$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: 8fyjWROqGxasqanLu5gFApn5KggUbIfcNrMvYGYVIAo= Subject key identifier: CF:72:F0:4C:23:BE:18:89:93:B1:87:E5:29:38:26:BD:87:FE:43:24 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 91 Signing time: Fri 17 May 2024 07:06:09 +0000 Manifest this update: Fri 17 May 2024 07:06:08 +0000 Manifest next update: Fri 24 May 2024 07:06:08 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: hBVHIVemjm+uTkuV07aj8TDy/fFl8V7V9e1giCLZtQo=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: Jz4wR5DDj/wTkjS36fKHeBrcXdk77eXCGSsg3VfLRzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: May 17 07:06:08 2024 GMT Not After : May 24 07:06:08 2024 GMT Subject: CN=664701e1-446f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:04:15:2d:aa:6b:b5:0e:e0:3d:a1:0a:d0: da:2d:8a:7f:80:13:05:25:aa:35:22:cc:d9:55:1d: 15:7c:62:2d:ac:bc:fc:d1:3f:dd:52:6c:5f:8f:0e: 04:6c:dc:f9:d6:58:06:c9:4c:ab:81:f8:da:c9:88: d3:f5:6f:91:02:4b:e3:de:92:c5:98:c1:c5:05:1d: 45:09:b7:5d:81:5c:4a:3c:52:87:8a:b0:31:39:63: e2:a5:7f:b0:37:4f:b3:b3:39:1b:bd:86:ee:fd:be: 01:ce:70:3e:6e:52:ef:bb:bf:32:55:36:80:05:76: 1f:b2:22:23:bc:eb:d2:a2:e2:65:20:bc:35:93:7c: 46:ab:67:bf:c5:82:73:55:fc:f1:bb:8c:ee:16:ba: b2:f5:58:25:74:3a:17:57:3a:7e:0a:77:29:5b:3c: 60:66:46:4b:22:f3:93:68:61:94:eb:57:cf:34:9c: 0b:d7:61:70:bf:e1:6c:8e:e9:aa:44:06:a1:bc:99: cf:67:03:20:c2:98:ec:d8:2b:d6:95:d2:0d:bf:75: 1a:61:f5:76:70:c2:59:ba:dd:7e:de:f7:97:cd:fe: c9:91:08:0c:61:0e:f3:28:b5:27:d0:51:45:8f:31: 72:43:b1:89:14:d6:9e:21:af:07:c6:c5:b9:1f:43: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:72:F0:4C:23:BE:18:89:93:B1:87:E5:29:38:26:BD:87:FE:43:24 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fe:32:1c:1f:ac:fb:54:e3:40:7f:a2:10:f4:c2:45:c8:1e: f5:f0:7b:9b:7b:68:e7:1a:5b:f5:ab:bf:1a:8c:96:a8:66:c9: cf:51:a9:15:df:c3:30:bb:2e:fa:29:d4:32:d2:85:61:c4:4d: 49:fb:54:aa:25:03:16:d4:b4:03:e2:bc:2c:43:7e:ea:12:b9: 11:21:a8:4f:4b:bf:72:a0:15:af:67:ca:c3:71:64:24:f8:3f: 97:ed:4c:a5:b3:6a:86:0f:d7:a7:da:dc:66:4d:a4:e4:c3:dd: a9:22:be:e2:5f:d1:72:ec:73:ca:45:54:10:e7:c9:ef:c4:8d: 6d:57:32:2b:67:f6:57:e5:ff:7d:47:f7:d1:ba:84:ca:5a:5a: 62:51:4c:b4:f8:a7:5b:b0:de:c5:c8:9f:93:a7:6a:b3:2c:98: 6a:ec:f6:d7:18:ee:74:e7:cc:b3:d9:a3:ae:5d:d5:74:9c:35: d5:6e:3b:e3:29:fc:d7:51:28:61:7c:20:d3:95:e2:b9:c3:bf: 03:d9:d7:fa:89:d6:5b:0a:14:7f:3f:71:6f:7a:63:ce:93:cf: 80:60:b2:b0:7f:74:90:14:6c:2f:75:3a:1e:a0:1b:2e:7d:85: df:df:9a:bd:e8:20:e2:45:a3:2a:9e:70:a5:cc:af:ca:93:0c: 02:29:13:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjQwNTE3MDcwNjA4WhcNMjQwNTI0MDcwNjA4WjAYMRYwFAYD VQQDEw02NjQ3MDFlMS00NDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1EEFS2qa7UO4D2hCtDaLYp/gBMFJao1IszZVR0VfGItrLz80T/dUmxfjw4E bNz51lgGyUyrgfjayYjT9W+RAkvj3pLFmMHFBR1FCbddgVxKPFKHirAxOWPipX+w N0+zszkbvYbu/b4BznA+blLvu78yVTaABXYfsiIjvOvSouJlILw1k3xGq2e/xYJz Vfzxu4zuFrqy9VgldDoXVzp+CncpWzxgZkZLIvOTaGGU61fPNJwL12Fwv+Fsjumq RAahvJnPZwMgwpjs2CvWldINv3UaYfV2cMJZut1+3veXzf7JkQgMYQ7zKLUn0FFF jzFyQ7GJFNaeIa8HxsW5H0PNIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9y8Ewj vhiJk7GH5Sk4Jr2H/kMkMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl/jIcH6z7VONAf6IQ9MJFyB718Hube2jnGlv1q78ajJaoZsnPUakV 38Mwuy76KdQy0oVhxE1J+1SqJQMW1LQD4rwsQ37qErkRIahPS79yoBWvZ8rDcWQk +D+X7Uyls2qGD9en2txmTaTkw92pIr7iX9Fy7HPKRVQQ58nvxI1tVzIrZ/ZX5f99 R/fRuoTKWlpiUUy0+KdbsN7FyJ+Tp2qzLJhq7PbXGO5058yz2aOuXdV0nDXVbjvj KfzXUShhfCDTleK5w78D2df6idZbChR/P3FvemPOk8+AYLKwf3SQFGwvdToeoBsu fYXf35q96CDiRaMqnnClzK/KkwwCKRM1 -----END CERTIFICATE-----Generated at Fri May 17 08:13:52 2024 by rpki-client on console-fra.rpki-client.org