$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: ZamGMkzyHG2Qf/u03qiNIrn63heOnbkq6eaGO/H1IgY= Subject key identifier: F6:73:92:FB:68:1C:14:8A:07:90:2D:87:2D:83:24:E9:D8:54:83:5A Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 96 Signing time: Fri 17 May 2024 07:00:18 +0000 Manifest this update: Fri 17 May 2024 07:00:18 +0000 Manifest next update: Fri 24 May 2024 07:00:18 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: 3xTCnUp8a15FoYyufFDaAS2Fjmx3fg0kExq8dFewFz8=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: NO+YNugcxTXyb9dCZOOdJ51ziCc/jYCa92qXpmRaYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: May 17 07:00:18 2024 GMT Not After : May 24 07:00:18 2024 GMT Subject: CN=66470082-1c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:ea:c2:c1:b3:ba:01:1d:ed:40:2c:dc:d6: 91:6d:31:b8:ca:0c:3b:a3:e0:29:a5:10:5c:2e:29: 54:27:86:52:80:c4:4f:52:fb:ee:67:b8:01:72:ae: 31:0e:49:ba:8b:fe:2a:1a:e0:a2:13:b3:1d:44:03: 5e:a5:c7:3c:2e:ea:28:57:67:19:3a:78:74:71:17: e3:f4:c5:fc:e1:49:86:09:8b:95:21:8b:be:7b:a0: 57:aa:32:ae:42:c4:0f:b5:63:11:12:a7:93:f4:c8: 0b:1d:1e:f7:bf:cc:75:4d:25:2e:a1:e5:83:c0:24: ed:7f:e8:8c:47:06:6c:8a:43:eb:83:ae:8a:01:f4: 9b:4b:78:23:7d:c3:f5:b3:d3:12:86:49:ea:ea:86: 7a:83:6a:19:1b:0c:6e:10:3a:30:08:aa:be:b9:d1: 73:a0:c9:53:6c:25:50:cf:b6:6a:c1:02:4f:82:2e: de:c1:ab:89:e9:6c:80:9a:06:38:38:b5:4f:8d:9a: 81:b1:b1:bc:4e:cb:af:04:ef:3a:57:14:f2:c8:4c: fc:66:48:fb:3d:e9:39:20:c4:36:e3:bc:94:1c:c1: ae:f2:43:b0:36:f9:27:8b:43:ba:49:ba:9b:20:35: b7:ec:80:44:80:31:83:c8:00:a3:98:95:81:8d:78: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:73:92:FB:68:1C:14:8A:07:90:2D:87:2D:83:24:E9:D8:54:83:5A X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:88:7a:e9:cf:31:76:f7:e0:61:aa:2e:9e:ad:a8:24:4a:c2: 5c:a0:41:d1:7b:27:d8:9e:ae:81:76:eb:b6:c9:ab:57:9e:44: bf:08:bb:66:5f:a7:a9:61:aa:6b:34:8a:56:80:4c:85:0f:22: 53:ff:7d:4d:15:8b:e9:7c:aa:01:61:19:24:61:3d:3e:1e:a2: 58:f0:89:ca:5e:68:f8:60:b6:68:c3:d9:41:ca:c2:a0:1a:18: f0:bd:35:20:14:6c:30:e7:50:21:20:33:c0:29:2b:c5:cb:05: e1:11:ae:1f:dd:fb:f2:79:ab:5b:90:83:f1:16:eb:aa:cc:a7: 26:fd:14:d0:76:bd:74:a7:f3:ff:96:bc:e6:c2:99:bc:a1:5c: 15:85:db:08:43:a3:23:ad:08:98:bd:75:c5:19:9f:8e:e2:6e: e4:32:19:e0:76:83:67:67:85:41:3d:63:d1:9f:e1:3f:15:9b: ae:1e:af:42:db:7c:83:1b:ba:d6:9b:25:91:74:a7:c9:e2:d8: f7:3f:d6:21:29:85:71:2a:8b:7a:9d:67:dd:d1:ac:90:ec:0c: e5:f6:8e:08:f9:83:71:67:12:08:d0:17:51:52:ef:57:f7:06: 18:2c:14:c0:28:af:fc:d1:e2:6f:ca:fb:2d:39:d6:e5:b9:01: 07:e3:cd:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjQwNTE3MDcwMDE4WhcNMjQwNTI0MDcwMDE4WjAYMRYwFAYD VQQDEw02NjQ3MDA4Mi0xYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzrqwsGzugEd7UAs3NaRbTG4ygw7o+AppRBcLilUJ4ZSgMRPUvvuZ7gBcq4x Dkm6i/4qGuCiE7MdRANepcc8LuooV2cZOnh0cRfj9MX84UmGCYuVIYu+e6BXqjKu QsQPtWMREqeT9MgLHR73v8x1TSUuoeWDwCTtf+iMRwZsikPrg66KAfSbS3gjfcP1 s9MShknq6oZ6g2oZGwxuEDowCKq+udFzoMlTbCVQz7ZqwQJPgi7ewauJ6WyAmgY4 OLVPjZqBsbG8TsuvBO86VxTyyEz8Zkj7Pek5IMQ247yUHMGu8kOwNvkni0O6Sbqb IDW37IBEgDGDyACjmJWBjXhsxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZzkvto HBSKB5Athy2DJOnYVINaMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaiHrpzzF29+Bhqi6eragkSsJcoEHReyfYnq6Bduu2yatXnkS/CLtm X6epYaprNIpWgEyFDyJT/31NFYvpfKoBYRkkYT0+HqJY8InKXmj4YLZow9lBysKg GhjwvTUgFGww51AhIDPAKSvFywXhEa4f3fvyeatbkIPxFuuqzKcm/RTQdr10p/P/ lrzmwpm8oVwVhdsIQ6MjrQiYvXXFGZ+O4m7kMhngdoNnZ4VBPWPRn+E/FZuuHq9C 23yDG7rWmyWRdKfJ4tj3P9YhKYVxKot6nWfd0ayQ7Azl9o4I+YNxZxII0BdRUu9X 9wYYLBTAKK/80eJvyvstOdbluQEH482c -----END CERTIFICATE-----Generated at Fri May 17 08:13:52 2024 by rpki-client on console-fra.rpki-client.org