$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json) Hash identifier: KMazNQZZQa7goNKp6eXKNlJQ4R6hbpdO8z+yDK3wnN4= Subject key identifier: C4:AF:7B:01:D4:07:0D:56:5A:F7:24:2A:99:00:6D:C5:E1:FD:F6:CC Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Certificate serial: 21A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft Manifest number: 2171 Signing time: Tue 30 Apr 2024 16:17:55 +0000 Manifest this update: Tue 30 Apr 2024 16:17:55 +0000 Manifest next update: Tue 07 May 2024 16:17:55 +0000 Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: iI8i3Y9+f8LEfsah37f5oFZUC7HdFhjrg2UlQwfBhBk=) 2: 815465903EB511E9881B6529C4F9AE02.roa (hash: 7ddAjFS1pF9X1ZGgoVI2gdAs0bfs8rSNCFogYcRbEf8=) 3: 69363188652411EEB31DFB1BC4F9AE02.roa (hash: 1Ch/pMC+S1u0E2WRkyPEcx7LdaTGBFRqt64Sqqau7E4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8614 (0x21a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Validity Not Before: Apr 30 16:17:55 2024 GMT Not After : May 7 16:17:55 2024 GMT Subject: CN=663119b3-4590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:e7:f4:5a:67:6b:1e:a7:74:48:fc:ab:22: 20:20:b6:ea:35:14:5f:aa:90:28:f3:d5:df:d4:35: bb:3e:74:01:a0:db:c0:26:d7:b2:98:2b:f3:0e:60: b3:dd:20:41:30:5a:b8:a2:c9:c7:7b:6a:7a:3b:0a: 41:33:7c:f1:77:27:97:0c:79:31:03:03:a6:20:1b: dc:89:09:c3:86:b6:a0:a5:3c:94:e4:6e:08:d5:3e: 96:7b:c8:d1:ab:09:77:5f:e5:da:74:32:9b:22:2b: 1d:e0:e2:04:94:2a:3c:0b:5a:4f:fb:4a:59:38:44: bd:ce:dc:e4:62:30:8d:ec:f9:fb:7e:71:2a:59:65: dd:d7:1a:83:e8:65:26:d7:bc:c3:bc:69:71:05:10: 0e:9f:45:a4:b1:e7:96:82:ed:b4:0a:9a:c1:d0:dc: 7c:3a:73:81:07:8b:fa:45:9f:4b:ce:09:d5:eb:22: ba:30:20:da:8d:36:54:02:98:ae:6c:29:70:35:e1: e1:34:02:3d:e0:fb:00:54:27:03:7d:b6:4d:51:b2: ef:81:20:b3:c3:87:99:b3:d3:5b:c7:af:ba:a5:f1: 01:66:f6:66:bd:d2:1e:10:11:4f:57:ae:26:bf:7d: 6e:71:44:72:d6:f5:93:4d:67:64:48:78:9c:c2:91: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AF:7B:01:D4:07:0D:56:5A:F7:24:2A:99:00:6D:C5:E1:FD:F6:CC X509v3 Authority Key Identifier: keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1e:d1:8a:5d:7b:0b:41:c7:31:b0:c5:7f:98:72:43:a4:f5: e5:9c:02:d3:6f:6e:f0:c8:e0:4e:2d:f8:1d:89:99:5e:38:6d: 06:29:c4:24:aa:b4:9b:40:dc:7b:4b:c3:2a:c0:dd:e3:09:f6: 31:4b:f5:12:3c:41:4d:32:94:77:3d:0a:90:f5:3c:0a:68:71: 8a:72:ef:8a:5e:dd:9e:13:ea:ac:9c:9e:c3:b7:a0:2c:b2:34: 7e:f5:49:19:93:be:60:8e:af:16:2b:43:c5:de:59:fe:6b:06: ba:b4:ec:f4:1e:ec:36:d1:c5:82:40:57:b3:6a:19:00:e9:8f: 65:80:eb:cf:33:9e:bb:a8:e6:59:f9:01:ca:1e:0e:6d:c8:1c: 7f:e9:aa:11:92:ad:65:51:f7:21:5a:78:27:5b:d2:0e:13:63: c5:64:93:06:c0:b4:4c:16:2d:8a:51:bb:17:1d:4a:3c:fc:cf: a4:49:e8:27:37:34:f7:a7:c5:82:1f:49:1c:7a:13:04:02:bc: 8d:12:7b:56:0c:74:ff:dd:c6:5d:0f:39:ae:e5:12:29:d0:b4: 55:9f:8e:5c:50:90:f2:f6:33:c4:74:68:43:3c:6d:f4:45:82: 00:62:aa:bd:0a:c7:0e:45:3b:9d:24:39:f3:92:e4:49:57:b4: 55:f3:45:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex QThERTgxMkEwHhcNMjQwNDMwMTYxNzU1WhcNMjQwNTA3MTYxNzU1WjAYMRYwFAYD VQQDEw02NjMxMTliMy00NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArajn9Fpnax6ndEj8qyIgILbqNRRfqpAo89Xf1DW7PnQBoNvAJteymCvzDmCz 3SBBMFq4osnHe2p6OwpBM3zxdyeXDHkxAwOmIBvciQnDhragpTyU5G4I1T6We8jR qwl3X+XadDKbIisd4OIElCo8C1pP+0pZOES9ztzkYjCN7Pn7fnEqWWXd1xqD6GUm 17zDvGlxBRAOn0WkseeWgu20CprB0Nx8OnOBB4v6RZ9LzgnV6yK6MCDajTZUApiu bClwNeHhNAI94PsAVCcDfbZNUbLvgSCzw4eZs9Nbx6+6pfEBZvZmvdIeEBFPV64m v31ucURy1vWTTWdkSHicwpHdqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSvewHU Bw1WWvckKpkAbcXh/fbMMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu T21WdV9ieGZwbm9hamVnU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbHtGKXXsLQccxsMV/mHJDpPXlnALTb27wyOBOLfgdiZleOG0GKcQk qrSbQNx7S8MqwN3jCfYxS/USPEFNMpR3PQqQ9TwKaHGKcu+KXt2eE+qsnJ7Dt6As sjR+9UkZk75gjq8WK0PF3ln+awa6tOz0Huw20cWCQFezahkA6Y9lgOvPM567qOZZ +QHKHg5tyBx/6aoRkq1lUfchWngnW9IOE2PFZJMGwLRMFi2KUbsXHUo8/M+kSegn NzT3p8WCH0kcehMEAryNEntWDHT/3cZdDzmu5RIp0LRVn45cUJDy9jPEdGhDPG30 RYIAYqq9CscORTudJDnzkuRJV7RV80UQ -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:29 2024 by rpki-client on console-ams.rpki-client.org