$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json) Hash identifier: sUhuy3Fu6xuJw6SRxMJLk47FyB3z0S02X5f/wWqjXFQ= Subject key identifier: 1A:FF:07:A5:F0:E8:BC:A0:AF:E2:68:25:40:9E:E3:0D:0F:CF:3F:3F Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Certificate serial: 3199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft Manifest number: 3199 Signing time: Sat 18 May 2024 15:39:41 +0000 Manifest this update: Sat 18 May 2024 15:39:41 +0000 Manifest next update: Sat 25 May 2024 15:39:41 +0000 Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: C1wxJbtMmCPVj3gIBoqfnP2xOLN+7uwXLuGUsQ9+yH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12697 (0x3199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Validity Not Before: May 18 15:39:41 2024 GMT Not After : May 25 15:39:41 2024 GMT Subject: CN=6648cbbd-6fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:e9:01:91:68:e8:7b:df:a7:d7:81:56:76: d7:07:d2:6a:e6:e2:ca:45:66:64:ea:9f:76:57:4b: f2:0f:8a:67:5c:76:ca:f3:f4:6d:b0:60:a2:1e:23: 9f:66:40:db:c4:ed:e2:61:04:73:7a:28:2f:db:5d: 87:d9:98:09:a0:99:b1:f3:0a:53:1e:43:f2:73:dc: 7b:08:76:cb:0c:46:6a:c6:38:e9:e4:6c:a7:01:d2: 48:28:ee:27:fb:6d:d0:f9:cd:03:ba:ec:16:a6:be: ca:a4:51:25:0b:34:fe:87:0f:57:fb:70:c6:f4:b9: 00:ca:28:91:45:58:a4:6d:59:84:17:72:7d:51:bd: 1b:cd:69:b9:66:fc:23:e6:1c:07:94:6c:af:56:76: 47:d0:27:8c:7a:08:6c:9b:50:e9:c1:b9:e4:70:48: c4:81:93:23:f6:d7:3f:87:74:d7:49:84:ec:a7:af: a5:11:e3:37:b3:1d:43:e9:4c:c1:34:20:a9:e8:0b: 4b:47:91:36:51:51:bc:0f:a8:0a:b5:ec:5f:de:39: 5f:16:2f:a5:4f:20:3a:02:f7:7d:ba:77:a6:06:a7: af:e2:19:9d:83:72:94:e3:fc:ea:e7:66:87:7b:64: 96:b5:51:fa:f8:d0:95:3d:d3:e6:5e:c0:10:68:d0: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FF:07:A5:F0:E8:BC:A0:AF:E2:68:25:40:9E:E3:0D:0F:CF:3F:3F X509v3 Authority Key Identifier: keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:18:45:47:05:32:a4:82:0d:40:15:46:93:69:1f:9f:8f:48: 63:0b:bf:c9:e2:21:ba:0f:d7:9e:6a:60:af:7b:42:5f:4d:7d: f9:d7:f1:71:d0:61:d2:bb:20:ee:9b:69:df:9b:2f:5d:f8:35: 98:94:3c:02:19:59:5d:9c:21:3c:66:ab:6c:b2:68:3d:7f:74: 23:31:b4:ee:ff:8d:30:e0:f2:41:63:2c:ad:51:cf:f0:18:4a: af:06:62:30:0e:cb:0f:52:af:a2:e5:8f:3d:ce:7d:99:57:16: 0a:15:00:e1:e3:e7:e5:ac:b5:04:2e:21:77:43:7b:b7:4a:40: 85:15:73:2c:ab:b0:e8:b0:da:d2:42:0c:bd:de:32:da:17:b5: 8b:83:18:59:70:4e:ab:28:d4:7d:26:ef:03:27:80:84:d6:c6: d6:24:c8:e4:69:09:15:88:32:7f:b9:86:a1:ac:0f:c2:fc:b4: 03:35:73:7e:5d:84:b1:3b:42:d4:08:a9:d2:ab:71:a8:45:54: a5:64:c6:62:28:0d:4f:8d:22:0a:00:34:3a:f7:de:4e:b8:5a: 9d:d5:a7:91:2c:d4:b6:ec:76:f3:0b:9b:ae:1f:7e:82:d4:eb: fa:d0:90:4c:5f:16:eb:1c:d7:44:5a:41:ae:c0:d2:15:b7:8a: 4b:d0:d5:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzNEYxMTAvBgNVBAUTKEQ2NUU3RDEwNkM1NzFCNDJFQjZDRTJGODg4NzJERTdB QkNCQUZCQjgwHhcNMjQwNTE4MTUzOTQxWhcNMjQwNTI1MTUzOTQxWjAYMRYwFAYD VQQDEw02NjQ4Y2JiZC02ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9PpAZFo6Hvfp9eBVnbXB9Jq5uLKRWZk6p92V0vyD4pnXHbK8/RtsGCiHiOf ZkDbxO3iYQRzeigv212H2ZgJoJmx8wpTHkPyc9x7CHbLDEZqxjjp5GynAdJIKO4n +23Q+c0DuuwWpr7KpFElCzT+hw9X+3DG9LkAyiiRRVikbVmEF3J9Ub0bzWm5Zvwj 5hwHlGyvVnZH0CeMeghsm1DpwbnkcEjEgZMj9tc/h3TXSYTsp6+lEeM3sx1D6UzB NCCp6AtLR5E2UVG8D6gKtexf3jlfFi+lTyA6Avd9unemBqev4hmdg3KU4/zq52aH e2SWtVH6+NCVPdPmXsAQaNA/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr/B6Xw 6Lygr+JoJUCe4w0Pzz8/MB8GA1UdIwQYMBaAFNZefRBsVxtC62zi+Ihy3nq8uvu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzM0Ri8zNUZCRjVENDhB MDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcwTHJiT0w0aUhMZWVyeTYt N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFsNTlFR3hYRzBMcmJPTDRpSExlZXJ5Ni03Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzM0Ri8zNUZCRjVENDhBMDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcw THJiT0w0aUhMZWVyeTYtN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVGEVHBTKkgg1AFUaTaR+fj0hjC7/J4iG6D9eeamCve0JfTX351/Fx 0GHSuyDum2nfmy9d+DWYlDwCGVldnCE8Zqtssmg9f3QjMbTu/40w4PJBYyytUc/w GEqvBmIwDssPUq+i5Y89zn2ZVxYKFQDh4+flrLUELiF3Q3u3SkCFFXMsq7DosNrS Qgy93jLaF7WLgxhZcE6rKNR9Ju8DJ4CE1sbWJMjkaQkViDJ/uYahrA/C/LQDNXN+ XYSxO0LUCKnSq3GoRVSlZMZiKA1PjSIKADQ6995OuFqd1aeRLNS27HbzC5uuH36C 1Ov60JBMXxbrHNdEWkGuwNIVt4pL0NVx -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org