$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: U53D1YyrFtIo3pJAa3qCSNgeTywHDX7OXmhqr/N2DR4= Subject key identifier: A3:BA:18:D1:46:CF:C2:7A:A2:92:1C:58:13:32:61:7D:13:53:82:07 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 0245 Signing time: Sun 19 May 2024 03:57:03 +0000 Manifest this update: Sun 19 May 2024 03:57:02 +0000 Manifest next update: Sun 26 May 2024 03:57:02 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: vxYy+s2lkuoBWPGkw4UPtRexJmSmo9mb5dXvH1KqHOc=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: 70Ak7XUB7BzXLnPmthZhxV5PKsUoGnrCyTGpT6zqlJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: May 19 03:57:02 2024 GMT Not After : May 26 03:57:02 2024 GMT Subject: CN=6649788e-408e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:12:a7:4d:dd:cf:9a:f7:a9:cf:80:9e:b8:eb: f9:27:0a:ed:2d:d4:fc:4b:6a:6c:b8:62:40:66:f0: 5a:c1:70:9d:ab:b1:fe:51:19:ba:c0:a2:f7:f2:0b: 4c:62:ba:63:6b:07:0f:d6:f7:f3:ee:8e:8c:f0:31: 3f:41:9d:6c:ea:b3:a5:5d:be:ed:5a:09:e4:08:00: a3:4c:9c:8c:9c:fa:fb:a5:70:43:36:4d:6d:85:3b: a6:33:9e:5a:69:5d:d6:a7:6c:3f:bb:53:3e:a2:a1: f1:6f:25:77:6c:ce:8b:a5:10:dd:8c:f4:96:fc:dd: 3c:10:e8:bb:71:ef:d4:4d:71:d5:37:83:92:9f:90: 25:0c:4f:82:7d:ae:7d:14:85:74:e9:6d:ef:be:cd: 9b:91:96:27:70:33:a1:57:a1:4a:0f:7a:42:c4:c2: 65:a7:9a:a7:d3:a9:f4:44:e4:ad:0b:84:0a:be:2e: f1:e8:43:8e:b8:7b:4e:0e:e4:3c:f0:ee:bf:3d:22: 52:f5:11:95:22:2a:7b:66:d3:97:62:00:a9:d6:0c: c3:30:7a:03:8e:bb:f2:b9:67:ce:2a:0b:bf:59:de: e2:b8:4c:71:65:87:79:a7:1f:9e:3f:ae:b9:fd:a8: aa:50:42:a4:66:64:86:73:dd:a0:05:13:c6:f0:cd: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:18:D1:46:CF:C2:7A:A2:92:1C:58:13:32:61:7D:13:53:82:07 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f3:e3:b9:f4:32:f9:43:72:6a:48:d8:ec:19:be:23:49:f9: 98:f7:32:0f:89:9e:d8:4b:3b:cc:d3:52:71:06:fc:b6:99:b1: 7b:bc:7e:7d:9f:a0:db:09:39:b8:92:c7:6f:a1:3f:48:38:f7: d5:4e:fb:44:a9:f8:67:e5:01:ad:ee:33:71:fa:0f:30:37:0d: a9:8e:56:aa:b3:6a:00:6d:8c:b6:0e:e1:83:30:d1:59:0c:ab: ce:6f:09:f8:0b:a4:47:55:6d:9a:87:a8:74:b1:ae:86:fd:c0: 23:11:48:36:f8:87:8a:3f:35:6f:2a:a5:d9:ba:7a:7c:d4:79: b4:ce:5c:63:ae:11:d3:a3:99:ec:b5:bf:f8:f6:37:8f:ab:72: 0b:46:1e:ec:bc:ed:0d:c2:45:4a:1d:8f:b8:e8:cb:5c:43:e9: 6d:7e:dd:55:5c:dd:a6:5e:da:89:79:27:1e:b2:05:86:e1:99: f5:8f:3f:ce:10:4e:55:93:30:ef:62:97:fe:e5:52:39:20:c4: 49:87:a5:53:c2:bd:56:3a:b7:0f:32:8e:24:a6:6b:38:ed:72: 40:a1:58:6f:26:66:19:82:dd:9f:f4:eb:0c:5e:14:ff:d8:7a: b0:b7:96:42:11:14:6b:4d:6c:8f:5a:91:f6:a0:28:7e:a2:1d: 47:32:b0:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjQwNTE5MDM1NzAyWhcNMjQwNTI2MDM1NzAyWjAYMRYwFAYD VQQDEw02NjQ5Nzg4ZS00MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xKnTd3Pmvepz4CeuOv5JwrtLdT8S2psuGJAZvBawXCdq7H+URm6wKL38gtM YrpjawcP1vfz7o6M8DE/QZ1s6rOlXb7tWgnkCACjTJyMnPr7pXBDNk1thTumM55a aV3Wp2w/u1M+oqHxbyV3bM6LpRDdjPSW/N08EOi7ce/UTXHVN4OSn5AlDE+Cfa59 FIV06W3vvs2bkZYncDOhV6FKD3pCxMJlp5qn06n0ROStC4QKvi7x6EOOuHtODuQ8 8O6/PSJS9RGVIip7ZtOXYgCp1gzDMHoDjrvyuWfOKgu/Wd7iuExxZYd5px+eP665 /aiqUEKkZmSGc92gBRPG8M1HVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO6GNFG z8J6opIcWBMyYX0TU4IHMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb8+O59DL5Q3JqSNjsGb4jSfmY9zIPiZ7YSzvM01JxBvy2mbF7vH59 n6DbCTm4ksdvoT9IOPfVTvtEqfhn5QGt7jNx+g8wNw2pjlaqs2oAbYy2DuGDMNFZ DKvObwn4C6RHVW2ah6h0sa6G/cAjEUg2+IeKPzVvKqXZunp81Hm0zlxjrhHTo5ns tb/49jePq3ILRh7svO0NwkVKHY+46MtcQ+ltft1VXN2mXtqJeScesgWG4Zn1jz/O EE5VkzDvYpf+5VI5IMRJh6VTwr1WOrcPMo4kpms47XJAoVhvJmYZgt2f9OsMXhT/ 2Hqwt5ZCERRrTWyPWpH2oCh+oh1HMrAz -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org