$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: UjoOp67QGx/siUfY8QgbGLCG4rEijzdzoaWo1jN0rrI= Subject key identifier: 11:C0:A5:F9:09:B3:FF:AE:18:36:98:58:01:B9:BA:3D:B9:02:1C:37 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 162D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 161A Signing time: Wed 20 Nov 2024 15:34:53 +0000 Manifest this update: Wed 20 Nov 2024 15:34:53 +0000 Manifest next update: Wed 27 Nov 2024 15:34:53 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: ahx878a66PSyChZ8gsAebEIywmePOjzzb6B1CzZy02E=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5677 (0x162d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Nov 20 15:34:53 2024 GMT Not After : Nov 27 15:34:53 2024 GMT Subject: CN=673e019d-34fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fd:43:6e:d3:09:41:11:c4:35:1d:7f:8d:f4: 1b:e0:ff:76:99:df:29:ec:b7:10:f4:eb:53:4d:a6: 0a:d8:4b:99:8a:9e:67:9c:3e:b4:55:53:9f:64:ae: aa:bc:a4:d0:fd:62:7f:d3:92:fa:96:a1:fa:2e:d7: 5a:ba:3b:cc:64:a0:23:f8:41:52:56:05:fe:ca:b3: 3c:1c:36:7d:51:28:cd:c2:3e:98:7b:d1:37:bf:a9: cc:87:e3:6d:bc:38:4d:18:c7:27:c8:c4:60:3e:96: bd:b2:23:c5:35:e9:5e:0c:d0:82:7c:6c:89:da:bc: 56:ff:12:a8:28:32:16:8c:74:b8:0a:a7:da:16:28: f6:d0:1c:0d:c4:38:ef:d3:12:37:ef:80:27:94:88: ff:44:98:cb:bd:fc:73:bb:ea:75:68:94:5a:ab:90: 7c:42:1d:53:7d:f9:b1:ca:7f:df:8b:d1:73:33:75: 8a:ef:89:9a:88:55:91:3c:a3:69:25:f9:e9:9b:35: 8b:a2:43:ce:19:2b:0e:8b:17:2a:e6:ce:31:b4:2b: d7:0d:a9:66:bd:a7:23:ac:be:29:0b:39:1f:62:5e: 7e:66:39:88:55:d3:95:3d:a8:87:07:c5:fd:c7:b3: 18:a0:9b:a4:28:6e:57:f9:e1:96:a4:88:dc:01:72: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:A5:F9:09:B3:FF:AE:18:36:98:58:01:B9:BA:3D:B9:02:1C:37 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ed:39:e7:fe:e2:a3:97:35:e1:87:01:8e:cd:71:f0:0b:81: a4:74:a3:a3:d3:4e:8e:90:f2:d3:ba:c5:e4:09:ca:ec:07:a4: 1e:90:f8:8f:42:1b:7a:b5:79:6a:09:66:65:95:19:d9:e7:6b: e0:3b:34:02:e1:42:3e:ae:1d:9f:70:76:0b:5d:a8:6b:91:9d: 12:e5:85:02:aa:01:25:08:f0:d5:69:46:ff:90:62:16:f8:d5: 41:20:d6:e2:44:b8:b8:5e:99:0e:11:08:1b:a4:2b:e5:02:1a: c2:f1:dc:de:15:83:e3:c6:8a:9b:7a:dd:8d:7c:b8:b0:19:12: 22:73:0d:48:39:46:a9:56:19:3e:dd:dc:9a:03:eb:be:cf:cb: fb:7e:58:d6:af:f4:cc:f1:84:9c:a8:1a:cc:d1:6e:be:fc:8a: 47:21:26:e3:70:1f:ea:69:38:a5:d4:68:de:67:25:2a:5a:ad: 05:2c:47:02:cc:92:4a:97:f8:5f:19:21:df:e6:9a:fd:d5:22: 50:6e:7d:66:a5:fc:fa:ef:5e:d2:17:33:eb:37:4f:60:4a:a6: a5:99:cc:45:34:f7:37:12:53:fe:09:8a:13:3d:77:40:94:b7: c2:b9:b7:a7:e8:2b:3f:4f:65:91:72:d2:10:7a:77:d2:86:cf: 9b:92:1c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjQxMTIwMTUzNDUzWhcNMjQxMTI3MTUzNDUzWjAYMRYwFAYD VQQDEw02NzNlMDE5ZC0zNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8P1DbtMJQRHENR1/jfQb4P92md8p7LcQ9OtTTaYK2EuZip5nnD60VVOfZK6q vKTQ/WJ/05L6lqH6LtdaujvMZKAj+EFSVgX+yrM8HDZ9USjNwj6Ye9E3v6nMh+Nt vDhNGMcnyMRgPpa9siPFNeleDNCCfGyJ2rxW/xKoKDIWjHS4CqfaFij20BwNxDjv 0xI374AnlIj/RJjLvfxzu+p1aJRaq5B8Qh1Tffmxyn/fi9FzM3WK74maiFWRPKNp JfnpmzWLokPOGSsOixcq5s4xtCvXDalmvacjrL4pCzkfYl5+ZjmIVdOVPaiHB8X9 x7MYoJukKG5X+eGWpIjcAXI2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHApfkJ s/+uGDaYWAG5uj25Ahw3MB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL7Tnn/uKjlzXhhwGOzXHwC4GkdKOj006OkPLTusXkCcrsB6QekPiP Qht6tXlqCWZllRnZ52vgOzQC4UI+rh2fcHYLXahrkZ0S5YUCqgElCPDVaUb/kGIW +NVBINbiRLi4XpkOEQgbpCvlAhrC8dzeFYPjxoqbet2NfLiwGRIicw1IOUapVhk+ 3dyaA+u+z8v7fljWr/TM8YScqBrM0W6+/IpHISbjcB/qaTil1GjeZyUqWq0FLEcC zJJKl/hfGSHf5pr91SJQbn1mpfz6717SFzPrN09gSqalmcxFNPc3ElP+CYoTPXdA lLfCuben6Cs/T2WRctIQenfShs+bkhzs -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:53 2024 by rpki-client on console-fra.rpki-client.org