$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json) Hash identifier: +WS1dhuQzoaTGo0NuC3eeXURUO6OMlhi2gpIrrqzIE0= Subject key identifier: AD:0E:DC:18:47:E1:F2:9E:3A:14:4B:D1:0B:55:6A:F1:E7:BE:70:C1 Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Certificate serial: 21B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft Manifest number: 217F Signing time: Sat 18 May 2024 16:13:53 +0000 Manifest this update: Sat 18 May 2024 16:13:53 +0000 Manifest next update: Sat 25 May 2024 16:13:53 +0000 Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: bS0fCjr31AGuNKmopMVbXGD6znFncobUCsK/RQPB2hc=) 2: 815465903EB511E9881B6529C4F9AE02.roa (hash: 7ddAjFS1pF9X1ZGgoVI2gdAs0bfs8rSNCFogYcRbEf8=) 3: 69363188652411EEB31DFB1BC4F9AE02.roa (hash: ukMv1vqhTuazTN7ZWDlmw1zqPYP0IH32Lw2PCy/Rfz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8630 (0x21b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Validity Not Before: May 18 16:13:53 2024 GMT Not After : May 25 16:13:53 2024 GMT Subject: CN=6648d3c1-1c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:ad:e2:a3:e1:a4:67:17:11:57:cc:7b:30: 2b:fa:ea:18:c5:04:d9:be:7e:65:15:98:e9:0b:2c: 88:72:bc:58:87:a9:c4:f8:40:97:ed:1e:f4:bf:eb: 25:2a:55:45:39:63:d5:f9:39:c5:12:9c:8b:19:ee: 45:c1:47:37:6b:90:f3:59:6c:d9:3b:04:89:54:43: 65:f0:95:3f:f3:2e:3e:56:c6:bf:f0:24:0c:77:5d: 75:45:2c:f6:c2:c3:25:42:81:5d:98:94:a5:49:6d: f5:75:88:b3:9d:fa:f3:c6:e3:42:4a:7a:c1:ac:84: 63:a8:08:bf:3a:92:51:b2:d2:dc:70:53:a5:72:f7: ea:fa:82:aa:39:f4:35:ba:1e:86:17:dc:4f:e5:ea: 84:33:06:23:55:26:22:e5:4c:2a:df:03:28:2e:5e: fe:1c:22:76:6b:88:ad:7c:76:19:2c:42:4c:04:be: 3a:60:7c:04:a8:d6:78:93:02:03:d7:8e:9e:06:9c: 4a:2e:a6:8b:91:72:e1:e6:54:c6:4e:d7:63:be:69: 2f:94:f7:e7:45:9a:15:09:f8:da:9a:6f:e8:92:bd: 60:b2:cc:ee:19:a3:be:93:ff:cf:56:97:0a:bc:d5: 8b:c7:c3:04:c3:7a:fa:8b:7d:8e:02:88:0f:e1:01: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0E:DC:18:47:E1:F2:9E:3A:14:4B:D1:0B:55:6A:F1:E7:BE:70:C1 X509v3 Authority Key Identifier: keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:24:be:e0:bc:d6:c3:e0:99:c7:de:90:ac:c3:05:69:b8:25: fc:a3:d6:b1:c6:fd:87:83:98:e8:53:92:36:d1:2c:d1:4c:7f: fc:80:9e:59:6f:6b:dd:9a:ae:c5:18:e9:0a:21:f6:61:fe:09: 24:89:09:a0:3a:f1:b8:0f:79:e9:82:cf:10:29:32:75:90:16: 8d:5d:7a:42:df:23:5b:e2:8a:f2:12:cd:78:e2:f7:0f:57:c6: 1e:d7:37:0c:bf:24:30:fa:06:65:f3:6f:83:89:64:58:8c:b3: 8e:12:5a:a5:35:78:56:8c:e0:01:36:7b:42:07:7b:f7:fe:29: d3:56:18:b0:8d:47:c6:3d:d5:60:12:c2:5b:2e:3d:43:c8:31: d7:7a:69:ef:6e:5c:87:f8:e7:9d:dd:71:9d:ad:1f:ec:d5:49: b1:c6:b2:89:04:30:0c:86:a1:14:2c:2f:10:b2:65:6f:d5:43: dc:f5:94:d2:d0:4d:f8:7b:3e:42:4f:05:c8:bb:d6:6a:8a:10: 58:3b:b3:86:15:5e:e2:85:ea:31:67:23:6a:e6:c4:81:57:46: d9:7b:b2:7a:b7:a2:90:e6:2b:92:cd:97:58:1a:d4:41:a0:bc: a3:31:9a:40:a7:4b:bc:cb:a6:09:c6:52:50:e6:65:c9:62:96: bf:eb:77:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex QThERTgxMkEwHhcNMjQwNTE4MTYxMzUzWhcNMjQwNTI1MTYxMzUzWjAYMRYwFAYD VQQDEw02NjQ4ZDNjMS0xYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkCt4qPhpGcXEVfMezAr+uoYxQTZvn5lFZjpCyyIcrxYh6nE+ECX7R70v+sl KlVFOWPV+TnFEpyLGe5FwUc3a5DzWWzZOwSJVENl8JU/8y4+Vsa/8CQMd111RSz2 wsMlQoFdmJSlSW31dYiznfrzxuNCSnrBrIRjqAi/OpJRstLccFOlcvfq+oKqOfQ1 uh6GF9xP5eqEMwYjVSYi5Uwq3wMoLl7+HCJ2a4itfHYZLEJMBL46YHwEqNZ4kwID 146eBpxKLqaLkXLh5lTGTtdjvmkvlPfnRZoVCfjamm/okr1gsszuGaO+k//PVpcK vNWLx8MEw3r6i32OAogP4QHLkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0O3BhH 4fKeOhRL0QtVavHnvnDBMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu T21WdV9ieGZwbm9hamVnU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJL7gvNbD4JnH3pCswwVpuCX8o9axxv2Hg5joU5I20SzRTH/8gJ5Z b2vdmq7FGOkKIfZh/gkkiQmgOvG4D3npgs8QKTJ1kBaNXXpC3yNb4oryEs144vcP V8Ye1zcMvyQw+gZl82+DiWRYjLOOElqlNXhWjOABNntCB3v3/inTVhiwjUfGPdVg EsJbLj1DyDHXemnvblyH+Oed3XGdrR/s1UmxxrKJBDAMhqEULC8QsmVv1UPc9ZTS 0E34ez5CTwXIu9ZqihBYO7OGFV7iheoxZyNq5sSBV0bZe7J6t6KQ5iuSzZdYGtRB oLyjMZpAp0u8y6YJxlJQ5mXJYpa/63fH -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org