$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json) Hash identifier: ioTVMPh9YdcR/N7oe0+ksW1QLC3M7aTVrXVV61B4XcY= Subject key identifier: A1:B6:04:41:F4:A4:01:EB:4D:E6:0E:5A:79:CA:70:72:93:97:3F:35 Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft Manifest number: 0702 Signing time: Fri 22 Nov 2024 21:27:39 +0000 Manifest this update: Fri 22 Nov 2024 21:27:39 +0000 Manifest next update: Fri 29 Nov 2024 21:27:39 +0000 Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: tkNL7CDgUeKKOBcsxzpdGwjw/xpDNVG4oREVaxXmqiQ=) 2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: 7aqFTC0pvymz2qNJgMgOiSvmjJnWEvFpbf7HqEGVxms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Validity Not Before: Nov 22 21:27:39 2024 GMT Not After : Nov 29 21:27:39 2024 GMT Subject: CN=6740f74b-11e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:20:0b:78:34:cb:c4:39:ad:0a:20:84:13: 47:36:65:03:28:28:11:0b:81:4a:72:dd:80:b0:45: 93:3c:ed:94:82:cd:d8:c7:6a:81:1e:1e:00:61:2d: 58:db:55:55:33:21:5f:61:b0:68:fc:12:93:f9:53: 74:37:40:d4:67:68:9f:e3:9f:04:49:13:95:f2:cf: d9:fa:36:75:be:94:dd:bf:ec:94:00:ef:08:66:d9: 5a:7d:21:0a:25:e9:c7:ae:10:64:26:0d:ae:f8:ad: 05:29:33:b3:56:8c:25:78:09:c1:22:a5:1a:76:b3: f7:20:07:16:07:18:a5:12:17:9d:4c:97:3d:98:ad: 61:85:35:90:ff:51:fb:72:b1:27:b5:41:03:03:36: 0d:6e:b1:40:ec:9e:fe:2d:ef:ce:f6:a6:e2:ad:d6: f6:e7:f5:76:39:1d:51:4a:8d:04:14:90:78:af:31: 2c:1a:aa:83:9b:7d:82:56:3b:a1:ac:ee:08:56:43: d2:b7:79:8d:aa:c1:bc:06:ca:43:82:da:2b:4a:a8: c2:d6:09:60:bb:4d:21:58:66:2a:76:6a:fc:dc:bc: ab:f6:3e:32:f7:99:d7:05:c5:da:b2:c0:2f:9f:21: 4e:c3:5f:2c:9b:ca:43:7c:85:83:8d:6a:78:40:ac: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B6:04:41:F4:A4:01:EB:4D:E6:0E:5A:79:CA:70:72:93:97:3F:35 X509v3 Authority Key Identifier: keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ed:c4:1a:50:16:46:d2:6c:c0:17:2f:f9:51:9e:c4:4e:23: f0:68:6d:12:80:9a:6e:1b:1a:8c:fd:32:ad:64:e0:2f:88:e4: 6e:8e:7d:9f:9c:a4:29:46:42:9b:48:4a:fd:9a:b3:77:c4:34: e6:77:17:63:18:83:3e:ad:70:17:2d:cb:f4:dd:2e:5c:2b:ea: d2:8d:94:46:a3:ca:db:f2:cb:02:67:9b:84:c2:ca:8e:a6:61: 5d:60:72:57:cf:82:44:59:f6:14:09:44:5b:d0:1f:45:e4:31: d6:02:fd:e6:33:68:b2:e5:f1:0f:05:78:af:e5:fd:63:69:6f: ed:ff:68:d4:0e:b2:48:8a:2c:ea:06:9e:43:dd:39:73:6f:df: eb:67:07:03:3f:77:8a:d6:64:83:f0:1c:5b:8b:51:c4:7b:2a: 00:76:aa:fc:fd:fe:82:af:51:b1:3f:02:65:53:99:7b:2a:3b: 2c:22:92:97:ea:2c:c8:a6:f9:28:81:e0:29:ae:d5:c8:ea:cc: cb:60:01:8f:d6:0e:15:85:91:20:8f:50:81:75:55:6c:e9:ee: e2:17:46:af:d7:18:b6:51:26:5b:00:fe:bb:a8:85:26:72:cb: b9:76:a3:9b:3e:74:34:b2:a1:4a:9d:9c:f4:b5:39:53:c5:99: 76:72:dc:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx RkRCNDgzNUIwHhcNMjQxMTIyMjEyNzM5WhcNMjQxMTI5MjEyNzM5WjAYMRYwFAYD VQQDEw02NzQwZjc0Yi0xMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsAgC3g0y8Q5rQoghBNHNmUDKCgRC4FKct2AsEWTPO2Ugs3Yx2qBHh4AYS1Y 21VVMyFfYbBo/BKT+VN0N0DUZ2if458ESROV8s/Z+jZ1vpTdv+yUAO8IZtlafSEK JenHrhBkJg2u+K0FKTOzVowleAnBIqUadrP3IAcWBxilEhedTJc9mK1hhTWQ/1H7 crEntUEDAzYNbrFA7J7+Le/O9qbirdb25/V2OR1RSo0EFJB4rzEsGqqDm32CVjuh rO4IVkPSt3mNqsG8BspDgtorSqjC1glgu00hWGYqdmr83Lyr9j4y95nXBcXassAv nyFOw18sm8pDfIWDjWp4QKzD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG2BEH0 pAHrTeYOWnnKcHKTlz81MB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDU1RS82MkE1RUI2QTFENUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBD TzNIRWJMWnNfaW9mMjBnMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX7cQaUBZG0mzAFy/5UZ7ETiPwaG0SgJpuGxqM/TKtZOAviORujn2f nKQpRkKbSEr9mrN3xDTmdxdjGIM+rXAXLcv03S5cK+rSjZRGo8rb8ssCZ5uEwsqO pmFdYHJXz4JEWfYUCURb0B9F5DHWAv3mM2iy5fEPBXiv5f1jaW/t/2jUDrJIiizq Bp5D3Tlzb9/rZwcDP3eK1mSD8Bxbi1HEeyoAdqr8/f6Cr1GxPwJlU5l7KjssIpKX 6izIpvkogeAprtXI6szLYAGP1g4VhZEgj1CBdVVs6e7iF0av1xi2USZbAP67qIUm csu5dqObPnQ0sqFKnZz0tTlTxZl2ctya -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org