$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/veexi91_f2hNIqL7gS7lkDSJ2uI.mft File: veexi91_f2hNIqL7gS7lkDSJ2uI.mft (raw, json) Hash identifier: GzPePoc0yV2tDq5MD0lEnf8gtDZhPX/lL+602MPZ5xw= Subject key identifier: 09:4B:03:61:0B:90:54:18:36:A7:65:13:95:B8:22:28:AE:27:DB:28 Authority key identifier: BD:E7:B1:8B:DD:7F:7F:68:4D:22:A2:FB:81:2E:E5:90:34:89:DA:E2 Certificate issuer: /CN=A915D6D4/serialNumber=BDE7B18BDD7F7F684D22A2FB812EE5903489DAE2 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veexi91_f2hNIqL7gS7lkDSJ2uI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/veexi91_f2hNIqL7gS7lkDSJ2uI.mft Manifest number: 3A24 Signing time: Thu 02 May 2024 14:38:52 +0000 Manifest this update: Thu 02 May 2024 14:38:51 +0000 Manifest next update: Thu 09 May 2024 14:38:51 +0000 Files and hashes: 1: veexi91_f2hNIqL7gS7lkDSJ2uI.crl (hash: j26fCBKEZkdYyk3E1iI/ZFin1GQ/Su36uJ/3yxNi8+k=) 2: 0B1C25AA364011EB8D09CB13C4F9AE02.roa (hash: IslJg9CSyS3AEKLylYiuMbNG00rB4kCpHedmNW+na0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/veexi91_f2hNIqL7gS7lkDSJ2uI.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/veexi91_f2hNIqL7gS7lkDSJ2uI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veexi91_f2hNIqL7gS7lkDSJ2uI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4/serialNumber=BDE7B18BDD7F7F684D22A2FB812EE5903489DAE2 Validity Not Before: May 2 14:38:51 2024 GMT Not After : May 9 14:38:51 2024 GMT Subject: CN=6633a57c-a332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:c5:98:da:ae:cb:c2:af:5a:a9:28:e8:7f: 76:e6:56:8e:dc:7e:96:5e:b8:9d:a5:ce:31:32:bf: a6:59:12:43:3c:4c:a9:94:a7:d6:65:61:f9:09:25: 94:26:3c:a6:62:3e:2a:b3:c5:36:2c:3c:c7:15:e9: e1:aa:29:5d:8d:ff:af:35:d7:e6:b7:bb:33:56:de: 0d:2d:18:fd:6f:66:14:03:7d:83:59:af:95:34:cb: 0d:22:53:1a:4d:53:5c:f6:a0:26:3e:25:56:95:e8: 96:75:17:b0:8a:42:84:d9:3b:0a:de:79:21:42:f8: 80:a6:44:74:b6:96:f5:c4:9e:17:94:82:78:57:c1: d0:74:0e:a9:98:79:69:ca:7a:8e:b2:76:e4:7b:d4: 09:dc:dc:a2:6e:15:ea:67:5f:bf:37:83:0a:19:df: 3e:56:67:ca:8c:09:19:76:24:fd:92:f1:1c:00:fc: af:3d:32:08:f5:47:cb:d9:29:89:b5:d3:5c:2f:ba: 71:10:af:56:21:b8:7b:f8:2f:46:76:86:53:b6:d6: 66:0f:49:ab:93:8b:ef:a3:b7:5c:b5:a4:5d:6b:3e: a5:dc:0a:37:38:c8:e2:ee:db:6b:40:e6:67:a8:2f: 7d:2e:7a:cc:84:85:78:e7:30:6f:63:d9:95:0f:f5: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4B:03:61:0B:90:54:18:36:A7:65:13:95:B8:22:28:AE:27:DB:28 X509v3 Authority Key Identifier: keyid:BD:E7:B1:8B:DD:7F:7F:68:4D:22:A2:FB:81:2E:E5:90:34:89:DA:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/veexi91_f2hNIqL7gS7lkDSJ2uI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veexi91_f2hNIqL7gS7lkDSJ2uI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/veexi91_f2hNIqL7gS7lkDSJ2uI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:5b:88:5a:b5:72:ad:80:80:1d:c8:35:fb:02:bb:8d:97:61: 7d:cc:b3:a7:62:d2:1f:e0:5c:37:fd:65:37:43:08:0a:4b:74: b7:9f:9f:42:be:e6:f9:ed:d5:40:df:50:f4:a0:6d:a5:bf:6e: 02:8c:89:81:87:0c:31:53:5b:35:f6:32:0e:6c:83:58:1b:a4: 44:1a:b8:b1:fc:44:51:82:92:23:65:53:7e:bd:f0:96:d0:ba: 2f:45:58:42:0a:3f:20:ce:93:68:c1:7e:25:8d:6a:32:d9:78: e6:b7:ac:53:02:3f:eb:41:e6:76:59:90:a4:75:c6:66:60:5d: 30:6c:3c:43:ea:87:a5:8d:fd:f8:3c:98:b6:55:10:21:1f:5c: dd:51:1f:ac:f2:da:05:3f:32:2d:67:24:08:20:ad:94:07:aa: dd:37:1b:95:77:8b:c8:c8:82:c4:cb:38:3a:06:ba:1d:71:f0: 66:cd:07:e8:d4:3b:c1:4a:e0:48:e9:7b:dd:e8:90:63:fc:77: 6a:d1:ca:6f:2f:b8:25:97:8a:f6:4e:7a:c9:8e:b2:8d:d9:d4: a8:6c:a4:71:73:d9:61:d7:0a:6b:69:61:08:71:71:88:bc:07: 76:48:e6:39:54:d8:bd:85:17:3d:1e:3b:9c:01:b7:95:f6:ae: 8f:d1:36:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEJERTdCMThCREQ3RjdGNjg0RDIyQTJGQjgxMkVFNTkw MzQ4OURBRTIwHhcNMjQwNTAyMTQzODUxWhcNMjQwNTA5MTQzODUxWjAYMRYwFAYD VQQDEw02NjMzYTU3Yy1hMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l3FmNquy8KvWqko6H925laO3H6WXridpc4xMr+mWRJDPEyplKfWZWH5CSWU JjymYj4qs8U2LDzHFenhqildjf+vNdfmt7szVt4NLRj9b2YUA32DWa+VNMsNIlMa TVNc9qAmPiVWleiWdRewikKE2TsK3nkhQviApkR0tpb1xJ4XlIJ4V8HQdA6pmHlp ynqOsnbke9QJ3NyibhXqZ1+/N4MKGd8+VmfKjAkZdiT9kvEcAPyvPTII9UfL2SmJ tdNcL7pxEK9WIbh7+C9GdoZTttZmD0mrk4vvo7dctaRdaz6l3Ao3OMji7ttrQOZn qC99LnrMhIV45zBvY9mVD/Vw4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlLA2EL kFQYNqdlE5W4IiiuJ9soMB8GA1UdIwQYMBaAFL3nsYvdf39oTSKi+4Eu5ZA0idri MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi92ZWV4aTkxX2YyaE5JcUw3Z1M3bGtEU0oy dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlZXhpOTFfZjJoTklxTDdnUzdsa0RTSjJ1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi92ZWV4aTkxX2Yy aE5JcUw3Z1M3bGtEU0oydUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCW4hatXKtgIAdyDX7AruNl2F9zLOnYtIf4Fw3/WU3QwgKS3S3n59C vub57dVA31D0oG2lv24CjImBhwwxU1s19jIObINYG6REGrix/ERRgpIjZVN+vfCW 0LovRVhCCj8gzpNowX4ljWoy2Xjmt6xTAj/rQeZ2WZCkdcZmYF0wbDxD6oeljf34 PJi2VRAhH1zdUR+s8toFPzItZyQIIK2UB6rdNxuVd4vIyILEyzg6BrodcfBmzQfo 1DvBSuBI6Xvd6JBj/Hdq0cpvL7gll4r2TnrJjrKN2dSobKRxc9lh1wpraWEIcXGI vAd2SOY5VNi9hRc9HjucAbeV9q6P0TbQ -----END CERTIFICATE-----Generated at Thu May 2 17:43:08 2024 by rpki-client on console-fra.rpki-client.org