$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft File: vejnZNDzasWboDNpTTo883QGugk.mft (raw, json) Hash identifier: P48YGWQtibEdOzlN8pocC8ZAo5Vbdqsvvm6V6p+FQC4= Subject key identifier: 49:A1:C0:EA:EB:95:F6:2D:C8:A9:BC:E3:A1:D7:BD:16:92:D6:8A:FD Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 Certificate issuer: /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft Manifest number: 042F Signing time: Tue 07 May 2024 01:58:07 +0000 Manifest this update: Tue 07 May 2024 01:58:07 +0000 Manifest next update: Tue 14 May 2024 01:58:07 +0000 Files and hashes: 1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: RyOqJvgOsfjigdCjHHAZ9DF7zFXV8qunA351F3Wx82Y=) 2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: Xc5rA8GSCJmwqcUXnmkYdK+NcqMktEYFsYvC58lISbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Validity Not Before: May 7 01:58:07 2024 GMT Not After : May 14 01:58:07 2024 GMT Subject: CN=66398aaf-e3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:1c:66:b3:16:f4:e5:95:6b:96:76:0c:78: c3:e9:72:98:23:30:8f:49:d9:76:17:02:fc:4c:41: 6f:d4:ae:ff:da:05:55:71:4b:7e:64:f0:6f:b6:ed: e1:84:71:30:a0:f1:0c:a5:49:95:39:65:f9:75:db: 67:51:d9:92:f5:94:0c:52:92:62:26:31:08:d4:f3: 14:7a:84:81:c3:1b:b3:0c:0d:64:db:5b:c9:7d:f8: 85:a5:7f:8c:c1:87:0d:43:35:05:ea:8f:68:5e:3a: df:00:aa:e5:5f:fe:bb:fb:da:a5:84:18:11:75:e5: 4e:ff:b3:04:2a:da:8c:33:d5:1e:8d:ba:96:f0:35: ca:ee:d7:58:51:21:4f:6d:06:f0:75:5f:3a:58:35: 1e:a2:e5:7c:97:fe:0b:10:c8:f2:23:70:d5:38:6f: a5:83:fc:0e:a7:7b:bf:f5:dc:ae:e0:f9:36:74:22: 6e:31:47:e4:49:06:3f:cb:ec:65:fe:ed:2b:f3:4a: d4:33:c2:13:0f:52:04:4b:89:2a:e1:44:b3:a0:1f: e4:cb:93:3e:85:3a:97:76:1e:f2:88:e3:ed:cc:e2: b0:33:3a:93:9e:5c:68:95:96:43:fc:b2:dc:6b:ba: 5f:05:9b:16:a9:5a:59:87:d5:3f:79:25:c8:dc:a9: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A1:C0:EA:EB:95:F6:2D:C8:A9:BC:E3:A1:D7:BD:16:92:D6:8A:FD X509v3 Authority Key Identifier: keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f8:ed:0f:c9:86:e3:f8:53:0a:99:6e:46:c5:1d:4a:9b:8a: c4:f5:44:b2:14:26:c8:71:a2:03:b1:97:3a:cb:3c:de:ba:f0: 00:58:54:fd:01:1e:03:80:ac:5c:a2:c8:d4:86:ec:35:ec:c1: 65:18:1b:0c:f3:72:6e:3c:78:b2:1d:d7:30:4b:a5:9f:ae:12: 42:9b:6e:d1:a0:28:ab:1b:a4:94:9a:20:79:3b:e2:74:ab:3f: 75:b0:07:35:3c:9d:94:63:d7:29:c3:bc:46:32:94:33:d6:2a: 90:25:13:48:23:ca:55:e6:a2:58:c3:d7:6c:6c:f7:e7:db:83: d0:18:de:1c:2d:b0:1d:87:0a:77:7d:94:36:d6:40:79:01:be: 4e:30:7e:70:d6:2f:ce:f6:2a:1c:23:bb:f0:fb:b7:81:07:21: 45:31:96:c8:0d:1c:05:f9:83:c3:04:49:ca:69:fc:5c:3a:fb: dd:df:d3:17:aa:b2:bc:f5:b6:c7:d5:1d:f0:39:a3:08:21:38: ca:57:da:e8:4d:7e:27:e8:77:3a:94:67:2a:5f:56:46:09:1c: da:71:b0:f6:05:aa:42:79:b7:86:dd:f4:e5:50:e9:5e:4e:70: a7:4c:c9:c1:7e:e9:57:6f:d0:63:f5:4b:bc:ca:06:9e:d8:51: 27:56:7a:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExOTIxMTAvBgNVBAUTKEJERThFNzY0RDBGMzZBQzU5QkEwMzM2OTREM0EzQ0Yz NzQwNkJBMDkwHhcNMjQwNTA3MDE1ODA3WhcNMjQwNTE0MDE1ODA3WjAYMRYwFAYD VQQDEw02NjM5OGFhZi1lM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqccZrMW9OWVa5Z2DHjD6XKYIzCPSdl2FwL8TEFv1K7/2gVVcUt+ZPBvtu3h hHEwoPEMpUmVOWX5ddtnUdmS9ZQMUpJiJjEI1PMUeoSBwxuzDA1k21vJffiFpX+M wYcNQzUF6o9oXjrfAKrlX/67+9qlhBgRdeVO/7MEKtqMM9UejbqW8DXK7tdYUSFP bQbwdV86WDUeouV8l/4LEMjyI3DVOG+lg/wOp3u/9dyu4Pk2dCJuMUfkSQY/y+xl /u0r80rUM8ITD1IES4kq4USzoB/ky5M+hTqXdh7yiOPtzOKwMzqTnlxolZZD/LLc a7pfBZsWqVpZh9U/eSXI3KloOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmhwOrr lfYtyKm846HXvRaS1or9MB8GA1UdIwQYMBaAFL3o52TQ82rFm6AzaU06PPN0BroJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE5Mi9CMjIzOTFBMDEx REYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFzV2JvRE5wVFRvODgzUUd1 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Zlam5aTkR6YXNXYm9ETnBUVG84ODNRR3Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE5Mi9CMjIzOTFBMDExREYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFz V2JvRE5wVFRvODgzUUd1Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm+O0PyYbj+FMKmW5GxR1Km4rE9USyFCbIcaIDsZc6yzzeuvAAWFT9 AR4DgKxcosjUhuw17MFlGBsM83JuPHiyHdcwS6WfrhJCm27RoCirG6SUmiB5O+J0 qz91sAc1PJ2UY9cpw7xGMpQz1iqQJRNII8pV5qJYw9dsbPfn24PQGN4cLbAdhwp3 fZQ21kB5Ab5OMH5w1i/O9iocI7vw+7eBByFFMZbIDRwF+YPDBEnKafxcOvvd39MX qrK89bbH1R3wOaMIITjKV9roTX4n6Hc6lGcqX1ZGCRzacbD2BapCebeG3fTlUOle TnCnTMnBfulXb9Bj9Uu8ygae2FEnVnqM -----END CERTIFICATE-----Generated at Tue May 7 03:12:18 2024 by rpki-client on console-fra.rpki-client.org