$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: Od1LLHBM8nWh8KDUOo0T1QwgY6k0/Wlwc7a8HtFyJiA= Subject key identifier: 08:75:11:9D:9A:30:DD:0C:CA:DE:76:1D:C5:C9:73:9E:87:29:D1:6B Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 06BF Signing time: Sat 18 May 2024 23:08:52 +0000 Manifest this update: Sat 18 May 2024 23:08:52 +0000 Manifest next update: Sat 25 May 2024 23:08:52 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: cYNtKjsSDjqZxB1+J7PcZ+ZeinRXM51M4yD56+bVpqM=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: uCYVydwlEOxsSRnMvhl5LmQaFeZ5CLA5JUdzvNDerFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: May 18 23:08:52 2024 GMT Not After : May 25 23:08:52 2024 GMT Subject: CN=66493504-9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:a0:76:90:35:06:ca:03:2d:75:67:74:29: 73:01:8a:4c:d9:6c:d7:0b:8d:fb:29:17:53:04:02: 96:54:33:bc:79:21:eb:e4:85:94:83:90:fa:ba:d3: 7e:c2:5e:23:4d:4c:ba:97:d2:dc:48:3a:4d:62:be: f4:4d:51:9b:6e:08:50:58:9a:46:75:c8:1f:8b:94: 03:19:46:71:c3:34:0c:22:d4:96:bc:65:45:76:4e: 93:a2:e8:74:df:29:62:b5:1f:d9:40:17:44:1a:c5: 1a:6e:4e:38:a0:a0:89:89:16:89:84:ba:6c:e2:71: 86:17:ec:cb:24:7d:4d:1f:b2:63:e8:45:1c:96:db: 0a:e8:87:d2:af:1e:48:fa:a3:73:8b:75:1f:e3:d5: 8d:31:7a:96:6b:58:d2:25:ab:3b:c6:e2:d4:fe:ba: 82:70:5f:63:f2:4b:6e:89:8d:c4:d3:c1:5b:06:e1: 7c:f4:db:69:a6:e2:75:59:38:36:ed:ff:c7:84:1d: 40:b5:41:62:5d:fe:96:db:bc:86:e2:6c:73:23:01: 75:cf:1d:a7:d7:af:9c:7b:d9:06:45:e4:50:e7:a4: 4d:94:de:ce:59:8a:54:59:27:c1:8f:d0:d9:88:66: 48:6e:c9:05:fc:11:24:9b:fb:17:21:cb:ae:22:9a: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:75:11:9D:9A:30:DD:0C:CA:DE:76:1D:C5:C9:73:9E:87:29:D1:6B X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:63:2a:f7:5a:50:50:5c:26:66:2b:32:f4:51:44:5f:8a:2d: ff:58:e4:16:57:70:a2:de:79:0a:5a:4e:45:15:0d:1c:37:3e: d4:ad:a3:5f:8b:99:e4:02:0d:6b:a5:be:65:60:39:80:fa:43: 86:86:d3:ba:e8:30:bd:26:8b:40:8a:d4:d4:f9:9e:1a:23:09: 4e:f1:34:7c:d4:dd:18:0f:60:32:24:86:23:81:21:37:0c:d4: e6:1c:0a:22:8a:46:82:6b:d4:71:c3:5b:13:47:e3:9f:eb:22: b8:52:76:dd:59:f3:1c:79:4b:3d:57:71:20:e7:81:a6:07:e9: 99:e3:a2:6d:82:a1:98:5f:8f:ad:4b:d8:32:20:8a:9a:d8:97: 58:5d:81:4e:d3:af:20:32:14:e6:4a:dc:f0:32:e7:1f:77:ca: bd:e4:b7:52:98:78:d7:16:1a:2f:a4:cc:96:55:44:39:f8:cd: d5:a2:04:34:1f:28:39:3c:b2:ac:d6:c8:71:cd:e0:42:ca:9b: 65:d6:72:ce:51:ff:61:08:0b:8e:a8:26:95:48:7b:16:6a:a5: 32:1b:8c:14:31:56:81:39:bc:ea:49:5a:92:db:fc:f1:25:7d: 83:50:3f:b3:55:6a:4a:ff:31:dc:78:fd:3b:4c:83:24:7b:1e: f6:66:0e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjQwNTE4MjMwODUyWhcNMjQwNTI1MjMwODUyWjAYMRYwFAYD VQQDEw02NjQ5MzUwNC05MDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNSgdpA1BsoDLXVndClzAYpM2WzXC437KRdTBAKWVDO8eSHr5IWUg5D6utN+ wl4jTUy6l9LcSDpNYr70TVGbbghQWJpGdcgfi5QDGUZxwzQMItSWvGVFdk6Touh0 3ylitR/ZQBdEGsUabk44oKCJiRaJhLps4nGGF+zLJH1NH7Jj6EUcltsK6IfSrx5I +qNzi3Uf49WNMXqWa1jSJas7xuLU/rqCcF9j8ktuiY3E08FbBuF89NtppuJ1WTg2 7f/HhB1AtUFiXf6W27yG4mxzIwF1zx2n16+ce9kGReRQ56RNlN7OWYpUWSfBj9DZ iGZIbskF/BEkm/sXIcuuIprrAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh1EZ2a MN0Myt52HcXJc56HKdFrMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoYyr3WlBQXCZmKzL0UURfii3/WOQWV3Ci3nkKWk5FFQ0cNz7UraNf i5nkAg1rpb5lYDmA+kOGhtO66DC9JotAitTU+Z4aIwlO8TR81N0YD2AyJIYjgSE3 DNTmHAoiikaCa9Rxw1sTR+Of6yK4UnbdWfMceUs9V3Eg54GmB+mZ46JtgqGYX4+t S9gyIIqa2JdYXYFO068gMhTmStzwMucfd8q95LdSmHjXFhovpMyWVUQ5+M3VogQ0 Hyg5PLKs1shxzeBCyptl1nLOUf9hCAuOqCaVSHsWaqUyG4wUMVaBObzqSVqS2/zx JX2DUD+zVWpK/zHceP07TIMkex72Zg5d -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org