$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: MUwPO724oOPzHd+dXZ3EpBrXgOT2W1UFReb3eWdxkmo= Subject key identifier: 5A:6D:CE:31:32:B8:B2:4B:81:39:4E:3C:AC:C4:1C:3E:97:76:D9:D0 Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 33CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 33C7 Signing time: Sat 18 May 2024 14:34:27 +0000 Manifest this update: Sat 18 May 2024 14:34:27 +0000 Manifest next update: Sat 25 May 2024 14:34:27 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: hNcn+wQbewfPbobtQ2klOAAWdEzcuSV83AbSXEkL7n8=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: 6dY5OZitAuFJsTTl2QNFuyBVW7OxNQFYNmxM4QvuXdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Validity Not Before: May 18 14:34:27 2024 GMT Not After : May 25 14:34:27 2024 GMT Subject: CN=6648bc73-9a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:e5:5c:a9:42:dc:a7:38:e9:36:6b:41:80: b2:53:44:88:fa:96:3f:f9:6a:8e:52:da:05:7b:b1: b6:31:a0:48:92:d8:4b:00:8c:7f:f0:ac:0f:4f:62: 01:02:04:63:11:a3:79:3c:af:fe:a1:f8:83:68:94: 93:55:e5:a7:ed:ea:4f:35:06:5e:ca:a3:d2:56:bb: 31:03:16:05:96:24:3c:81:7b:b4:46:5d:76:72:97: 21:9c:24:c1:ae:93:85:74:11:78:86:43:2e:08:23: 8f:c0:16:8c:fd:e5:d2:be:35:38:51:77:d5:5d:9f: 07:ea:69:fa:47:53:4d:c7:b5:42:7a:9d:f7:5c:52: d0:53:7a:f0:22:e3:97:bf:1f:be:7b:52:54:6d:c8: ce:5d:87:7f:7c:f9:f9:dc:e1:5b:9a:a8:62:40:80: 05:1f:a0:7e:2a:50:da:82:15:4e:d0:01:64:18:be: 70:ac:95:19:3f:68:77:55:45:f6:fa:55:81:1d:cd: 7d:9f:d3:92:1d:33:51:63:59:f1:4e:2e:a5:1d:5e: 15:f4:66:c3:ca:46:0c:91:b8:cb:9f:02:34:32:85: c0:d3:13:e8:4f:fb:54:33:6f:1d:4e:b8:5c:3e:26: d2:ff:87:03:8d:fc:d9:20:a0:0f:f0:9b:95:35:4d: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:CE:31:32:B8:B2:4B:81:39:4E:3C:AC:C4:1C:3E:97:76:D9:D0 X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:76:e4:81:c6:5d:19:a0:da:d5:b9:0d:4e:78:c2:4b:88:60: 1a:c2:d4:32:44:ca:13:c1:2a:7b:eb:68:8c:83:4a:2f:f1:ed: 78:ee:3e:01:88:9a:6b:c7:e5:57:c0:21:23:a9:4d:29:4f:1c: 6d:22:37:32:d3:e7:6a:af:ea:2f:0e:da:83:64:35:b5:2f:7a: a8:b8:e6:d7:86:ce:59:c4:76:35:c4:42:f2:f5:4d:1d:ec:93: 25:fe:e3:c3:63:d5:74:9d:64:24:58:6b:bf:95:62:12:84:62: 24:b8:14:95:a2:f9:90:6d:e6:b3:c7:56:0a:ee:4a:15:ad:f1: 42:62:73:ca:c1:bb:a5:26:4b:da:7d:6f:ee:66:fe:9d:db:2c: 6d:d9:d2:3d:83:8e:48:31:a6:cf:23:92:93:10:84:d2:33:a7: b8:42:fd:84:ef:8e:e5:23:7f:e0:dc:e7:e9:f7:88:5e:1b:93: e3:ff:b8:f6:6a:50:ac:5e:ec:ba:05:0f:41:ec:a8:91:67:ee: b9:67:b6:ed:f2:af:9e:1c:8a:8e:64:0c:23:a8:35:ad:2b:53: e0:e5:5c:30:95:81:d8:8f:a3:5f:2a:f2:a8:1e:6c:05:ea:61: e6:23:a8:4f:e7:4f:a1:f4:6a:43:07:ff:ed:84:d5:f5:38:b3: 3c:91:12:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjQwNTE4MTQzNDI3WhcNMjQwNTI1MTQzNDI3WjAYMRYwFAYD VQQDEw02NjQ4YmM3My05YTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6c3lXKlC3Kc46TZrQYCyU0SI+pY/+WqOUtoFe7G2MaBIkthLAIx/8KwPT2IB AgRjEaN5PK/+ofiDaJSTVeWn7epPNQZeyqPSVrsxAxYFliQ8gXu0Rl12cpchnCTB rpOFdBF4hkMuCCOPwBaM/eXSvjU4UXfVXZ8H6mn6R1NNx7VCep33XFLQU3rwIuOX vx++e1JUbcjOXYd/fPn53OFbmqhiQIAFH6B+KlDaghVO0AFkGL5wrJUZP2h3VUX2 +lWBHc19n9OSHTNRY1nxTi6lHV4V9GbDykYMkbjLnwI0MoXA0xPoT/tUM28dTrhc PibS/4cDjfzZIKAP8JuVNU3LLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFptzjEy uLJLgTlOPKzEHD6XdtnQMB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxduSBxl0ZoNrVuQ1OeMJLiGAawtQyRMoTwSp762iMg0ov8e147j4B iJprx+VXwCEjqU0pTxxtIjcy0+dqr+ovDtqDZDW1L3qouObXhs5ZxHY1xELy9U0d 7JMl/uPDY9V0nWQkWGu/lWIShGIkuBSVovmQbeazx1YK7koVrfFCYnPKwbulJkva fW/uZv6d2yxt2dI9g45IMabPI5KTEITSM6e4Qv2E747lI3/g3Ofp94heG5Pj/7j2 alCsXuy6BQ9B7KiRZ+65Z7bt8q+eHIqOZAwjqDWtK1Pg5VwwlYHYj6NfKvKoHmwF 6mHmI6hP50+h9GpDB//thNX1OLM8kRKK -----END CERTIFICATE-----Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org