$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: CkJXn4PGtJGzLlSsuvbPN/5ToiqMpu62g3NkUaQWkc8= Subject key identifier: 0C:DE:39:FD:95:14:87:A8:91:EB:BB:FD:85:EB:9C:27:4D:66:27:F6 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 5D Signing time: Fri 31 May 2024 08:42:01 +0000 Manifest this update: Fri 31 May 2024 08:42:00 +0000 Manifest next update: Fri 07 Jun 2024 08:42:00 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: 8CXQNAuxL5sTgRvb39uajmFbIOtjs2IoivaN/vU/4LI=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: V1ySiLSwkc7NI48rQG5CjSEDZq1Hxidnyr7XPs25edc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: May 31 08:42:00 2024 GMT Not After : Jun 7 08:42:00 2024 GMT Subject: CN=66598d59-0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:24:0a:c9:c3:d2:0b:58:17:05:48:b6:e0: eb:54:2b:8d:4b:d4:ee:65:8f:d2:1a:a8:f4:64:e9: 9d:fa:84:2a:54:26:28:cb:41:b5:64:d9:af:c5:0c: cf:61:c0:27:bc:da:48:9a:8c:73:f2:7c:6b:5b:88: 7e:6f:5f:6f:c6:a9:2c:75:fc:68:97:ea:74:0e:54: 7d:8b:00:60:01:5b:4c:95:eb:1b:00:00:b0:23:8b: 1d:95:86:70:d4:60:9b:89:03:3c:4b:df:a9:77:93: b2:90:cf:19:a2:64:a4:4b:34:bb:3a:83:e1:a8:a7: 40:f1:e0:7d:5c:7a:8d:a4:70:c3:f6:b8:ec:4d:41: 3e:3d:8a:21:f1:a5:72:15:03:56:22:a4:34:49:fd: 14:75:30:f3:99:10:30:ea:69:56:1e:3a:72:55:a8: 05:f7:95:70:d3:89:db:01:b1:50:f0:6c:b2:b2:7a: 2f:5e:54:2f:c7:f2:70:f4:60:7b:43:9f:3a:a4:82: d2:86:ee:69:dc:95:10:58:48:8d:2c:5c:e8:b4:33: 6f:c9:ae:64:fe:b4:74:ca:00:e7:31:a5:5b:57:12: 62:1a:f5:be:e1:7c:86:23:e3:00:d9:41:e0:7d:ff: a8:b7:14:27:e9:0a:cb:ab:94:d4:1d:4b:ff:f0:9e: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DE:39:FD:95:14:87:A8:91:EB:BB:FD:85:EB:9C:27:4D:66:27:F6 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f9:06:4a:29:bd:fe:a0:00:ab:ca:e6:0b:80:5a:ad:c3:2b: a5:e1:ba:b1:70:63:ba:2e:c7:f0:76:bc:9a:dd:1f:d7:b1:39: 8e:17:eb:01:a3:9e:51:06:20:77:c0:1e:7b:82:3b:cd:1e:7c: 96:04:52:83:58:cf:e6:1e:8d:89:9b:70:ac:f7:81:84:ef:fe: 4f:ed:07:49:06:a7:2f:f1:8b:34:4b:0e:fa:65:91:df:db:58: 59:2f:f7:0d:3b:65:08:a1:7d:e8:18:77:00:85:33:9a:b2:40: bb:f7:c9:4f:d7:b2:d5:9e:90:be:30:34:70:52:fb:29:58:31: a2:f5:6f:24:54:cc:80:0c:d2:43:97:d8:2f:da:cd:4c:10:25: 38:b4:16:09:a6:3f:c7:18:53:fb:1c:7b:8e:f2:a4:67:d6:ae: e5:a9:18:76:9d:87:f5:07:ba:18:ce:a2:c6:9b:1e:b4:25:f4: 1e:c7:2b:4c:fe:be:43:35:53:e9:91:f7:da:19:08:79:b2:71: e8:3e:48:e9:e6:86:db:63:b9:72:90:08:ca:2c:b0:6a:d0:6d: 62:2b:84:66:11:9a:af:b1:97:6a:40:c3:ce:01:70:79:d8:f8: c7:fb:d1:39:eb:b5:32:7a:43:03:f1:5b:9a:af:1f:b5:c0:db: 44:c9:59:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjk2QTExMC8GA1UEBRMoRjE5MzYwNDY5NTE0NkVCRTFEQkY3M0ZERTBFQjY2MjFG RDlGQjhGOTAeFw0yNDA1MzEwODQyMDBaFw0yNDA2MDcwODQyMDBaMBgxFjAUBgNV BAMTDTY2NTk4ZDU5LTAzNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRViQKycPSC1gXBUi24OtUK41L1O5lj9IaqPRk6Z36hCpUJijLQbVk2a/FDM9h wCe82kiajHPyfGtbiH5vX2/GqSx1/GiX6nQOVH2LAGABW0yV6xsAALAjix2VhnDU YJuJAzxL36l3k7KQzxmiZKRLNLs6g+Gop0Dx4H1ceo2kcMP2uOxNQT49iiHxpXIV A1YipDRJ/RR1MPOZEDDqaVYeOnJVqAX3lXDTidsBsVDwbLKyei9eVC/H8nD0YHtD nzqkgtKG7mnclRBYSI0sXOi0M2/JrmT+tHTKAOcxpVtXEmIa9b7hfIYj4wDZQeB9 /6i3FCfpCsurlNQdS//wnlJvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDN45/ZUU h6iR67v9heucJ01mJ/YwHwYDVR0jBBgwFoAU8ZNgRpUUbr4dv3P94OtmIf2fuPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOTZBL0M1OTY1OUIwOTM2 QjExRUU5RTRDMzg4NUM0RjlBRTAyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFpOZ1JwVVVicjRkdjNQOTRPdG1JZjJmdVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy OTZBL0M1OTY1OUIwOTM2QjExRUU5RTRDMzg4NUM0RjlBRTAyLzhaTmdScFVVYnI0 ZHYzUDk0T3RtSWYyZnVQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFn5Bkopvf6gAKvK5guAWq3DK6XhurFwY7oux/B2vJrdH9exOY4X6wGj nlEGIHfAHnuCO80efJYEUoNYz+YejYmbcKz3gYTv/k/tB0kGpy/xizRLDvplkd/b WFkv9w07ZQihfegYdwCFM5qyQLv3yU/XstWekL4wNHBS+ylYMaL1byRUzIAM0kOX 2C/azUwQJTi0FgmmP8cYU/sce47ypGfWruWpGHadh/UHuhjOosabHrQl9B7HK0z+ vkM1U+mR99oZCHmyceg+SOnmhttjuXKQCMossGrQbWIrhGYRmq+xl2pAw84BcHnY +Mf70TnrtTJ6QwPxW5qvH7XA20TJWeY= -----END CERTIFICATE-----Generated at Fri May 31 10:42:19 2024 by rpki-client on console-fra.rpki-client.org