$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: noZ+/KBCmA214GnsNpq94F0Tk1y/b8RdOiMWW5SH0R0= Subject key identifier: E7:35:1C:B7:15:D6:4B:E8:D3:1B:C1:D3:69:5C:24:B9:DD:51:35:B3 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 64 Signing time: Sun 19 May 2024 07:36:53 +0000 Manifest this update: Sun 19 May 2024 07:36:53 +0000 Manifest next update: Sun 26 May 2024 07:36:53 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: axMQRrbsB9nyCF3lX+j+Dlg1WXAJ6GKwVOmPgHV/J2A=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: g3rXvCsXTLgyMSwvQGJFedrrzYlZJGmg81OWhtnreEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: May 19 07:36:53 2024 GMT Not After : May 26 07:36:53 2024 GMT Subject: CN=6649ac15-4675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:2d:99:df:f4:23:dd:18:ac:66:01:71:b7: bc:54:cf:28:7a:fd:76:38:d1:35:4e:0b:c4:1c:2c: 72:24:0f:1b:be:5e:5b:e0:58:24:ae:ab:76:78:dc: 96:03:c7:69:ea:9a:b5:fc:9e:69:37:37:69:6f:bc: da:81:f4:83:d6:a2:fb:12:74:47:ba:e6:fb:9d:ad: 83:c1:2f:87:3a:81:14:3e:e2:a7:bb:30:53:f8:68: 9f:62:a2:5e:e8:92:f0:9a:e1:5a:89:0d:e8:50:76: e4:42:bd:05:a6:83:5f:38:a9:21:9f:16:43:d9:22: 3c:c6:30:f0:ee:9d:d1:bd:f1:c5:ea:1f:5c:42:52: 51:30:a4:5d:1e:23:81:99:c8:85:17:38:29:04:20: 93:02:43:bc:fa:71:95:0d:9d:ec:6c:e1:77:5f:f7: 36:6e:b3:ee:38:11:13:c3:c1:6a:2b:da:56:6f:aa: 87:f2:5d:6c:05:86:1b:ae:95:76:ba:ea:5a:34:c8: 7f:ae:58:1a:70:27:c7:8c:14:a7:f0:80:a4:23:fa: 84:e1:75:54:3f:74:af:09:d4:4c:7d:5e:5c:cc:62: b1:17:a1:95:db:31:85:74:1c:fa:5f:58:83:6a:27: 28:f2:6d:f3:9b:db:24:b8:5e:76:bc:e5:ae:91:32: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:1C:B7:15:D6:4B:E8:D3:1B:C1:D3:69:5C:24:B9:DD:51:35:B3 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bf:9c:50:0a:da:42:ec:96:2f:8c:c9:c5:05:c8:05:15:e4: ec:ad:6b:2e:93:49:fd:6f:e2:3e:8e:7e:30:fb:19:d0:42:a0: 7b:20:54:69:de:01:3e:a4:71:18:6c:e8:2d:50:62:d8:c2:df: 9c:35:06:2f:27:67:a1:fe:c0:63:99:e8:fa:80:7c:ce:41:6c: 65:33:d6:8c:c3:be:d3:a2:65:d5:7c:6e:99:3d:11:3f:2e:d1: 73:2d:4b:0a:af:bd:21:27:0b:55:2a:ef:be:db:19:00:17:c5: 96:7a:b4:4e:4f:b4:d5:42:4a:86:86:e3:62:88:c1:7c:ac:85: 01:43:9b:6a:50:11:cb:34:79:6b:f5:f1:be:69:0f:28:e6:92: ae:37:71:7d:c3:ba:08:9b:cb:50:aa:89:87:33:76:7a:f4:22: 2c:10:a9:f5:5c:c0:6d:81:ce:10:ca:e1:3a:1b:c4:10:e1:d5: e0:31:bd:ca:9d:3b:74:3b:74:3f:dc:e4:44:28:79:75:e5:07: 05:d8:31:c2:2c:e5:d3:e7:84:98:f8:7b:7a:ef:4b:e7:88:91: 4e:38:57:2c:cf:0c:ef:1a:37:22:9a:51:70:dc:2c:25:64:cd: 5b:bc:b4:c0:d7:48:4b:54:f6:8a:2c:19:86:ea:7d:03:7b:9b: ba:d3:78:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUU5RDExMC8GA1UEBRMoQkUwMTkxMzdBODFEN0U5Q0Q5QUY1NkNEOTFDNTg3QzJF RjA2RTkzQjAeFw0yNDA1MTkwNzM2NTNaFw0yNDA1MjYwNzM2NTNaMBgxFjAUBgNV BAMTDTY2NDlhYzE1LTQ2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDIC2Z3/Qj3RisZgFxt7xUzyh6/XY40TVOC8QcLHIkDxu+XlvgWCSuq3Z43JYD x2nqmrX8nmk3N2lvvNqB9IPWovsSdEe65vudrYPBL4c6gRQ+4qe7MFP4aJ9iol7o kvCa4VqJDehQduRCvQWmg184qSGfFkPZIjzGMPDundG98cXqH1xCUlEwpF0eI4GZ yIUXOCkEIJMCQ7z6cZUNnexs4Xdf9zZus+44ERPDwWor2lZvqofyXWwFhhuulXa6 6lo0yH+uWBpwJ8eMFKfwgKQj+oThdVQ/dK8J1Ex9XlzMYrEXoZXbMYV0HPpfWINq JyjybfOb2yS4Xna85a6RMp0lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5zUctxXW S+jTG8HTaVwkud1RNbMwHwYDVR0jBBgwFoAUvgGRN6gdfpzZr1bNkcWHwu8G6Tsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5RTlELzUyODI4QjJBN0I4 NzExRUVBODQwRjIxRUM0RjlBRTAyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZU cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmdHUk42Z2RmcHpacjFiTmtjV0h3dThHNlRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 RTlELzUyODI4QjJBN0I4NzExRUVBODQwRjIxRUM0RjlBRTAyL3ZnR1JONmdkZnB6 WnIxYk5rY1dId3U4RzZUcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI2/nFAK2kLsli+MycUFyAUV5Oytay6TSf1v4j6OfjD7GdBCoHsgVGne AT6kcRhs6C1QYtjC35w1Bi8nZ6H+wGOZ6PqAfM5BbGUz1ozDvtOiZdV8bpk9ET8u 0XMtSwqvvSEnC1Uq777bGQAXxZZ6tE5PtNVCSoaG42KIwXyshQFDm2pQEcs0eWv1 8b5pDyjmkq43cX3Dugiby1CqiYczdnr0IiwQqfVcwG2BzhDK4TobxBDh1eAxvcqd O3Q7dD/c5EQoeXXlBwXYMcIs5dPnhJj4e3rvS+eIkU44VyzPDO8aNyKaUXDcLCVk zVu8tMDXSEtU9oosGYbqfQN7m7rTeAo= -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org