$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json) Hash identifier: WLIHPKJHh98t0MNQp1eywcD/mQLHflcFpacUgbYMoOI= Subject key identifier: E9:2C:84:E4:9A:67:4C:DF:7D:18:04:AD:BA:28:7A:8D:A7:5C:90:F1 Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft Manifest number: 7E Signing time: Sun 19 May 2024 07:16:45 +0000 Manifest this update: Sun 19 May 2024 07:16:44 +0000 Manifest next update: Sun 26 May 2024 07:16:44 +0000 Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: 8eHEuakPw7C5T48FFES/51dCqUbSc5Z/cRbegUZURIE=) 2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: mrCI6LJh7OXLK/YxqWyr5RsSDyzUYdmyvE3b/k2wgVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Validity Not Before: May 19 07:16:44 2024 GMT Not After : May 26 07:16:44 2024 GMT Subject: CN=6649a75c-e0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:e2:40:2b:dc:bd:07:45:0d:79:6e:83:aa: f8:0a:d0:5f:6d:a5:5d:c3:6b:f2:51:7e:9e:41:79: 76:13:eb:d4:e2:f0:04:8f:03:e8:bb:0d:ac:5e:44: e5:a8:44:5c:12:cf:40:57:26:6d:a2:52:25:9f:13: 34:4b:c7:06:39:13:4f:01:81:7d:3b:56:e1:b3:34: 5d:c5:0b:3a:d2:be:71:d1:d5:60:19:d8:59:f9:76: 6d:0a:d4:9b:75:48:cb:1f:7a:e5:17:f9:0d:22:e0: 6a:45:22:90:14:c0:b5:76:e4:d7:de:07:a7:86:85: 27:7d:ff:cf:20:b2:1d:61:7a:95:c7:96:ee:f4:f6: 8b:2c:13:1f:ac:16:3d:2f:3b:65:ba:8b:51:51:a1: 56:f5:0d:22:16:6f:55:48:b3:47:1c:21:4a:42:3f: 69:a5:64:07:88:4e:8e:0b:e0:4f:84:7c:e2:63:fd: 06:41:54:ae:eb:08:c6:58:38:08:6f:a5:ec:d4:c8: 1d:0f:c2:10:be:91:56:fd:34:3c:7b:e6:e0:a8:a7: a7:be:39:12:b4:44:2e:94:02:37:0c:30:60:92:e2: f5:1c:04:9d:62:c1:1e:77:23:0c:c4:30:89:03:5d: 98:3a:68:f1:ed:03:70:70:f9:4f:07:7b:ca:e4:40: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:84:E4:9A:67:4C:DF:7D:18:04:AD:BA:28:7A:8D:A7:5C:90:F1 X509v3 Authority Key Identifier: keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a0:dc:53:62:48:26:87:dd:ca:88:ec:f0:b8:ec:a6:ae:a9: 21:06:75:ac:6e:f3:8f:e5:b1:0e:cf:0e:b3:7a:24:fe:d6:ad: 59:a4:9d:7f:d6:ae:f5:ef:73:b5:a1:dc:5b:23:b0:ff:f1:23: 74:8a:87:c2:53:e5:e2:b8:b7:da:10:b1:dc:c3:32:de:d9:1f: 0e:19:97:18:c3:cf:bf:d3:2c:f4:43:5b:07:3b:51:1b:32:1c: 33:44:63:dd:fa:31:16:45:5a:29:2c:12:b5:4a:b9:22:a9:60: 99:70:01:64:6c:6e:aa:9c:b9:31:75:d8:22:c1:67:b5:e5:27: d8:ea:b5:9f:f7:66:58:df:3e:d4:5f:0c:e0:95:a1:ae:a1:f3: 09:c0:85:b8:2c:56:bc:a5:d0:80:90:8b:84:10:52:22:d7:ec: 82:4d:a8:e5:a8:7a:38:2c:68:e7:a8:2f:33:6b:d1:19:08:4c: 6c:2d:48:63:fa:b1:b7:46:84:a7:ee:ce:af:ff:73:7c:3c:31: 57:4b:0d:70:58:1b:ac:13:69:15:86:99:16:23:2e:86:83:48: b5:f4:19:a9:d5:19:52:ca:53:04:2f:d9:ce:87:5a:0d:88:75: 68:98:6c:aa:58:c4:c6:0b:d7:81:4e:80:96:ea:56:95:da:3d: d9:4f:b7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2 Nzc4RkVGMzUwHhcNMjQwNTE5MDcxNjQ0WhcNMjQwNTI2MDcxNjQ0WjAYMRYwFAYD VQQDEw02NjQ5YTc1Yy1lMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqALiQCvcvQdFDXlug6r4CtBfbaVdw2vyUX6eQXl2E+vU4vAEjwPouw2sXkTl qERcEs9AVyZtolIlnxM0S8cGORNPAYF9O1bhszRdxQs60r5x0dVgGdhZ+XZtCtSb dUjLH3rlF/kNIuBqRSKQFMC1duTX3genhoUnff/PILIdYXqVx5bu9PaLLBMfrBY9 LztluotRUaFW9Q0iFm9VSLNHHCFKQj9ppWQHiE6OC+BPhHziY/0GQVSu6wjGWDgI b6Xs1MgdD8IQvpFW/TQ8e+bgqKenvjkStEQulAI3DDBgkuL1HASdYsEedyMMxDCJ A12YOmjx7QNwcPlPB3vK5EC+kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkshOSa Z0zffRgErbooeo2nXJDxMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5 REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV R25JWW1PbmdjLUZuZVA3elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaoNxTYkgmh93KiOzwuOymrqkhBnWsbvOP5bEOzw6zeiT+1q1ZpJ1/ 1q7173O1odxbI7D/8SN0iofCU+XiuLfaELHcwzLe2R8OGZcYw8+/0yz0Q1sHO1Eb MhwzRGPd+jEWRVopLBK1SrkiqWCZcAFkbG6qnLkxddgiwWe15SfY6rWf92ZY3z7U XwzglaGuofMJwIW4LFa8pdCAkIuEEFIi1+yCTajlqHo4LGjnqC8za9EZCExsLUhj +rG3RoSn7s6v/3N8PDFXSw1wWBusE2kVhpkWIy6Gg0i19Bmp1RlSylMEL9nOh1oN iHVomGyqWMTGC9eBToCW6laV2j3ZT7c9 -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org