$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: QyCC3wtvOe+wEVCQ+mkbA1hT3wgupbnbdjTvG0UoCaM= Subject key identifier: C8:D8:A4:3F:9C:E8:36:B2:23:0E:A0:95:AB:39:05:74:35:EB:81:8E Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 023C Signing time: Fri 03 May 2024 04:04:49 +0000 Manifest this update: Fri 03 May 2024 04:04:49 +0000 Manifest next update: Fri 10 May 2024 04:04:49 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: bhmGcIvrqN94K1AWNAEd0femzB43Yq1NJCJTHESqq14=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: JCxM7ydZhcCYlsGKc6hKKI5rsFQzevSKtrLoG/tLy3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: May 3 04:04:49 2024 GMT Not After : May 10 04:04:49 2024 GMT Subject: CN=66346261-4fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:9f:57:e7:b6:e0:22:41:d2:d4:f8:b5:e5: 17:0f:90:62:ef:c0:ff:c8:3d:57:d6:c6:57:6b:ff: b1:2f:32:23:a3:2f:27:d5:3a:73:d6:1a:75:28:15: fb:e7:d6:5b:f6:33:35:33:10:2b:1f:ec:93:23:56: 9d:f5:a9:1a:32:53:a1:6a:59:79:ad:1f:31:61:ed: c6:9a:1f:69:41:e4:f4:3c:17:cf:8b:2a:1b:66:9a: d7:19:b3:2f:72:21:a2:fd:07:2d:63:ff:46:86:62: 8b:15:2d:20:fa:7f:87:77:ff:5a:f8:77:6a:2b:f9: de:ab:79:16:7d:04:ec:c8:2b:0f:ba:7c:e0:f9:68: 2e:4f:65:32:4e:b9:8e:aa:a4:60:0e:cb:8c:d4:2f: fb:a3:a2:f2:2a:81:3c:91:41:3e:02:df:25:6d:a1: 7e:09:37:04:83:08:78:a8:dc:6c:86:0f:98:ee:2f: 9a:d7:53:06:e0:98:98:2e:30:11:8f:3a:0b:09:77: f5:3c:6b:ff:1e:52:fe:3a:bc:c4:cd:6f:13:eb:0a: 22:4e:12:55:98:84:4e:fe:e4:be:c4:e4:c8:cf:8d: 82:19:cb:0e:4c:ca:26:97:ea:b7:89:1d:4e:29:98: 63:10:4a:4d:c8:93:e7:6d:25:09:18:bc:9d:53:1c: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D8:A4:3F:9C:E8:36:B2:23:0E:A0:95:AB:39:05:74:35:EB:81:8E X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:33:93:0e:d5:ce:2d:9d:83:14:fa:6e:24:24:97:ac:45:31: 16:79:a4:86:ff:00:74:c1:88:9b:bc:6f:85:9d:06:3b:22:25: 65:2e:70:db:76:9b:0c:7f:22:c2:d7:95:5c:cd:37:86:9a:75: bd:b7:2c:4c:c9:8f:79:32:b3:a6:3c:7c:42:3d:ad:79:be:74: 50:17:09:e6:e4:6f:90:60:06:57:c6:e2:95:78:d7:85:fd:d2: 18:cd:47:df:ea:2e:de:1f:43:d1:59:55:f1:b9:4a:04:d0:c1: 70:0d:8a:78:29:24:00:3c:b3:2c:37:ac:52:0d:7e:43:e5:24: 4f:15:9e:9d:9c:a0:f3:91:15:c9:76:54:21:52:6e:ec:b0:88: 79:e2:de:47:a3:39:69:4f:b7:13:ed:1e:f2:34:c8:f2:03:de: 2f:4a:63:3a:9d:01:66:a8:57:d0:41:b1:ff:9a:1b:f1:f0:86: cb:e6:17:c2:8c:3e:fe:50:2c:7c:51:4d:82:f0:ff:2f:b4:b1: b0:ab:b6:90:6c:f5:ad:93:08:ae:22:0d:fd:3c:fd:5f:6a:e8: 1e:aa:1a:ce:d6:56:76:d5:1a:37:eb:fa:c4:4d:50:23:88:b0: 45:86:9b:44:1a:14:c7:85:6f:38:86:f3:08:56:99:c8:de:d0: b9:ca:76:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjQwNTAzMDQwNDQ5WhcNMjQwNTEwMDQwNDQ5WjAYMRYwFAYD VQQDEw02NjM0NjI2MS00ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8ufV+e24CJB0tT4teUXD5Bi78D/yD1X1sZXa/+xLzIjoy8n1Tpz1hp1KBX7 59Zb9jM1MxArH+yTI1ad9akaMlOhall5rR8xYe3Gmh9pQeT0PBfPiyobZprXGbMv ciGi/QctY/9GhmKLFS0g+n+Hd/9a+HdqK/neq3kWfQTsyCsPunzg+WguT2UyTrmO qqRgDsuM1C/7o6LyKoE8kUE+At8lbaF+CTcEgwh4qNxshg+Y7i+a11MG4JiYLjAR jzoLCXf1PGv/HlL+OrzEzW8T6woiThJVmIRO/uS+xOTIz42CGcsOTMoml+q3iR1O KZhjEEpNyJPnbSUJGLydUxyqcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjYpD+c 6DayIw6glas5BXQ164GOMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwM5MO1c4tnYMU+m4kJJesRTEWeaSG/wB0wYibvG+FnQY7IiVlLnDb dpsMfyLC15VczTeGmnW9tyxMyY95MrOmPHxCPa15vnRQFwnm5G+QYAZXxuKVeNeF /dIYzUff6i7eH0PRWVXxuUoE0MFwDYp4KSQAPLMsN6xSDX5D5SRPFZ6dnKDzkRXJ dlQhUm7ssIh54t5HozlpT7cT7R7yNMjyA94vSmM6nQFmqFfQQbH/mhvx8IbL5hfC jD7+UCx8UU2C8P8vtLGwq7aQbPWtkwiuIg39PP1faugeqhrO1lZ21Ro36/rETVAj iLBFhptEGhTHhW84hvMIVpnI3tC5ynYm -----END CERTIFICATE-----Generated at Fri May 3 05:32:35 2024 by rpki-client on console-ams.rpki-client.org