af:fb:15:29:80:ed:33:c4:ef:89:57: 8f:9a:ed:0a:5b:ad:87:3f:1c:8b:4b:49:68:aa:8f: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4E:47:02:E0:B7:5B:F8:25:1D:C6:5C:33:C7:80:BA:57:BD:9D:DB X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9f:d2:51:c0:93:68:a7:73:69:43:9d:4c:e2:3c:b4:18:c8: c5:94:fe:83:ee:e5:5f:07:b1:29:f6:f8:1a:9e:29:83:2a:eb: ff:40:5f:93:61:bf:85:b2:6f:0f:c0:a3:23:62:38:0a:9b:40: 1a:2c:0c:ef:a4:b2:e6:40:39:5c:82:67:8e:9f:91:b4:d5:68: 78:e9:7b:84:41:ec:4a:f7:33:9c:07:7e:18:64:24:43:6c:f5: 78:40:c0:a2:a0:e2:9d:8c:1f:66:14:53:8a:2a:46:71:99:cd: a0:58:67:f3:0b:15:a7:30:5e:79:a3:a9:7a:5c:f2:89:26:57: 43:36:35:49:54:cb:de:33:d2:5d:5f:5e:63:34:2e:5a:63:21: 10:d9:5b:05:8f:65:85:e1:0e:7f:08:f1:2d:ac:9c:c6:68:75: f9:bb:a9:84:fb:58:b7:49:e0:5e:7c:2b:9b:c7:c7:41:2e:3c: 92:76:d3:19:a6:46:35:04:03:f3:e9:a4:bc:e8:6e:cd:80:3c: a5:5a:54:16:a1:ba:7c:fc:15:79:63:cd:8a:dd:f7:08:41:b2: 97:c1:3e:99:3b:8a:f7:a2:50:34:bc:98:6c:b2:83:9c:b3:e2: 34:21:e8:d6:c8:40:70:57:b9:52:11:19:84:a8:ca:59:a9:fd: 81:95:15:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjEwMzExMC8GA1UEBRMoNTQ1QzQ3QzBFNDMxMzMzOERDOUI0NDAyQzEyQkFEQ0I0 RTk4NTdDMTAeFw0yNDA1MTUwNzU4MzZaFw0yNDA1MjIwNzU4MzZaMBgxFjAUBgNV BAMTDTY2NDQ2YjJjLTcyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgfSbkTe2zM5pKHAey6TIbTM7MNSSTy7XsO0MRkm3RW7NHkTA4cx22RFA23QZt NsTH0ac2wTdO/KX8l5qdil1HWl/3RbX6fim7kndL15qoLKA9MSCYbkHYvAHjGtY+ 6NmnQemoJK3+B9guuR6Wa6W9w2qt5o8OZCgbUrJcf751ShGHBY5uHQFe+ERwqmJl UgTdcG1SzR10++k5LpxSrNvs/IZMOOK+cq+UprDFn+4Y+o6As6IskD4mB8dv1LYx bvVzxLkVjS4wGqKfgboLtdrVoGyfaF72fbhcSoDFquM68HW3Q/av+xUpgO0zxO+J V4+a7QpbrYc/HItLSWiqjzOVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnU5HAuC3 W/glHcZcM8eAule9ndswHwYDVR0jBBgwFoAUVFxHwOQxMzjcm0QCwSuty06YV8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMTAzLzJGQjk4NTA4OTNG QjExRUU5NjhFRTQ0MkM0RjlBRTAyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkZ4SHdPUXhNempjbTBRQ3dTdXR5MDZZVjhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC MTAzLzJGQjk4NTA4OTNGQjExRUU5NjhFRTQ0MkM0RjlBRTAyL1ZGeEh3T1F4TXpq Y20wUUN3U3V0eTA2WVY4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAICf0lHAk2inc2lDnUziPLQYyMWU/oPu5V8HsSn2+BqeKYMq6/9AX5Nh v4Wybw/AoyNiOAqbQBosDO+ksuZAOVyCZ46fkbTVaHjpe4RB7Er3M5wHfhhkJENs 9XhAwKKg4p2MH2YUU4oqRnGZzaBYZ/MLFacwXnmjqXpc8okmV0M2NUlUy94z0l1f XmM0LlpjIRDZWwWPZYXhDn8I8S2snMZodfm7qYT7WLdJ4F58K5vHx0EuPJJ20xmm RjUEA/PppLzobs2APKVaVBahunz8FXljzYrd9whBspfBPpk7iveiUDS8mGyyg5yz 4jQh6NbIQHBXuVIRGYSoylmp/YGVFbY= -----END CERTIFICATE-----Generated at Wed May 15 09:04:47 2024 by rpki-client on console-ams.rpki-client.org