$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: Fqtj9zNqYpYTNkdYrQR299v0pmdEDy3RYo08y2p1s7w= Subject key identifier: 68:D6:59:F2:04:F0:DC:C0:03:18:C8:59:AB:AB:3F:14:42:6B:34:DE Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 09EB Signing time: Sat 18 May 2024 20:42:38 +0000 Manifest this update: Sat 18 May 2024 20:42:38 +0000 Manifest next update: Sat 25 May 2024 20:42:38 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: viMelSxXiqN/rCdyiMyCHOoCweozoYSAug7mYkayklw=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: RXdoZiqZibeSiAK3y+mC50JdWCrC/8hzriXtZMI+QmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: May 18 20:42:38 2024 GMT Not After : May 25 20:42:38 2024 GMT Subject: CN=664912be-66b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:00:ff:d7:c4:77:d6:04:d2:76:a0:85:a9: 8d:fa:33:06:be:58:85:da:5e:fd:22:c4:e9:80:fc: 4f:7d:02:29:24:6f:80:b9:dd:7e:b4:31:23:47:ab: 80:a9:5d:47:c9:d4:01:34:f6:c6:82:d1:92:f2:02: a2:37:43:82:01:25:f3:42:d9:a0:ea:de:ff:a0:a7: ca:ac:a7:1c:9b:ba:85:0b:03:be:87:bf:65:e4:f5: e2:15:a3:ee:6a:70:a3:73:5f:5a:84:fc:82:b4:82: 61:76:65:c3:82:4d:ac:a9:a7:30:f6:74:0f:b2:99: 8c:6f:c0:b2:39:44:b1:25:61:cf:a4:7d:e7:f3:b8: bb:23:2c:29:4f:27:b5:0d:d9:61:d2:62:34:f5:03: b8:9b:fb:e7:c9:53:38:83:9f:15:b3:73:bc:10:b2: 4a:4a:b5:69:49:41:4b:2b:88:ff:f4:81:9f:69:c9: 77:17:4f:82:fb:95:26:88:4c:d9:32:e6:3d:09:7f: c0:66:f3:db:aa:25:e8:dd:8e:69:00:c4:c6:14:6d: 1e:55:b6:97:8a:d3:39:50:23:79:ce:a5:92:81:2e: 4a:27:82:81:d6:3f:a2:d6:34:4a:ea:80:83:b5:01: 68:95:0b:22:4f:30:b0:55:48:56:4e:41:e3:c6:ba: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D6:59:F2:04:F0:DC:C0:03:18:C8:59:AB:AB:3F:14:42:6B:34:DE X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b9:ec:ef:b6:20:d7:89:6a:2a:ce:33:30:1d:dd:87:1b:62: 3b:78:f4:bc:79:81:b3:e9:48:5a:6d:ad:f3:23:77:62:c9:73: e9:5e:b2:53:24:71:06:d9:f7:12:d2:18:b2:cd:47:67:d6:7e: 0a:d2:ef:b7:07:cd:b6:2d:3f:fd:8e:65:95:f2:7c:fd:8a:93: 07:d7:83:67:32:95:c0:17:a8:d7:fd:9e:14:36:8a:0e:a1:67: 8e:06:5f:35:81:0c:63:fa:c4:52:7c:2a:9a:23:a9:5c:6c:b9: 30:be:90:6c:9c:6e:92:ac:4a:76:3e:5a:82:91:48:43:87:e2: f9:96:1f:be:5f:fd:09:4b:05:31:18:35:7c:9c:34:7d:58:5b: 87:82:3a:3e:d5:3b:36:bf:57:d6:61:24:0b:3d:ec:a1:88:28: 17:03:5f:ad:b6:f4:c3:dc:99:01:cd:ac:92:95:8c:e9:24:9e: 1a:8b:8f:9b:98:d5:31:e5:fa:54:81:f0:dd:ae:0d:e4:bf:de: 87:44:eb:ed:e9:60:9a:0d:2c:f2:89:9f:24:42:ec:df:1a:b5: 81:4d:9c:0e:16:34:1a:0f:57:6f:6c:e4:98:cb:90:67:35:be: 94:7d:4a:3f:fb:42:5b:ef:9d:7e:a1:a6:32:8d:05:3d:03:9e: fe:25:e8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjQwNTE4MjA0MjM4WhcNMjQwNTI1MjA0MjM4WjAYMRYwFAYD VQQDEw02NjQ5MTJiZS02NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPIA/9fEd9YE0naghamN+jMGvliF2l79IsTpgPxPfQIpJG+Aud1+tDEjR6uA qV1HydQBNPbGgtGS8gKiN0OCASXzQtmg6t7/oKfKrKccm7qFCwO+h79l5PXiFaPu anCjc19ahPyCtIJhdmXDgk2sqacw9nQPspmMb8CyOUSxJWHPpH3n87i7IywpTye1 Ddlh0mI09QO4m/vnyVM4g58Vs3O8ELJKSrVpSUFLK4j/9IGfacl3F0+C+5UmiEzZ MuY9CX/AZvPbqiXo3Y5pAMTGFG0eVbaXitM5UCN5zqWSgS5KJ4KB1j+i1jRK6oCD tQFolQsiTzCwVUhWTkHjxrrMtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjWWfIE 8NzAAxjIWaurPxRCazTeMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSuezvtiDXiWoqzjMwHd2HG2I7ePS8eYGz6Uhaba3zI3diyXPpXrJT JHEG2fcS0hiyzUdn1n4K0u+3B822LT/9jmWV8nz9ipMH14NnMpXAF6jX/Z4UNooO oWeOBl81gQxj+sRSfCqaI6lcbLkwvpBsnG6SrEp2PlqCkUhDh+L5lh++X/0JSwUx GDV8nDR9WFuHgjo+1Ts2v1fWYSQLPeyhiCgXA1+ttvTD3JkBzaySlYzpJJ4ai4+b mNUx5fpUgfDdrg3kv96HROvt6WCaDSzyiZ8kQuzfGrWBTZwOFjQaD1dvbOSYy5Bn Nb6UfUo/+0Jb751+oaYyjQU9A57+Jehn -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org