$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: rYKmUOyxLufqaeN6xQUphqTKJY2ANaszXRabbr/LlKg= Subject key identifier: B3:FC:04:69:5D:25:98:ED:2F:0E:4F:51:BA:DC:5A:BB:4C:B2:33:9E Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 92 Signing time: Sun 19 May 2024 06:59:26 +0000 Manifest this update: Sun 19 May 2024 06:59:26 +0000 Manifest next update: Sun 26 May 2024 06:59:26 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: FxifexM4p8ZeRjQeR9W/+PqYQf2anbtyYpfq/faBH+o=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: Jz4wR5DDj/wTkjS36fKHeBrcXdk77eXCGSsg3VfLRzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: May 19 06:59:26 2024 GMT Not After : May 26 06:59:26 2024 GMT Subject: CN=6649a34e-7358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:5b:e1:51:9e:3b:9f:a1:2c:80:ee:94:67: 40:c9:8d:e6:9b:8d:9c:6f:48:68:7c:c9:1b:91:3c: 8a:d2:e8:4f:f5:82:e4:96:03:a2:01:b5:bf:cc:e2: 5b:77:bf:6e:ca:0d:18:09:e9:e1:72:d8:47:4f:7e: 73:71:9c:15:06:3b:e5:eb:f4:b1:91:7d:18:b4:c1: e9:93:a4:ef:04:02:f1:dc:f9:79:c9:59:ee:34:35: 93:7d:cc:d7:a0:52:bc:5a:68:8a:3c:55:3b:5c:e7: fa:91:d5:fa:72:4e:98:47:a3:4f:43:81:e9:68:d9: 01:fe:38:4a:0b:d1:8d:b3:7c:a3:39:8c:33:09:b3: 3e:66:df:31:13:60:35:00:72:19:fb:af:46:1e:4f: e4:55:d1:85:d9:79:ce:bc:c1:25:57:cb:88:8a:08: 82:1e:fb:2f:a4:fc:96:0e:7e:8f:38:5a:b4:d6:8d: 48:99:ab:14:cc:d5:70:3b:13:99:10:e7:46:0d:4a: d6:37:26:61:0c:29:10:70:fa:16:a5:93:6f:f9:56: f5:97:98:e5:c6:91:6d:e8:fb:bf:6b:9e:09:db:46: 9b:11:7e:8b:bf:63:4b:25:e3:b6:1e:f8:67:44:71: e0:e3:76:cd:06:2f:e5:2a:db:7c:8e:59:46:6e:67: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FC:04:69:5D:25:98:ED:2F:0E:4F:51:BA:DC:5A:BB:4C:B2:33:9E X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:eb:b1:d8:36:d6:c0:03:65:df:8c:f2:70:9c:26:6e:e7:3f: 27:7a:96:fa:04:bf:1d:8c:9b:81:67:ba:49:b7:46:01:ad:11: 6c:f3:9c:ad:be:82:39:d8:bf:af:10:6d:03:fa:92:a5:06:39: 6e:ec:11:b6:80:c1:88:ab:25:b3:91:e2:14:40:28:36:e4:e7: c8:4d:9a:0a:d0:b9:8a:0f:ee:b4:a3:2d:df:86:73:02:ed:73: 9a:ff:5a:a8:41:9a:1d:e8:6f:d4:ef:f4:33:28:a7:e1:5f:8a: f9:e6:e9:59:6d:82:28:77:71:53:f9:90:b2:f8:d4:7f:76:b2: c6:b8:0b:08:c9:48:7f:55:78:d4:d1:98:c8:8b:cf:e7:f8:24: b5:73:a0:ba:12:21:f6:ae:d1:d6:6d:19:81:92:90:98:b8:6d: c7:e8:1e:d0:7a:90:51:ff:79:00:9f:16:f6:e1:b5:0c:b5:e3: 95:c7:57:60:c3:a4:90:6a:4e:95:e9:6f:a8:89:9d:87:b0:47: 59:bb:af:0c:85:c5:2e:b9:b6:85:1a:69:29:8d:c8:68:35:43: c5:e9:f0:62:47:7a:9a:cf:b1:21:f3:70:a5:5f:70:95:e9:e4: 35:06:60:8a:e6:60:d6:75:86:9c:ae:bd:c3:36:12:97:4a:6f: 9a:ff:5f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjQwNTE5MDY1OTI2WhcNMjQwNTI2MDY1OTI2WjAYMRYwFAYD VQQDEw02NjQ5YTM0ZS03MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH9b4VGeO5+hLIDulGdAyY3mm42cb0hofMkbkTyK0uhP9YLklgOiAbW/zOJb d79uyg0YCenhcthHT35zcZwVBjvl6/SxkX0YtMHpk6TvBALx3Pl5yVnuNDWTfczX oFK8WmiKPFU7XOf6kdX6ck6YR6NPQ4HpaNkB/jhKC9GNs3yjOYwzCbM+Zt8xE2A1 AHIZ+69GHk/kVdGF2XnOvMElV8uIigiCHvsvpPyWDn6POFq01o1ImasUzNVwOxOZ EOdGDUrWNyZhDCkQcPoWpZNv+Vb1l5jlxpFt6Pu/a54J20abEX6Lv2NLJeO2Hvhn RHHg43bNBi/lKtt8jllGbmd7GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP8BGld JZjtLw5PUbrcWrtMsjOeMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF67HYNtbAA2XfjPJwnCZu5z8nepb6BL8djJuBZ7pJt0YBrRFs85yt voI52L+vEG0D+pKlBjlu7BG2gMGIqyWzkeIUQCg25OfITZoK0LmKD+60oy3fhnMC 7XOa/1qoQZod6G/U7/QzKKfhX4r55ulZbYIod3FT+ZCy+NR/drLGuAsIyUh/VXjU 0ZjIi8/n+CS1c6C6EiH2rtHWbRmBkpCYuG3H6B7QepBR/3kAnxb24bUMteOVx1dg w6SQak6V6W+oiZ2HsEdZu68MhcUuubaFGmkpjchoNUPF6fBiR3qaz7Eh83ClX3CV 6eQ1BmCK5mDWdYacrr3DNhKXSm+a/1/y -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org