$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: ZQG7uqQzhDDaM6Hm7EBSyvAH0fESYQGUkg4dSJKReBU= Subject key identifier: 00:10:9C:20:48:AF:F0:30:27:5A:12:B7:3B:CA:5A:F5:D3:47:22:BA Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 011E Signing time: Fri 31 May 2024 05:58:49 +0000 Manifest this update: Fri 31 May 2024 05:58:48 +0000 Manifest next update: Fri 07 Jun 2024 05:58:48 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: aslU84eGqRq5zABo0C/2CCksJESL/YoNA2fVRGu4HQg=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: ++HbJPkCOwI7YEDmwMoGF4+5fvdyuTeBvdjkZ/did0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: May 31 05:58:48 2024 GMT Not After : Jun 7 05:58:48 2024 GMT Subject: CN=66596719-c888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:68:ee:96:c3:d9:6d:7e:69:f6:c6:03:c8: 33:da:04:47:e9:ac:f3:17:93:23:09:b6:54:4c:05: 61:03:58:57:4d:09:58:4a:65:03:55:5c:8c:5c:d2: 14:65:5d:fa:1c:a8:ea:3a:27:fa:63:a7:bb:c6:1f: ab:b0:1f:f0:42:f1:c8:69:7d:d6:e8:a9:49:bd:b8: 4d:48:d8:c7:25:30:a3:86:9e:72:20:29:0e:d7:e0: 1e:35:5c:d1:23:86:10:b4:7e:07:b0:7e:ba:a9:aa: f2:ad:84:2a:ad:97:79:f4:08:02:8a:13:bf:6a:09: 1c:ea:9b:ed:ff:79:95:0d:7d:59:f5:de:68:b6:01: 2c:a7:bf:2d:cd:fa:75:fc:e7:41:c2:04:5b:a1:b1: 71:03:df:41:ef:2e:64:09:d9:df:fa:e9:fa:26:29: 02:ef:d5:fb:da:2f:cf:c6:d7:74:cd:b3:38:46:3b: 24:40:92:3f:6d:8f:e7:33:0d:ce:1c:47:7b:f8:3c: 85:be:0e:67:11:c2:0c:d1:00:2c:14:34:f8:d7:07: 1d:f9:fe:7a:f1:a5:9a:73:8c:de:9c:46:5c:7e:a6: 1d:b7:e6:ad:06:4b:4a:cf:86:e2:ad:57:2f:34:1c: d0:58:37:53:93:40:78:7e:cb:0f:24:e9:ef:be:39: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:9C:20:48:AF:F0:30:27:5A:12:B7:3B:CA:5A:F5:D3:47:22:BA X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7f:b7:3f:10:43:fe:04:d2:ac:26:ca:3c:b1:10:d6:8f:21: 52:61:50:8f:68:ea:70:48:a1:59:5e:9e:cf:86:c7:a0:ec:64: c3:c7:84:f9:cc:1a:c2:13:b5:8d:f6:9b:7b:62:4a:31:19:02: 19:fc:ad:6c:e2:78:42:1c:60:bf:34:c5:8d:0b:1b:ec:df:68: c3:81:eb:56:26:a4:34:e0:c7:71:83:89:aa:03:3e:af:b6:c6: 9f:bc:11:2c:ed:1e:04:b4:50:1a:ac:d3:5d:eb:bf:ca:37:2f: a7:9c:5e:2e:ed:f7:db:cb:b8:fe:06:48:ff:d6:1e:73:75:24: 98:55:84:5f:97:4a:ed:f9:f9:3e:4f:77:6c:b4:15:d7:60:4f: 75:ed:30:3c:9c:73:97:b6:3e:61:1e:46:97:9f:97:89:2b:60: 5b:57:53:eb:f0:c1:05:fd:23:dd:72:41:61:21:2c:4a:29:5a: 69:8f:0a:0f:f5:cb:3b:1f:c5:bb:5b:24:a8:0f:1b:f4:81:eb: 29:73:05:8d:2f:62:b1:eb:15:70:39:06:3e:0e:70:3c:10:63: e0:d8:84:0e:99:5b:e9:8c:39:2a:68:d2:7a:56:04:ee:e9:a4: d0:db:03:43:df:9e:7a:15:87:bb:85:9d:c7:6b:57:e6:be:89: 55:75:9b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjQwNTMxMDU1ODQ4WhcNMjQwNjA3MDU1ODQ4WjAYMRYwFAYD VQQDEw02NjU5NjcxOS1jODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUFo7pbD2W1+afbGA8gz2gRH6azzF5MjCbZUTAVhA1hXTQlYSmUDVVyMXNIU ZV36HKjqOif6Y6e7xh+rsB/wQvHIaX3W6KlJvbhNSNjHJTCjhp5yICkO1+AeNVzR I4YQtH4HsH66qaryrYQqrZd59AgCihO/agkc6pvt/3mVDX1Z9d5otgEsp78tzfp1 /OdBwgRbobFxA99B7y5kCdnf+un6JikC79X72i/Pxtd0zbM4RjskQJI/bY/nMw3O HEd7+DyFvg5nEcIM0QAsFDT41wcd+f568aWac4zenEZcfqYdt+atBktKz4birVcv NBzQWDdTk0B4fssPJOnvvjlWZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAQnCBI r/AwJ1oStzvKWvXTRyK6MB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZf7c/EEP+BNKsJso8sRDWjyFSYVCPaOpwSKFZXp7Phseg7GTDx4T5 zBrCE7WN9pt7YkoxGQIZ/K1s4nhCHGC/NMWNCxvs32jDgetWJqQ04Mdxg4mqAz6v tsafvBEs7R4EtFAarNNd67/KNy+nnF4u7ffby7j+Bkj/1h5zdSSYVYRfl0rt+fk+ T3dstBXXYE917TA8nHOXtj5hHkaXn5eJK2BbV1Pr8MEF/SPdckFhISxKKVppjwoP 9cs7H8W7WySoDxv0gespcwWNL2Kx6xVwOQY+DnA8EGPg2IQOmVvpjDkqaNJ6VgTu 6aTQ2wND3556FYe7hZ3Ha1fmvolVdZuz -----END CERTIFICATE-----Generated at Fri May 31 06:49:02 2024 by rpki-client on console-ams.rpki-client.org