$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: 5DwOL/k7wfRIuPe32phx82GT8xanSGMAGxLzTOhDhsw= Subject key identifier: C4:93:B7:72:4B:2A:CC:95:C7:C1:6E:CA:F4:76:8C:C1:9F:5B:18:48 Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: AD Signing time: Wed 15 May 2024 06:40:47 +0000 Manifest this update: Wed 15 May 2024 06:40:46 +0000 Manifest next update: Wed 22 May 2024 06:40:46 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: bBmtEpuAgH0hQNNTFXwjp7uwlEXaqKAx7LpLT0nQwxk=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: Im+M9fgmaJ15bCeDM4NQAzXHfirsRyj1DzqNZWZQT2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: May 15 06:40:46 2024 GMT Not After : May 22 06:40:46 2024 GMT Subject: CN=664458ef-7cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3f:5b:59:55:7a:e6:9b:e8:4e:fe:5f:d9:4d: 27:5d:a1:1d:06:08:9a:3a:06:3e:5a:96:20:fe:66: 64:e8:f4:99:1a:69:fb:03:65:3e:c0:23:73:ae:e7: 5f:c4:92:b5:14:26:ea:30:03:ab:15:d4:af:25:4f: d1:ce:d9:39:e7:71:29:17:4f:20:f5:f0:02:45:76: 59:31:82:7d:41:23:b1:28:97:ec:09:09:b1:99:f5: d1:c6:0a:38:26:48:40:05:16:f6:4d:7d:45:7e:28: 16:74:7a:11:e9:af:3e:cf:51:23:99:c6:90:09:f7: 4b:2a:e3:1b:55:2a:31:d8:7b:b3:17:8b:57:05:ac: d5:3c:52:e5:47:25:63:f6:65:ef:c6:37:74:d4:d5: eb:9f:0f:9e:bc:d0:ca:46:17:22:34:c1:fb:41:78: 56:46:6b:96:b3:2b:1d:29:d3:71:ca:d2:32:b9:08: ce:4c:81:3f:0a:44:84:9b:7b:b1:a2:bb:7b:d5:13: 01:91:80:ac:9d:79:80:37:89:2d:16:ec:65:a9:39: 7f:f5:09:98:b6:84:1e:35:54:36:84:4b:ff:30:89: 4e:3a:2f:77:34:d9:99:58:14:c6:f9:44:e8:de:73: 98:0b:04:cb:93:b4:57:e3:49:f8:f6:43:38:a1:e6: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:93:B7:72:4B:2A:CC:95:C7:C1:6E:CA:F4:76:8C:C1:9F:5B:18:48 X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:83:38:ee:c6:e8:f4:b9:46:21:d5:b1:23:69:35:15:91:8c: 1a:fd:4f:53:b5:b2:0d:85:2b:58:ca:ec:12:22:1c:fc:9f:5d: 15:13:64:df:94:59:d5:dd:1a:42:4a:be:30:8c:e1:4e:53:18: a4:b7:11:53:59:87:14:74:f0:bb:2c:bf:ae:1a:5f:2f:5a:06: be:22:50:fd:28:70:1c:f8:7c:68:1e:88:1a:d5:48:ba:f0:55: 97:50:cb:da:ba:06:09:42:0b:40:92:35:c6:60:15:b6:8d:62: 3c:d1:3f:98:45:42:a5:5d:12:15:a1:5c:fe:ee:48:55:25:f6: 23:21:16:f3:50:87:89:4f:15:32:5a:c7:36:81:36:55:f6:22: 35:58:37:8d:c9:07:7d:d8:16:a1:6a:3b:fb:83:2b:a1:a1:a8: 32:07:f1:7a:66:78:f4:a9:21:7f:47:20:f3:05:63:3a:cb:4d: 39:5a:6c:d4:27:6d:67:98:a4:f7:dd:de:f3:1b:91:d4:f2:ca: cd:48:07:d7:57:6a:7e:33:eb:c8:23:3e:95:5d:9e:30:16:6d: a6:27:be:10:c2:e5:bb:9b:f0:6e:3e:11:68:14:c5:ed:50:24: 34:dd:5a:ca:0a:cd:4d:02:69:bf:5d:2e:b5:8f:e1:01:23:ae: 82:22:0b:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjQwNTE1MDY0MDQ2WhcNMjQwNTIyMDY0MDQ2WjAYMRYwFAYD VQQDEw02NjQ0NThlZi03Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7D9bWVV65pvoTv5f2U0nXaEdBgiaOgY+WpYg/mZk6PSZGmn7A2U+wCNzrudf xJK1FCbqMAOrFdSvJU/Rztk553EpF08g9fACRXZZMYJ9QSOxKJfsCQmxmfXRxgo4 JkhABRb2TX1FfigWdHoR6a8+z1EjmcaQCfdLKuMbVSox2HuzF4tXBazVPFLlRyVj 9mXvxjd01NXrnw+evNDKRhciNMH7QXhWRmuWsysdKdNxytIyuQjOTIE/CkSEm3ux ort71RMBkYCsnXmAN4ktFuxlqTl/9QmYtoQeNVQ2hEv/MIlOOi93NNmZWBTG+UTo 3nOYCwTLk7RX40n49kM4oebNMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSTt3JL KsyVx8FuyvR2jMGfWxhIMB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLgzjuxuj0uUYh1bEjaTUVkYwa/U9TtbINhStYyuwSIhz8n10VE2Tf lFnV3RpCSr4wjOFOUxiktxFTWYcUdPC7LL+uGl8vWga+IlD9KHAc+HxoHoga1Ui6 8FWXUMvaugYJQgtAkjXGYBW2jWI80T+YRUKlXRIVoVz+7khVJfYjIRbzUIeJTxUy Wsc2gTZV9iI1WDeNyQd92Bahajv7gyuhoagyB/F6Znj0qSF/RyDzBWM6y005WmzU J21nmKT33d7zG5HU8srNSAfXV2p+M+vIIz6VXZ4wFm2mJ74QwuW7m/BuPhFoFMXt UCQ03VrKCs1NAmm/XS61j+EBI66CIgvY -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org