$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: 1RIsA+ygpsDyaLXNyGRqneLKgBVelziK/pcdunmGGQU= Subject key identifier: 00:BB:6F:F6:F7:19:99:34:D9:56:38:FC:72:C7:46:E7:47:6F:1C:5B Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 06D0 Signing time: Thu 02 May 2024 23:05:13 +0000 Manifest this update: Thu 02 May 2024 23:05:12 +0000 Manifest next update: Thu 09 May 2024 23:05:12 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: 8IUc2gkBQ2b5kHRzFyAmtQG50KJpW9fh0Cj0LNgWxP8=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: +ifaTsLxKBTHmEnNluCvXUUzWdG6mQYjtDnx4Y/cKzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: May 2 23:05:12 2024 GMT Not After : May 9 23:05:12 2024 GMT Subject: CN=66341c28-29e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:ed:44:d0:74:a3:18:91:38:6e:17:47:75: 1e:cc:42:a0:91:ff:d2:e6:f2:4b:a7:21:80:ad:4f: e4:dd:73:a6:c0:2b:f8:bb:26:5e:3a:d5:d8:e7:e3: fd:d6:35:f5:dd:ef:91:2b:b1:ee:3f:02:ff:cf:31: 28:c7:0e:ca:29:ef:2a:fe:c7:e2:9f:48:dc:c0:15: 09:ce:03:19:81:95:36:17:81:df:bb:ab:47:ce:18: 56:41:1f:61:00:8a:2c:8d:04:35:99:a2:b7:98:32: a3:43:8c:4a:38:4d:73:8a:93:61:ec:fb:0c:fb:87: 2e:b0:90:60:1f:59:a4:cf:92:7d:74:88:33:5e:9f: 0c:d7:19:01:9a:23:40:f2:b4:97:cd:1f:3c:2c:ad: bc:8c:90:f2:48:31:ca:d8:eb:a2:fc:19:3b:5e:3f: 8e:31:c0:b3:f8:d0:1b:ba:93:7f:1c:3d:d6:40:94: 44:8f:cc:9f:7f:04:f1:3a:14:40:c4:32:4a:15:f9: af:9d:a6:5d:56:a6:b2:4d:ee:1f:ef:2f:7c:39:94: 16:de:40:15:80:36:80:76:1b:ea:2e:53:c0:4f:7d: e7:fa:7b:04:d4:ca:d9:49:fd:23:07:af:9c:64:05: c8:d7:62:51:83:fd:b3:71:94:06:7f:c2:bd:6a:34: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:6F:F6:F7:19:99:34:D9:56:38:FC:72:C7:46:E7:47:6F:1C:5B X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:93:2b:dd:1f:37:5a:1c:ba:f1:96:8c:30:d5:71:02:11:46: 52:39:cc:73:da:a7:49:11:d1:89:f1:9f:3c:f5:cc:04:48:2f: 7d:a7:04:1c:ce:0b:b5:8e:9c:c7:dc:75:eb:a3:96:d5:96:63: 24:cd:ab:f4:56:67:9e:60:e2:85:9b:3b:d0:52:9d:60:40:a2: ae:41:f6:b8:86:a1:5a:db:f4:ec:d0:e3:77:b6:c4:9d:f7:31: 42:77:4c:ed:d0:aa:97:92:fd:14:c5:38:f4:93:a7:4f:9e:35: d5:96:da:09:e4:7f:e5:79:e6:bb:72:7d:d9:86:c6:b9:9a:c3: 2c:1e:a1:c3:4e:4a:da:2d:ac:aa:d0:4e:92:f4:97:67:b0:b3: f1:2c:54:2e:f8:f3:6d:86:bf:66:4d:9c:ca:bb:4f:72:e4:6d: 71:ad:85:e0:f1:62:fc:f8:19:8b:5b:34:fd:cc:a2:b7:61:ee: 52:7d:5e:32:4c:ca:ea:e0:f7:6f:92:13:c0:f3:6a:03:25:8d: 57:a6:ab:ff:87:41:60:8f:ef:d4:c6:b2:9e:9f:07:c3:78:cc: 62:75:91:bb:02:a0:2e:a3:b0:78:8a:95:1d:17:f4:4f:0c:30: e3:08:d0:86:71:b7:fe:4a:f0:13:3e:3a:e0:43:e2:77:45:eb: 40:18:b5:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjQwNTAyMjMwNTEyWhcNMjQwNTA5MjMwNTEyWjAYMRYwFAYD VQQDEw02NjM0MWMyOC0yOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kjtRNB0oxiROG4XR3UezEKgkf/S5vJLpyGArU/k3XOmwCv4uyZeOtXY5+P9 1jX13e+RK7HuPwL/zzEoxw7KKe8q/sfin0jcwBUJzgMZgZU2F4Hfu6tHzhhWQR9h AIosjQQ1maK3mDKjQ4xKOE1zipNh7PsM+4cusJBgH1mkz5J9dIgzXp8M1xkBmiNA 8rSXzR88LK28jJDySDHK2Oui/Bk7Xj+OMcCz+NAbupN/HD3WQJREj8yffwTxOhRA xDJKFfmvnaZdVqayTe4f7y98OZQW3kAVgDaAdhvqLlPAT33n+nsE1MrZSf0jB6+c ZAXI12JRg/2zcZQGf8K9ajSWqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAC7b/b3 GZk02VY4/HLHRudHbxxbMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACkyvdHzdaHLrxloww1XECEUZSOcxz2qdJEdGJ8Z889cwESC99pwQc zgu1jpzH3HXro5bVlmMkzav0VmeeYOKFmzvQUp1gQKKuQfa4hqFa2/Ts0ON3tsSd 9zFCd0zt0KqXkv0UxTj0k6dPnjXVltoJ5H/leea7cn3Zhsa5msMsHqHDTkraLayq 0E6S9JdnsLPxLFQu+PNthr9mTZzKu09y5G1xrYXg8WL8+BmLWzT9zKK3Ye5SfV4y TMrq4PdvkhPA82oDJY1Xpqv/h0Fgj+/UxrKenwfDeMxidZG7AqAuo7B4ipUdF/RP DDDjCNCGcbf+SvATPjrgQ+J3RetAGLX4 -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org