$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: nzuFWtug9H5L253p7e1pl6Wnh+My7Bl4JIqh/oyF1A8= Subject key identifier: C7:D1:B6:EF:75:C4:80:F5:93:82:25:B0:51:91:08:41:C4:7F:59:A7 Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0A4B Signing time: Sat 18 May 2024 20:22:47 +0000 Manifest this update: Sat 18 May 2024 20:22:46 +0000 Manifest next update: Sat 25 May 2024 20:22:46 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: IwvrKsGv8nQ0k2QvRUtrgcljOSaib6SthnHHy5nMuRw=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: pCRJQ2jLAd0gXJTFddTmCbM7xMg8KxyZyVVM+pskxgU=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: iutGDc+eLtPiQRjKdNm/Tn6dc2YAB+LNzhzHIbeu0jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Validity Not Before: May 18 20:22:46 2024 GMT Not After : May 25 20:22:46 2024 GMT Subject: CN=66490e16-31b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:84:4c:60:77:2c:48:5d:03:52:81:3c:6d: 22:7a:06:0e:71:d9:5d:3f:ae:8a:5e:ff:05:eb:5f: 08:30:63:83:a5:29:93:fa:77:83:27:ac:6c:63:a5: f5:8c:9f:1f:cf:69:d6:6d:cb:19:79:cd:2b:b8:a2: 7e:73:a9:9b:ee:da:1b:aa:35:cc:e8:9b:36:65:5f: 5f:5c:5b:2c:0e:c5:9d:86:9b:79:5f:46:d6:b4:41: ca:6d:4e:5e:64:5e:ac:c3:95:b9:16:bc:7f:01:e6: 24:b4:2b:47:91:e1:72:31:58:a2:cb:73:7e:ab:dc: d8:ae:b3:28:2e:a7:2d:17:9c:98:49:e6:14:a2:e4: ec:6a:d7:13:00:40:82:09:2e:9f:e6:32:08:b1:34: d0:68:13:bd:de:f3:51:ec:e9:1c:aa:67:8d:8e:47: 50:4d:09:22:20:e8:0e:c4:74:93:62:95:be:9f:23: 7f:3b:47:2c:5c:b0:74:fb:2c:05:90:3c:5c:fa:48: 1a:0b:73:30:3b:14:70:ef:b5:35:3f:44:92:f5:e3: bf:8c:15:1e:4f:0e:5e:05:08:c2:0a:05:23:37:5e: d3:b6:ff:5a:a5:c7:53:e4:e5:d9:4b:dc:3a:7a:84: 9d:16:79:ed:41:4a:2f:cf:9b:84:d6:93:6e:be:0b: d9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D1:B6:EF:75:C4:80:F5:93:82:25:B0:51:91:08:41:C4:7F:59:A7 X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ba:28:c9:42:25:1a:87:96:de:6e:92:83:7a:f2:e9:ba:19: f1:f0:15:e3:b3:0e:12:ee:47:95:20:7f:62:72:d9:11:de:e5: 08:e4:af:3a:a7:d1:ad:4f:73:d3:72:d5:12:90:be:0d:92:80: 09:33:c8:40:86:3a:e3:a1:c9:d5:d1:6d:e0:a6:32:9f:64:96: dd:f0:61:8d:7e:32:dd:ba:c1:b5:08:52:61:3c:5a:d3:de:a6: 59:7c:2f:45:1c:40:d9:7c:0b:9e:6c:e1:1b:4b:7b:8f:fd:ca: cb:0e:83:28:16:74:46:1f:1c:e3:b4:d9:40:80:a1:0e:60:80: e4:16:42:1c:80:a3:5b:46:a7:63:88:9d:76:d1:99:39:d7:ee: 65:9a:95:00:b7:e5:22:f7:4e:80:79:53:bf:e8:c3:53:72:1d: af:3f:2b:67:42:e1:ef:45:42:2b:f9:9f:2d:23:e6:ae:5c:93: 82:e4:9e:62:62:61:11:8b:9e:5f:df:d0:4a:5f:c3:e0:a2:51: ae:9e:0d:ae:6f:1b:69:dd:f9:43:57:26:16:ac:ee:16:2e:c7: 05:32:15:a6:eb:81:07:72:58:f2:f8:a4:9f:4a:5e:f8:31:65: 56:5d:ed:d2:9e:0a:59:34:e9:bf:81:77:8d:12:2d:0d:a4:68: 37:9e:fc:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjQwNTE4MjAyMjQ2WhcNMjQwNTI1MjAyMjQ2WjAYMRYwFAYD VQQDEw02NjQ5MGUxNi0zMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhWETGB3LEhdA1KBPG0iegYOcdldP66KXv8F618IMGODpSmT+neDJ6xsY6X1 jJ8fz2nWbcsZec0ruKJ+c6mb7tobqjXM6Js2ZV9fXFssDsWdhpt5X0bWtEHKbU5e ZF6sw5W5Frx/AeYktCtHkeFyMViiy3N+q9zYrrMoLqctF5yYSeYUouTsatcTAECC CS6f5jIIsTTQaBO93vNR7OkcqmeNjkdQTQkiIOgOxHSTYpW+nyN/O0csXLB0+ywF kDxc+kgaC3MwOxRw77U1P0SS9eO/jBUeTw5eBQjCCgUjN17Ttv9apcdT5OXZS9w6 eoSdFnntQUovz5uE1pNuvgvZ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfRtu91 xID1k4IlsFGRCEHEf1mnMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCuijJQiUah5bebpKDevLpuhnx8BXjsw4S7keVIH9ictkR3uUI5K86 p9GtT3PTctUSkL4NkoAJM8hAhjrjocnV0W3gpjKfZJbd8GGNfjLdusG1CFJhPFrT 3qZZfC9FHEDZfAuebOEbS3uP/crLDoMoFnRGHxzjtNlAgKEOYIDkFkIcgKNbRqdj iJ120Zk51+5lmpUAt+Ui906AeVO/6MNTch2vPytnQuHvRUIr+Z8tI+auXJOC5J5i YmERi55f39BKX8PgolGung2ubxtp3flDVyYWrO4WLscFMhWm64EHcljy+KSfSl74 MWVWXe3SngpZNOm/gXeNEi0NpGg3nvzM -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org