$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: 6YjciWDNSCKkgghpcNWYkulwLWumJYIfzfsuMeCPiUM= Subject key identifier: AB:94:47:CB:E1:67:37:14:C3:21:C0:0F:79:8C:E4:D6:71:56:08:B7 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 0404 Signing time: Fri 22 Nov 2024 23:59:49 +0000 Manifest this update: Fri 22 Nov 2024 23:59:49 +0000 Manifest next update: Fri 29 Nov 2024 23:59:49 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: InJ+eirEIuW+mcqR1XdiNn5rvsGx0Am1TpXVgP5taLw=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: +rAjSESjXSQDi9T1YO1Hgvko/UMRfFUd7nF2m6aesuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: Nov 22 23:59:49 2024 GMT Not After : Nov 29 23:59:49 2024 GMT Subject: CN=67411af5-c58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1a:f4:76:5f:1a:e1:c3:eb:e1:77:91:26:b4: c0:65:11:81:31:a9:cd:06:d7:0c:06:63:e9:45:1c: 35:51:f1:43:45:1e:35:f6:83:06:e8:88:ea:c5:fa: 49:5d:09:e5:e3:3c:6d:54:1e:89:fb:ab:22:aa:77: ab:a9:d9:2f:19:33:75:04:38:d7:3d:e6:83:ef:5b: b0:45:7a:b3:de:7e:11:32:50:09:d7:93:5c:3f:27: be:a4:44:31:01:e9:53:66:c3:06:9e:ec:ec:d1:e8: 5c:7a:03:68:fe:9d:7c:fa:c7:25:1a:a2:c2:82:9c: c6:25:3e:df:c7:05:80:78:27:c6:3a:f0:4b:39:1e: 0f:cd:c4:e2:aa:b1:af:d5:8b:af:b7:34:05:54:38: c7:6d:e3:3a:57:da:3d:0e:77:bb:b0:4e:ca:e1:44: 1b:86:ba:7a:b3:23:0d:b0:cc:8b:b4:c0:e2:b7:09: 19:8c:c6:0f:5c:22:ec:68:d4:91:6a:e5:9f:d1:29: 01:27:7b:b2:e9:89:e5:38:8f:d7:ca:05:36:2c:1f: 55:12:51:68:b4:92:4a:56:42:5e:42:ca:bb:e7:0b: e8:9c:f0:66:ff:af:6f:44:88:60:2b:26:5a:f2:8e: a9:5b:58:b2:5b:7a:fb:b6:36:d3:dc:ad:3c:ed:77: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:47:CB:E1:67:37:14:C3:21:C0:0F:79:8C:E4:D6:71:56:08:B7 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:83:16:0e:87:4d:2c:af:f0:d1:a8:74:a9:21:df:d3:f1:7c: fa:2c:78:4c:57:84:30:be:cc:7a:fb:2d:ca:17:11:34:0d:ba: 46:0e:db:09:76:57:24:66:f3:77:66:5a:3c:51:fc:08:1b:53: 82:bc:b7:79:71:a9:50:03:fe:13:a6:c0:fc:30:14:7b:19:32: 19:fd:8d:87:f9:d7:83:05:b7:a7:d6:5e:08:d5:2a:d0:c5:88: ab:4a:1a:df:57:63:24:7e:9f:3c:33:21:f6:cd:83:d5:d1:e9: 05:b4:35:4f:4e:31:57:b5:3a:b8:fb:36:80:80:1a:a6:e0:04: 0c:a2:ff:97:bd:0e:2b:88:1a:88:d3:07:af:95:40:6f:a6:25: e3:ca:a6:b6:a0:eb:a5:d3:92:55:bd:4e:88:f5:2d:9d:83:c4: 9d:55:8c:4a:1b:3f:3c:b4:b2:20:57:9e:e3:db:f9:8d:cb:f6: e3:c1:f5:90:b8:5b:59:57:51:02:d1:9f:68:37:1b:b0:7f:97: f2:27:4c:dc:6e:ad:1e:48:ba:3a:09:e2:82:47:1e:b8:df:fa: fd:6f:97:a9:90:d6:1e:10:e5:27:bc:ad:38:e6:f8:2e:ac:2e: 1c:f6:ef:d0:2f:1d:d8:9e:70:cb:4d:13:25:4c:2f:f0:33:dd: 60:eb:e4:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjQxMTIyMjM1OTQ5WhcNMjQxMTI5MjM1OTQ5WjAYMRYwFAYD VQQDEw02NzQxMWFmNS1jNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Br0dl8a4cPr4XeRJrTAZRGBManNBtcMBmPpRRw1UfFDRR419oMG6IjqxfpJ XQnl4zxtVB6J+6siqnerqdkvGTN1BDjXPeaD71uwRXqz3n4RMlAJ15NcPye+pEQx AelTZsMGnuzs0ehcegNo/p18+sclGqLCgpzGJT7fxwWAeCfGOvBLOR4PzcTiqrGv 1YuvtzQFVDjHbeM6V9o9Dne7sE7K4UQbhrp6syMNsMyLtMDitwkZjMYPXCLsaNSR auWf0SkBJ3uy6YnlOI/XygU2LB9VElFotJJKVkJeQsq75wvonPBm/69vRIhgKyZa 8o6pW1iyW3r7tjbT3K087Xc7HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuUR8vh ZzcUwyHAD3mM5NZxVgi3MB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGgxYOh00sr/DRqHSpId/T8Xz6LHhMV4Qwvsx6+y3KFxE0DbpGDtsJ dlckZvN3Zlo8UfwIG1OCvLd5calQA/4TpsD8MBR7GTIZ/Y2H+deDBben1l4I1SrQ xYirShrfV2Mkfp88MyH2zYPV0ekFtDVPTjFXtTq4+zaAgBqm4AQMov+XvQ4riBqI 0wevlUBvpiXjyqa2oOul05JVvU6I9S2dg8SdVYxKGz88tLIgV57j2/mNy/bjwfWQ uFtZV1EC0Z9oNxuwf5fyJ0zcbq0eSLo6CeKCRx643/r9b5epkNYeEOUnvK045vgu rC4c9u/QLx3YnnDLTRMlTC/wM91g6+R5 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org