$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json) Hash identifier: HsgZ4YnUSEqbzWNkuRg4fCzbvrwq0Xd0KlMY+RT6BVI= Subject key identifier: 28:9A:45:29:20:71:32:55:2B:41:37:58:7B:D7:C1:5B:90:22:F0:38 Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft Manifest number: 6A Signing time: Sun 19 May 2024 07:36:44 +0000 Manifest this update: Sun 19 May 2024 07:36:44 +0000 Manifest next update: Sun 26 May 2024 07:36:44 +0000 Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: iIFsg2DnruKiB7kYjvL7ZFNeZmMt8pJzEisKYLdPq/s=) 2: C6088BAA053211EF81CC9417C4F9AE02.roa (hash: QBg54lHYPd3DsxaVVe+4vsRiJXgzNm26m1Do0p5Kr+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Validity Not Before: May 19 07:36:44 2024 GMT Not After : May 26 07:36:44 2024 GMT Subject: CN=6649ac0c-5a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:ce:64:95:f0:a3:3a:89:7f:58:8d:f0:8c: 41:fb:88:ba:9b:4b:70:a5:65:b7:df:6e:9f:26:da: 86:eb:05:87:f6:02:72:9c:6f:57:e6:79:9a:be:0e: 35:e8:46:54:12:53:8a:ee:f8:e4:7d:e2:2d:49:4e: da:e5:41:9a:d8:40:96:82:4a:fb:aa:7c:88:ae:28: 6f:e4:d7:43:d1:c2:06:40:64:9b:b4:48:43:7b:f2: 24:79:6e:f6:06:d8:58:a7:58:1d:ee:2a:41:58:ac: 66:36:ca:ba:e6:7d:58:eb:e0:df:b8:c1:6b:81:78: 80:f4:39:74:4e:3c:04:03:83:2b:37:1a:70:16:1b: bd:07:59:dc:c8:79:a3:a2:21:35:2e:28:02:8f:a7: 98:69:27:d1:a1:6a:fe:e6:34:cf:f3:37:10:1e:e6: 77:5f:04:be:f1:84:f2:45:34:98:9f:15:b3:b0:74: e0:79:05:aa:71:2c:f4:5f:41:20:e6:fc:97:50:ef: 66:43:51:01:c3:2c:16:a3:91:37:f7:d7:43:9d:62: cc:30:4c:ee:7c:8a:96:b5:05:28:78:2b:d6:50:86: 01:bd:76:91:8b:e3:c2:d1:f9:82:b3:2e:1b:b3:b2: 58:98:0d:f3:1e:14:6c:d8:bd:bc:81:df:67:db:a8: 30:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:45:29:20:71:32:55:2B:41:37:58:7B:D7:C1:5B:90:22:F0:38 X509v3 Authority Key Identifier: keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f3:4d:0b:e2:32:d3:30:c2:a6:62:04:01:4d:21:a2:2a:c6: 9b:73:eb:4d:44:d0:63:71:ec:61:29:83:46:34:e8:3c:03:e8: 84:b0:60:a2:40:a2:60:9f:b9:99:e0:31:14:1d:39:ec:d9:c9: 69:c9:35:c0:31:c4:52:bb:85:e2:c3:6e:dc:f0:00:f8:04:c0: 43:79:aa:30:58:cf:e7:d9:41:86:b6:95:3c:29:9a:4c:4a:d9: 7d:06:86:3a:e8:40:5e:a9:a7:ea:b8:8c:9b:e0:9e:ac:ab:25: 4f:40:78:0a:cc:cb:0c:39:0d:95:11:94:e0:55:f0:dc:07:3e: 9a:e3:fd:ea:22:7f:ad:d6:70:5c:5e:ca:36:b3:48:00:36:b5: 1d:b2:fb:62:07:b4:05:ba:49:ad:05:70:1a:79:c8:41:b0:9f: 1d:0e:37:57:2d:d3:50:d7:77:7f:66:a7:70:70:e2:20:8e:ae: c2:5f:16:1a:5c:8d:b6:98:57:74:1a:d5:99:83:a7:2f:79:a8: 9a:b2:0b:20:97:c0:c7:02:e1:26:2e:80:c1:38:68:06:5b:81: 95:b8:70:5f:0a:ce:af:33:35:b1:cb:0c:13:a0:71:19:c6:d3: ab:c1:6d:45:81:a5:77:c2:4a:f2:d6:3a:ff:dd:79:7a:2d:1a: e7:a5:5e:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjlBNTExMC8GA1UEBRMoNTZGOTI4QzcyQTU3MjhDMTdBOTgyNTEwOUJCQkI3MjEw MzEzQkJDQTAeFw0yNDA1MTkwNzM2NDRaFw0yNDA1MjYwNzM2NDRaMBgxFjAUBgNV BAMTDTY2NDlhYzBjLTVhMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsZM5klfCjOol/WI3wjEH7iLqbS3ClZbffbp8m2obrBYf2AnKcb1fmeZq+DjXo RlQSU4ru+OR94i1JTtrlQZrYQJaCSvuqfIiuKG/k10PRwgZAZJu0SEN78iR5bvYG 2FinWB3uKkFYrGY2yrrmfVjr4N+4wWuBeID0OXROPAQDgys3GnAWG70HWdzIeaOi ITUuKAKPp5hpJ9Ghav7mNM/zNxAe5ndfBL7xhPJFNJifFbOwdOB5BapxLPRfQSDm /JdQ72ZDUQHDLBajkTf310OdYswwTO58ipa1BSh4K9ZQhgG9dpGL48LR+YKzLhuz sliYDfMeFGzYvbyB32fbqDBvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKJpFKSBx MlUrQTdYe9fBW5Ai8DgwHwYDVR0jBBgwFoAUVvkoxypXKMF6mCUQm7u3IQMTu8ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOUE1L0UyOUU3MzYwN0Ex MzExRUVBQkExNTA2OUM0RjlBRTAyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnZrb3h5cFhLTUY2bUNVUW03dTNJUU1UdThvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy OUE1L0UyOUU3MzYwN0ExMzExRUVBQkExNTA2OUM0RjlBRTAyL1Z2a294eXBYS01G Nm1DVVFtN3UzSVFNVHU4by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3zTQviMtMwwqZiBAFNIaIqxptz601E0GNx7GEpg0Y06DwD6ISwYKJA omCfuZngMRQdOezZyWnJNcAxxFK7heLDbtzwAPgEwEN5qjBYz+fZQYa2lTwpmkxK 2X0GhjroQF6pp+q4jJvgnqyrJU9AeArMyww5DZURlOBV8NwHPprj/eoif63WcFxe yjazSAA2tR2y+2IHtAW6Sa0FcBp5yEGwnx0ON1ct01DXd39mp3Bw4iCOrsJfFhpc jbaYV3Qa1ZmDpy95qJqyCyCXwMcC4SYugME4aAZbgZW4cF8Kzq8zNbHLDBOgcRnG 06vBbUWBpXfCSvLWOv/deXotGuelXiY= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org