$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json) Hash identifier: 4t0HlU3bPbCwimGSsNtgRXekZYeWsSDKhuqoNGgShmE= Subject key identifier: AA:F8:25:31:A3:0C:36:06:E2:F9:46:98:60:61:FF:74:C8:DC:F7:E0 Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft Manifest number: 7A Signing time: Sun 19 May 2024 07:19:47 +0000 Manifest this update: Sun 19 May 2024 07:19:47 +0000 Manifest next update: Sun 26 May 2024 07:19:47 +0000 Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: nOOW6e6b04CVeZndRDwVfYZLi3JgsPQp0ROiy6FyrKo=) 2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: 7eEZBAm1RPGk1OcmIQskJIwX17dD4YtWqRHE4WyQ4kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Validity Not Before: May 19 07:19:47 2024 GMT Not After : May 26 07:19:47 2024 GMT Subject: CN=6649a813-7f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:1f:f8:8e:91:59:ee:f4:a6:12:7e:c3:51: d8:f7:71:52:ef:03:d3:eb:ed:48:91:a9:09:7f:11: 86:f8:db:e3:81:69:5e:be:c2:d7:5c:f8:0c:79:f8: 26:98:ea:cf:ab:1c:9d:6d:f3:d0:19:70:47:0d:6e: 4d:61:b5:15:dd:40:01:7c:d0:a3:6d:32:9a:23:03: 72:bc:74:c7:f6:a0:6c:07:a2:9c:22:60:44:60:54: fe:04:1e:ad:99:eb:ba:f3:9d:fd:89:82:aa:32:8c: f5:c6:70:f9:f5:49:ea:9f:54:91:a9:4d:d0:87:bd: 40:4d:82:e9:d6:97:c3:9f:57:5c:93:0f:01:99:84: 2e:8f:77:ca:39:fb:75:f0:6c:dd:f0:e1:ea:2f:0d: f8:fc:7b:cc:27:3d:48:72:0d:ee:55:79:ca:75:ff: 9a:02:50:18:0b:83:00:cd:b3:77:92:d5:bf:6a:03: c7:c6:e3:b3:34:f1:99:58:38:a6:5b:c0:eb:d0:ff: 04:f9:e9:56:6d:e3:3c:98:1f:d3:b1:66:af:ae:24: 16:3c:9c:91:79:6e:f8:8b:c0:14:09:1b:56:c3:c6: cb:01:91:0a:24:5f:dd:39:3d:2c:1c:88:9f:23:c3: 83:4f:b2:91:a3:eb:8d:31:e7:d1:fb:ba:e9:d8:83: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:25:31:A3:0C:36:06:E2:F9:46:98:60:61:FF:74:C8:DC:F7:E0 X509v3 Authority Key Identifier: keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:28:aa:51:c2:94:65:68:ce:7c:a1:fa:ca:09:1b:91:18:98: a0:c1:24:63:6f:55:b3:c4:ec:c4:d9:87:87:e1:3a:98:36:4e: ce:6b:b7:b4:4a:32:e2:4e:ee:39:f8:a6:aa:8a:7a:60:90:cf: 97:90:0f:02:12:92:ed:65:05:65:ca:25:e8:e2:c4:9a:24:e3: c2:0a:3f:af:c4:de:26:ce:17:5a:a3:20:bb:fd:f6:f3:f3:c4: 1e:aa:cf:89:af:19:fb:3a:90:ee:a2:a9:09:8f:30:16:2a:df: 10:3c:ee:55:ab:c2:b1:95:74:37:58:71:8b:7b:d9:63:e9:59: 39:96:83:bf:5d:9f:cb:dc:70:a0:74:1b:cf:da:e9:4c:36:54: 7b:5e:96:11:9e:0d:2d:a3:ca:8e:e5:5d:11:83:9c:47:85:02: 31:75:0e:0f:70:86:78:3c:1e:ce:fe:d4:b5:4d:65:97:0b:d3: 64:99:55:e1:33:d9:19:85:a1:77:a5:8f:52:de:ea:77:2e:cc: 11:a8:61:b7:3e:46:0c:46:10:8a:b4:d7:93:11:40:73:1d:2a: c6:9f:22:78:84:78:92:7b:da:ba:6b:d9:33:5a:36:0c:06:f9: 2d:4a:28:7b:2b:12:23:ba:7f:4a:6d:24:a3:50:13:98:05:69: 46:eb:a7:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoNTQ2NEU0OUY1NjBFQzEwRDQ5NzZGNkUyOTYxMTNCQUYy MkE4Q0Y1RjAeFw0yNDA1MTkwNzE5NDdaFw0yNDA1MjYwNzE5NDdaMBgxFjAUBgNV BAMTDTY2NDlhODEzLTdmOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfOB/4jpFZ7vSmEn7DUdj3cVLvA9Pr7UiRqQl/EYb42+OBaV6+wtdc+Ax5+CaY 6s+rHJ1t89AZcEcNbk1htRXdQAF80KNtMpojA3K8dMf2oGwHopwiYERgVP4EHq2Z 67rznf2JgqoyjPXGcPn1SeqfVJGpTdCHvUBNgunWl8OfV1yTDwGZhC6Pd8o5+3Xw bN3w4eovDfj8e8wnPUhyDe5Vecp1/5oCUBgLgwDNs3eS1b9qA8fG47M08ZlYOKZb wOvQ/wT56VZt4zyYH9OxZq+uJBY8nJF5bviLwBQJG1bDxssBkQokX905PSwciJ8j w4NPspGj640x59H7uunYg+BRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqvglMaMM Ngbi+UaYYGH/dMjc9+AwHwYDVR0jBBgwFoAUVGTkn1YOwQ1JdvbilhE7ryKoz18w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDLzk1NTEzQkE2NURD MTExRUU5ODk0OTkxQ0M0RjlBRTAyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3ox OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkdUa24xWU93UTFKZHZiaWxoRTdyeUtvejE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDLzk1NTEzQkE2NURDMTExRUU5ODk0OTkxQ0M0RjlBRTAyL1ZHVGtuMVlPd1Ex SmR2YmlsaEU3cnlLb3oxOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0oqlHClGVoznyh+soJG5EYmKDBJGNvVbPE7MTZh4fhOpg2Ts5rt7RK MuJO7jn4pqqKemCQz5eQDwISku1lBWXKJejixJok48IKP6/E3ibOF1qjILv99vPz xB6qz4mvGfs6kO6iqQmPMBYq3xA87lWrwrGVdDdYcYt72WPpWTmWg79dn8vccKB0 G8/a6Uw2VHtelhGeDS2jyo7lXRGDnEeFAjF1Dg9whng8Hs7+1LVNZZcL02SZVeEz 2RmFoXelj1Le6ncuzBGoYbc+RgxGEIq015MRQHMdKsafIniEeJJ72rpr2TNaNgwG +S1KKHsrEiO6f0ptJKNQE5gFaUbrp84= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org