$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: ZOrp4s+Bs77OWbwAPCSD2amMCbHo03xI+dGwcIKrlbc= Subject key identifier: EB:9D:C7:F2:7E:80:B8:CF:03:03:60:45:41:32:A7:DD:96:53:D1:37 Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: AF Signing time: Sun 19 May 2024 06:33:45 +0000 Manifest this update: Sun 19 May 2024 06:33:44 +0000 Manifest next update: Sun 26 May 2024 06:33:44 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: +juAh1S+GOKncFaD/2ZvoBTJHq+wqK0GbHF0qWTtoeE=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: Im+M9fgmaJ15bCeDM4NQAzXHfirsRyj1DzqNZWZQT2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: May 19 06:33:44 2024 GMT Not After : May 26 06:33:44 2024 GMT Subject: CN=66499d49-799b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:88:3c:94:91:e2:93:53:40:cd:ba:63:e5: 35:64:d3:e8:88:0a:19:d0:c8:ae:2f:30:93:08:dc: 9a:72:75:1e:29:f9:17:34:44:a2:9a:11:3f:12:e4: b9:73:f0:91:c9:02:e3:66:d0:46:40:a4:c7:72:ae: 05:2b:81:be:90:dc:b1:4a:0c:6a:4a:82:81:aa:c2: cd:79:ad:ca:df:ae:88:6f:44:6a:6e:e3:5e:10:97: 37:c5:18:6d:0d:86:75:8f:b7:2d:2f:dd:a1:72:9e: 13:c2:5d:83:83:ce:92:f2:0b:84:5b:3c:87:ca:47: 5f:b4:d4:55:62:0e:f6:e2:e2:87:f1:76:43:0e:d8: 70:36:2e:7e:ed:a6:ee:e0:3c:fb:0c:b0:1c:df:a6: 09:0a:c3:9e:65:44:ff:6a:c4:c8:88:c4:61:82:4b: 42:9f:48:f9:8a:e1:39:90:06:cf:1a:f8:3e:72:05: 59:fa:78:47:37:45:0f:c3:13:3c:22:bb:c2:c9:40: 07:91:2e:9b:b3:97:0f:e0:d5:5f:c3:f4:3b:f4:f9: 3d:21:2a:a8:35:3c:2e:4e:97:38:32:fc:41:05:e3: e6:b4:94:cc:80:19:9e:fd:cf:b9:23:ba:b9:20:33: e4:95:06:40:69:82:fe:1b:58:11:0b:e1:e3:52:db: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:C7:F2:7E:80:B8:CF:03:03:60:45:41:32:A7:DD:96:53:D1:37 X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:1b:96:cc:d7:89:b2:25:05:5a:cb:03:6d:6f:83:44:a9:01: f5:af:64:0f:be:05:e5:61:3d:a5:f2:a1:2e:64:b1:81:a3:21: 75:d2:34:3b:13:8c:48:52:88:31:83:09:37:b8:5d:92:d8:ea: 62:79:a9:80:a2:40:74:1a:c8:e8:13:f9:48:56:34:b1:79:5d: 10:3b:1f:03:e5:fe:be:e8:f0:30:7a:ca:ca:6c:3f:ff:9a:ba: 51:bf:a7:b1:65:ac:59:0a:fc:7e:ec:ff:59:00:42:bd:d4:fe: a3:07:c1:a5:22:91:85:9b:99:76:14:c6:3b:9d:36:e3:0e:d5: 30:5c:a0:55:10:5a:a5:7f:ba:67:3f:b8:1d:41:dd:aa:b7:38: ca:17:72:bd:44:dc:59:da:04:c2:7a:7e:dd:d9:dc:87:0d:3f: 90:54:a4:80:74:45:4d:a9:a5:e2:e5:60:5d:33:0c:17:22:a3: 1d:86:7f:a6:3d:b5:c4:28:b2:b6:75:77:ae:41:41:14:35:30: dc:df:e6:16:85:95:e4:a8:3c:9c:b2:c7:91:c7:ad:12:a1:8c: 79:78:fc:a3:c8:39:c6:08:4b:bd:92:f3:2e:b0:d2:61:74:43: 77:54:3d:7d:cb:b6:43:5f:1f:d2:e1:05:45:1b:b7:59:c7:a6: a4:bb:ed:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjQwNTE5MDYzMzQ0WhcNMjQwNTI2MDYzMzQ0WjAYMRYwFAYD VQQDEw02NjQ5OWQ0OS03OTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU6IPJSR4pNTQM26Y+U1ZNPoiAoZ0MiuLzCTCNyacnUeKfkXNESimhE/EuS5 c/CRyQLjZtBGQKTHcq4FK4G+kNyxSgxqSoKBqsLNea3K366Ib0RqbuNeEJc3xRht DYZ1j7ctL92hcp4Twl2Dg86S8guEWzyHykdftNRVYg724uKH8XZDDthwNi5+7abu 4Dz7DLAc36YJCsOeZUT/asTIiMRhgktCn0j5iuE5kAbPGvg+cgVZ+nhHN0UPwxM8 IrvCyUAHkS6bs5cP4NVfw/Q79Pk9ISqoNTwuTpc4MvxBBePmtJTMgBme/c+5I7q5 IDPklQZAaYL+G1gRC+HjUtsYjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOudx/J+ gLjPAwNgRUEyp92WU9E3MB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWG5bM14myJQVaywNtb4NEqQH1r2QPvgXlYT2l8qEuZLGBoyF10jQ7 E4xIUogxgwk3uF2S2OpieamAokB0GsjoE/lIVjSxeV0QOx8D5f6+6PAwesrKbD// mrpRv6exZaxZCvx+7P9ZAEK91P6jB8GlIpGFm5l2FMY7nTbjDtUwXKBVEFqlf7pn P7gdQd2qtzjKF3K9RNxZ2gTCen7d2dyHDT+QVKSAdEVNqaXi5WBdMwwXIqMdhn+m PbXEKLK2dXeuQUEUNTDc3+YWhZXkqDycsseRx60SoYx5ePyjyDnGCEu9kvMusNJh dEN3VD19y7ZDXx/S4QVFG7dZx6aku+3a -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org