$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: HA5m22DpSw2/a038XJ7LXVwdp8egRDWbT3+FHuucu2g= Subject key identifier: E8:62:85:87:43:4A:8E:E2:B1:65:50:D1:8A:D3:C5:1F:24:4A:23:4A Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 15C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 15B2 Signing time: Sat 04 May 2024 15:54:09 +0000 Manifest this update: Sat 04 May 2024 15:54:09 +0000 Manifest next update: Sat 11 May 2024 15:54:09 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: BrYdWn4b0sTH2we/H7oj9P8IBcxGt7oNYUdpJsHkttY=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: 6fJsoHs4/VvYWKDLSqWaoRq9Q7ZbsMnOcxCIRsmzwwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5572 (0x15c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: May 4 15:54:09 2024 GMT Not After : May 11 15:54:09 2024 GMT Subject: CN=66365a21-a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:3f:fe:b2:20:81:07:93:95:1b:e3:ca:14: d0:8c:34:bb:0a:ad:3a:14:5f:ff:1d:42:41:63:7d: bb:6c:20:38:c4:3b:87:92:8b:44:e5:72:1c:bb:c1: 7c:3f:24:02:32:ab:69:bc:01:39:d9:9d:52:0c:f0: 84:88:32:37:7e:5f:28:4a:d2:2a:06:a3:d9:04:f2: 90:7b:1c:7d:97:eb:9f:6e:ac:b0:e2:21:b9:91:16: 7d:7c:69:aa:eb:af:67:f4:88:8f:38:ef:d2:d9:67: ab:6e:ca:47:8b:98:d7:93:f2:f2:b2:b7:fd:89:f7: cc:3d:57:ad:c2:02:c0:7c:8a:c8:ed:9c:39:40:85: e3:b2:66:a1:4d:da:91:0d:26:af:db:db:c6:3b:91: 7a:fa:dc:79:72:b6:18:3b:c5:de:b4:e5:86:6c:a3: 75:45:54:e8:f3:bb:f4:78:78:4b:32:ff:19:71:d1: 64:d7:e9:7a:37:49:71:36:0c:11:c4:5a:94:9b:18: 34:b7:33:eb:c1:5c:f9:0a:6f:ee:a9:5e:d5:f8:f5: 0b:26:28:eb:cb:ea:35:0e:5f:81:ad:6a:9d:da:1c: 03:3b:d5:2a:fb:e8:e2:b6:57:5a:a8:8c:b1:1e:a0: ee:3a:3d:bb:de:fb:a3:ef:41:ec:bb:ee:93:1a:8a: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:62:85:87:43:4A:8E:E2:B1:65:50:D1:8A:D3:C5:1F:24:4A:23:4A X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:b7:48:e8:bf:61:97:e2:23:4a:23:b5:77:a7:72:ee:d4:95: 97:e9:c7:9a:c3:94:95:b4:9b:c1:07:2b:07:56:bc:23:1e:74: b7:b7:58:1e:34:0d:5c:6a:ba:ce:2d:e2:c2:92:a5:73:c3:12: 3c:ff:03:d9:9d:94:16:5e:ce:e8:06:8a:eb:69:cb:99:7d:5e: 13:c2:d3:13:db:5f:67:ac:7d:18:da:85:c5:68:fa:7d:0a:e3: 01:36:6c:b5:da:e2:ec:11:7c:61:0b:cc:ef:cf:af:a8:ba:28: 26:b5:eb:e7:ba:b5:69:80:b3:02:9c:9e:42:79:ef:7b:48:fc: a7:a7:f1:6e:84:83:44:22:5c:c1:23:43:be:da:5b:6d:d3:67: 22:92:84:64:6e:8d:a6:59:f3:60:9a:e9:f3:da:e4:93:06:73: 3b:91:68:b1:8a:42:d2:27:5e:03:9e:56:89:7c:36:d9:04:40: 22:7d:46:48:88:ce:ef:c9:5c:8a:bd:06:7c:65:3a:03:ba:e4: a2:8a:2c:81:69:b7:3c:6d:a7:79:2d:1a:4b:98:05:d5:3d:d5: 58:90:ee:77:51:ff:a1:b1:80:7e:e7:11:7b:4a:b4:54:fc:02: 86:f3:02:06:61:48:64:de:3e:36:99:dc:81:28:c1:fa:8d:ac: b6:ea:04:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjQwNTA0MTU1NDA5WhcNMjQwNTExMTU1NDA5WjAYMRYwFAYD VQQDEw02NjM2NWEyMS1hMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Pc//rIggQeTlRvjyhTQjDS7Cq06FF//HUJBY327bCA4xDuHkotE5XIcu8F8 PyQCMqtpvAE52Z1SDPCEiDI3fl8oStIqBqPZBPKQexx9l+ufbqyw4iG5kRZ9fGmq 669n9IiPOO/S2WerbspHi5jXk/Lysrf9iffMPVetwgLAfIrI7Zw5QIXjsmahTdqR DSav29vGO5F6+tx5crYYO8XetOWGbKN1RVTo87v0eHhLMv8ZcdFk1+l6N0lxNgwR xFqUmxg0tzPrwVz5Cm/uqV7V+PULJijry+o1Dl+BrWqd2hwDO9Uq++jitldaqIyx HqDuOj273vuj70Hsu+6TGopugwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhihYdD So7isWVQ0YrTxR8kSiNKMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVt0jov2GX4iNKI7V3p3Lu1JWX6ceaw5SVtJvBBysHVrwjHnS3t1ge NA1carrOLeLCkqVzwxI8/wPZnZQWXs7oBorracuZfV4TwtMT219nrH0Y2oXFaPp9 CuMBNmy12uLsEXxhC8zvz6+ouigmtevnurVpgLMCnJ5Cee97SPynp/FuhINEIlzB I0O+2ltt02cikoRkbo2mWfNgmunz2uSTBnM7kWixikLSJ14DnlaJfDbZBEAifUZI iM7vyVyKvQZ8ZToDuuSiiiyBabc8bad5LRpLmAXVPdVYkO53Uf+hsYB+5xF7SrRU /AKG8wIGYUhk3j42mdyBKMH6jay26gQt -----END CERTIFICATE-----Generated at Sat May 4 16:48:40 2024 by rpki-client on console-ams.rpki-client.org