$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: 8uAOJ5i7n2Mw/woVrIMDgCSP/QoZSEcSu5utCi4nbnk= Subject key identifier: 99:B6:B1:6B:53:8D:12:75:F1:FB:08:18:0E:12:A1:FE:7B:9A:94:86 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 03A4 Signing time: Sun 19 May 2024 02:33:07 +0000 Manifest this update: Sun 19 May 2024 02:33:06 +0000 Manifest next update: Sun 26 May 2024 02:33:06 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: bXq2uzZa6NbMnwoDCdcO1coJgbfkuCZihdMYZDe39ck=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: +rAjSESjXSQDi9T1YO1Hgvko/UMRfFUd7nF2m6aesuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: May 19 02:33:06 2024 GMT Not After : May 26 02:33:06 2024 GMT Subject: CN=664964e3-9615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:46:e7:09:87:96:b9:1e:4a:c3:f5:22:67: 29:12:ea:27:85:e0:9b:c8:94:2f:68:04:38:dd:07: b8:a7:b0:d8:a3:5e:e3:88:70:fe:12:7c:e2:7b:c8: a2:79:9c:90:e1:a3:c5:8c:b8:de:a2:12:27:cd:1b: fb:8e:85:0e:12:d1:1a:21:16:c7:98:11:b6:4a:44: a4:45:79:44:64:c2:4f:fe:18:dd:a1:b0:73:df:3e: 5d:61:47:e9:5a:e9:86:e7:2a:18:3a:39:39:54:4a: f6:b4:33:52:03:fb:6a:34:c0:bc:65:90:c0:08:bb: 20:1b:9e:7e:8a:f2:d6:3d:24:ee:95:15:d0:50:f6: d7:46:1b:40:00:5c:04:fa:af:ff:be:6f:a7:df:02: d7:6d:d0:1e:69:d3:10:6f:03:a0:8c:6d:25:95:12: 74:14:b8:b5:fa:60:57:c8:2d:ff:f5:8b:cb:cb:c3: 06:44:12:cb:c8:28:cb:06:ad:b6:80:05:31:6d:55: 0a:14:35:a0:f6:d1:59:cb:0c:63:0a:fc:83:7d:8f: 33:07:27:97:28:c4:9e:20:06:57:43:64:2a:b0:d3: 54:61:b7:e4:b3:cd:d8:37:5b:d5:d4:c7:85:4a:d9: 53:21:03:b0:19:dc:8e:a1:45:57:69:42:70:27:13: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:B1:6B:53:8D:12:75:F1:FB:08:18:0E:12:A1:FE:7B:9A:94:86 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:24:25:0b:ee:5c:dd:7d:ea:5b:60:93:f5:1b:ca:0a:e6:ef: a0:ca:c8:3a:f8:f4:59:df:b3:a5:63:46:a7:da:83:3a:5c:bf: 5e:06:a1:79:40:a1:9a:11:22:35:0b:36:8d:30:a7:a8:32:ac: 57:76:ad:ab:70:9f:07:b4:d5:67:08:1f:be:31:db:f0:00:55: 6e:32:8a:9b:9a:03:f2:e8:67:8a:02:9e:7f:6e:22:1f:9e:f8: 26:1b:80:6e:24:c1:d9:3a:22:09:90:36:79:e6:6a:4b:78:bb: 8d:3f:c0:ea:42:86:ab:8f:87:c8:79:24:78:08:70:15:58:02: c8:1e:ae:d1:e5:0e:64:f7:25:82:25:af:58:f7:36:7a:59:9c: c4:24:51:46:39:08:2d:4a:db:2d:42:70:b5:2b:86:3f:5f:57: d7:56:4d:87:62:b0:23:55:93:ce:0d:1c:6e:24:08:2f:ba:b4: 7e:56:9f:56:ed:85:ed:8e:0b:e8:f6:7d:51:8f:b6:9e:6a:1c: 6c:c9:25:67:05:63:8e:12:54:73:b6:fe:f7:8c:38:f0:e0:3b: 77:6e:70:35:62:88:97:54:7e:58:e3:95:ce:35:18:7b:06:ec: 10:9a:d0:ed:b9:5d:6b:23:3d:f4:1d:a4:58:a6:48:63:37:21: b0:3d:ce:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjQwNTE5MDIzMzA2WhcNMjQwNTI2MDIzMzA2WjAYMRYwFAYD VQQDEw02NjQ5NjRlMy05NjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAxG5wmHlrkeSsP1ImcpEuonheCbyJQvaAQ43Qe4p7DYo17jiHD+Enzie8ii eZyQ4aPFjLjeohInzRv7joUOEtEaIRbHmBG2SkSkRXlEZMJP/hjdobBz3z5dYUfp WumG5yoYOjk5VEr2tDNSA/tqNMC8ZZDACLsgG55+ivLWPSTulRXQUPbXRhtAAFwE +q//vm+n3wLXbdAeadMQbwOgjG0llRJ0FLi1+mBXyC3/9YvLy8MGRBLLyCjLBq22 gAUxbVUKFDWg9tFZywxjCvyDfY8zByeXKMSeIAZXQ2QqsNNUYbfks83YN1vV1MeF StlTIQOwGdyOoUVXaUJwJxNqLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJm2sWtT jRJ18fsIGA4Sof57mpSGMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCJCUL7lzdfepbYJP1G8oK5u+gysg6+PRZ37OlY0an2oM6XL9eBqF5 QKGaESI1CzaNMKeoMqxXdq2rcJ8HtNVnCB++MdvwAFVuMoqbmgPy6GeKAp5/biIf nvgmG4BuJMHZOiIJkDZ55mpLeLuNP8DqQoarj4fIeSR4CHAVWALIHq7R5Q5k9yWC Ja9Y9zZ6WZzEJFFGOQgtStstQnC1K4Y/X1fXVk2HYrAjVZPODRxuJAgvurR+Vp9W 7YXtjgvo9n1Rj7aeahxsySVnBWOOElRztv73jDjw4Dt3bnA1YoiXVH5Y45XONRh7 BuwQmtDtuV1rIz30HaRYpkhjNyGwPc51 -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org