$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: ins5ajX6E3XS+8Cp6OlAy2I2XFxqVOy6ElTkyJ7551k= Subject key identifier: 49:DC:64:BC:37:34:EA:8D:5A:8B:79:85:53:76:F6:73:A4:C5:5B:F7 Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 33C2 Signing time: Wed 08 May 2024 14:34:17 +0000 Manifest this update: Wed 08 May 2024 14:34:16 +0000 Manifest next update: Wed 15 May 2024 14:34:16 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: enjl23EekdW6UTiWxDOgfk3Q0tVqDQwJVRIZ0yrmeTM=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: 6dY5OZitAuFJsTTl2QNFuyBVW7OxNQFYNmxM4QvuXdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Validity Not Before: May 8 14:34:16 2024 GMT Not After : May 15 14:34:16 2024 GMT Subject: CN=663b8d68-6fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:57:68:65:32:67:6e:09:ac:e8:86:cd:00: 5a:7f:e8:f3:14:c9:5e:f1:90:e1:fc:4c:7f:93:82: 0c:48:c9:53:9b:da:7f:82:8c:a2:59:40:a8:fd:49: dc:0c:b9:f3:88:a5:e7:2a:8c:5d:d8:5c:6c:ef:6e: 3b:8c:47:21:1b:36:57:37:b7:be:74:f5:39:c1:72: ab:28:ea:80:26:3c:9f:88:b9:3a:4d:03:63:79:67: 64:1e:0f:df:54:e4:d7:23:8e:4c:7c:69:04:4a:63: ad:4c:57:65:fa:9f:6c:91:93:e6:63:fa:de:04:86: 67:04:9a:21:c7:f4:06:d2:a8:99:5d:31:f5:21:3d: b8:a8:9b:d8:99:d8:08:c3:92:bb:c5:e9:5b:f3:fd: ef:c8:42:18:b7:16:43:b5:68:94:93:a5:2b:eb:4a: fc:e5:0c:1c:b2:0a:3e:34:88:b1:e8:37:72:b4:80: c0:03:df:4a:69:de:be:67:ff:35:4b:13:af:66:ff: de:6d:94:7a:d8:b4:6c:b9:b9:91:eb:af:7e:80:bf: 77:d5:a5:ae:12:51:c6:97:75:a6:00:3e:3b:50:55: 50:a2:6b:ee:13:62:ec:ce:15:be:6c:71:92:55:03: 8d:9b:ec:fb:c4:bf:90:81:9d:f5:14:30:0b:38:d7: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:64:BC:37:34:EA:8D:5A:8B:79:85:53:76:F6:73:A4:C5:5B:F7 X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1d:26:b0:34:d8:75:65:9f:d3:75:92:03:6d:3a:3f:2f:c1: dd:f6:58:8e:de:c3:00:16:00:ef:67:12:1c:72:46:1c:04:fc: c1:27:71:d2:df:73:52:bb:e9:f9:df:b0:42:93:54:c7:d4:dc: 3a:83:77:aa:4a:ee:9b:05:2b:e4:93:fb:5f:9c:aa:c1:be:e5: 09:19:78:2b:65:09:d3:fd:9b:1a:7f:09:ba:f7:5d:b8:6c:c6: c9:9b:0a:bb:d8:14:5f:50:3b:01:6b:2f:41:74:17:67:f6:43: d8:7b:42:58:95:2e:5d:5e:0f:35:c9:bd:49:de:5f:e6:ac:80: 00:51:1a:c4:af:8c:98:51:de:9a:27:fd:ac:11:03:c6:bb:f3: 9d:ad:ef:db:56:2e:14:5f:44:4f:fe:c9:36:19:b3:38:24:23: 54:2f:67:71:90:86:22:7b:fa:a4:93:e4:78:d4:62:53:c9:ab: d9:37:45:05:e6:c0:3b:49:0e:6a:77:a1:68:a9:b3:06:b7:13: 61:6a:f2:47:36:83:e5:a9:28:79:96:bc:3c:ce:b0:c6:61:96: 4c:d1:02:b6:20:4f:d4:34:64:66:26:dd:fa:b5:b6:43:54:22: c8:d3:2b:f2:36:81:d5:71:52:28:13:a1:cd:70:b7:12:07:02: 03:58:4a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjQwNTA4MTQzNDE2WhcNMjQwNTE1MTQzNDE2WjAYMRYwFAYD VQQDEw02NjNiOGQ2OC02ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzNXaGUyZ24JrOiGzQBaf+jzFMle8ZDh/Ex/k4IMSMlTm9p/goyiWUCo/Unc DLnziKXnKoxd2Fxs7247jEchGzZXN7e+dPU5wXKrKOqAJjyfiLk6TQNjeWdkHg/f VOTXI45MfGkESmOtTFdl+p9skZPmY/reBIZnBJohx/QG0qiZXTH1IT24qJvYmdgI w5K7xelb8/3vyEIYtxZDtWiUk6Ur60r85Qwcsgo+NIix6DdytIDAA99Kad6+Z/81 SxOvZv/ebZR62LRsubmR669+gL931aWuElHGl3WmAD47UFVQomvuE2LszhW+bHGS VQONm+z7xL+QgZ31FDALONf1BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEncZLw3 NOqNWot5hVN29nOkxVv3MB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaHSawNNh1ZZ/TdZIDbTo/L8Hd9liO3sMAFgDvZxIcckYcBPzBJ3HS 33NSu+n537BCk1TH1Nw6g3eqSu6bBSvkk/tfnKrBvuUJGXgrZQnT/Zsafwm69124 bMbJmwq72BRfUDsBay9BdBdn9kPYe0JYlS5dXg81yb1J3l/mrIAAURrEr4yYUd6a J/2sEQPGu/Odre/bVi4UX0RP/sk2GbM4JCNUL2dxkIYie/qkk+R41GJTyavZN0UF 5sA7SQ5qd6FoqbMGtxNhavJHNoPlqSh5lrw8zrDGYZZM0QK2IE/UNGRmJt36tbZD VCLI0yvyNoHVcVIoE6HNcLcSBwIDWEq7 -----END CERTIFICATE-----Generated at Wed May 8 17:46:59 2024 by rpki-client on console-ams.rpki-client.org