$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: 9468lRCxut/wOEpZruVGpp1y7vD4/8fkjQPW3BY2AAU= Subject key identifier: 7C:A0:D0:A6:D9:28:DD:94:AF:34:8B:5A:B2:E0:97:C0:FD:94:AD:5A Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0A44 Signing time: Tue 30 Apr 2024 20:43:46 +0000 Manifest this update: Tue 30 Apr 2024 20:43:46 +0000 Manifest next update: Tue 07 May 2024 20:43:46 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: S73M+4mB/npV09cFvOyX+9Ucg3aupbEs3k52kZkx4C8=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: pCRJQ2jLAd0gXJTFddTmCbM7xMg8KxyZyVVM+pskxgU=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: iutGDc+eLtPiQRjKdNm/Tn6dc2YAB+LNzhzHIbeu0jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Validity Not Before: Apr 30 20:43:46 2024 GMT Not After : May 7 20:43:46 2024 GMT Subject: CN=66315802-0ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c9:3e:7a:ed:ac:0b:39:86:5f:c7:28:75:40: 2e:4a:05:cb:d1:37:d7:9f:5e:5d:23:86:42:d4:77: 1b:06:16:d3:c8:87:01:fb:05:33:d5:95:dc:f2:98: 9f:bb:09:33:64:7e:10:51:a3:10:0e:0a:61:22:72: b3:70:06:e5:d3:98:a4:e5:7a:7a:8e:99:ba:16:43: d8:56:ed:79:7b:71:b9:29:66:29:bc:e3:65:78:a3: 79:98:e9:2d:2e:cd:97:dc:c6:06:cc:f8:e8:9c:42: fd:51:e3:25:62:72:55:af:f4:7a:9d:e8:4c:e7:a3: ca:b4:0f:0a:67:e1:23:6f:38:a7:9e:bb:e5:87:58: fe:fc:02:6d:6e:b9:17:3c:3e:eb:c0:ae:16:e7:93: 4b:59:a5:ba:54:aa:63:8a:56:d6:c6:03:b5:a9:82: d8:1e:29:5b:c2:7e:d4:3a:81:09:a1:20:36:38:c4: a4:27:a0:6d:13:b6:cd:1c:d0:75:85:ae:3f:5b:59: db:82:ee:98:ad:65:2e:29:05:d3:79:19:ec:a4:9f: f0:1d:0e:fc:03:90:74:0f:39:b2:07:57:70:d8:da: d3:a8:91:ca:b4:27:da:26:37:7d:36:1c:ab:60:a5: 4d:ff:2c:39:b4:14:da:c7:f4:dd:9d:33:c1:0b:52: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A0:D0:A6:D9:28:DD:94:AF:34:8B:5A:B2:E0:97:C0:FD:94:AD:5A X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:5e:85:8d:09:04:d7:02:3b:2a:1e:de:0f:d0:89:22:ac:dc: 2a:b9:d2:d5:65:c4:dc:39:22:8c:53:0f:55:a5:06:f5:9a:83: 67:2e:7d:7b:aa:d1:c4:2a:5b:65:49:7c:5c:ba:e6:66:18:25: e8:bd:25:e0:e7:6f:8b:6e:48:08:6d:da:48:7b:a9:14:f2:86: 2e:b2:90:8f:39:ec:e2:fd:06:57:67:46:1e:b8:df:bf:4b:8c: bb:c8:f2:8d:a8:c9:35:95:a1:e0:9d:f6:92:15:d1:e6:31:7e: fd:3a:82:77:ea:d3:6a:68:a7:d8:b8:a9:4a:9f:0a:53:63:dd: 51:46:46:3d:ee:88:a4:d9:a5:55:e4:b7:aa:75:69:5a:2e:15: 80:37:a8:4c:af:e9:a8:5b:1a:24:1e:44:f7:77:60:7f:31:cb: b4:91:7a:6f:e4:86:63:43:fe:d1:f9:f5:09:3c:f9:33:ab:58: ce:03:3a:ce:f1:a1:ac:a8:60:c0:25:e0:dd:bf:ab:89:58:39: 8f:0e:67:44:81:fd:22:25:5b:a4:40:4f:f2:80:fd:05:1f:bf: c2:14:38:f7:2e:3f:f8:7f:18:ca:3b:05:78:4c:21:0f:a8:a0: 28:08:44:be:8e:c9:4f:8a:8b:c9:6c:f9:0a:a6:de:93:91:90: cc:b7:62:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjQwNDMwMjA0MzQ2WhcNMjQwNTA3MjA0MzQ2WjAYMRYwFAYD VQQDEw02NjMxNTgwMi0wZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+sk+eu2sCzmGX8codUAuSgXL0TfXn15dI4ZC1HcbBhbTyIcB+wUz1ZXc8pif uwkzZH4QUaMQDgphInKzcAbl05ik5Xp6jpm6FkPYVu15e3G5KWYpvONleKN5mOkt Ls2X3MYGzPjonEL9UeMlYnJVr/R6nehM56PKtA8KZ+Ejbzinnrvlh1j+/AJtbrkX PD7rwK4W55NLWaW6VKpjilbWxgO1qYLYHilbwn7UOoEJoSA2OMSkJ6BtE7bNHNB1 ha4/W1nbgu6YrWUuKQXTeRnspJ/wHQ78A5B0DzmyB1dw2NrTqJHKtCfaJjd9Nhyr YKVN/yw5tBTax/TdnTPBC1IsaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyg0KbZ KN2UrzSLWrLgl8D9lK1aMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHXoWNCQTXAjsqHt4P0IkirNwqudLVZcTcOSKMUw9VpQb1moNnLn17 qtHEKltlSXxcuuZmGCXovSXg52+LbkgIbdpIe6kU8oYuspCPOezi/QZXZ0YeuN+/ S4y7yPKNqMk1laHgnfaSFdHmMX79OoJ36tNqaKfYuKlKnwpTY91RRkY97oik2aVV 5LeqdWlaLhWAN6hMr+moWxokHkT3d2B/Mcu0kXpv5IZjQ/7R+fUJPPkzq1jOAzrO 8aGsqGDAJeDdv6uJWDmPDmdEgf0iJVukQE/ygP0FH7/CFDj3Lj/4fxjKOwV4TCEP qKAoCES+jslPiovJbPkKpt6TkZDMt2L9 -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:49 2024 by rpki-client on console-ams.rpki-client.org