$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json) Hash identifier: l/NukOxfTEKET/hkOy9oJETaRPXPsBUu937/qI933Bs= Subject key identifier: 29:BC:3B:BA:00:F3:B6:75:17:64:FC:84:6A:C6:5E:D3:C1:7D:E5:5B Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft Manifest number: 06A0 Signing time: Sat 18 May 2024 23:16:10 +0000 Manifest this update: Sat 18 May 2024 23:16:10 +0000 Manifest next update: Sat 25 May 2024 23:16:10 +0000 Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: 2ecsxOYvFVmdlZRLDvdMs/jqFr3GdSzNKqP/Ndfnif4=) 2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: l2faCZ2NaRKO9RKpqA1xTTOq0n++1p8P7E337Sewxms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Validity Not Before: May 18 23:16:10 2024 GMT Not After : May 25 23:16:10 2024 GMT Subject: CN=664936ba-3b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:24:4d:9a:31:49:f0:81:bf:2c:9f:36:99: 63:6d:1a:e8:0d:ef:8b:ce:41:7c:00:8c:77:8a:65: de:62:01:66:62:4c:1c:c0:e3:a7:2e:07:ee:13:b2: d9:38:f0:86:27:2e:d7:94:e2:05:32:44:11:b7:7a: 77:81:e1:9e:77:80:b0:80:24:45:4a:c9:3b:4b:eb: 93:04:3b:d6:9e:ae:79:a4:58:ad:ae:1b:8c:41:5e: 33:83:f4:81:2b:ad:5e:98:6e:75:ee:79:82:fe:4e: 57:08:2a:99:50:3f:17:9a:48:65:ec:cb:be:e4:c3: 0f:92:e0:27:b3:ef:9d:e6:19:88:f0:b8:af:2f:1b: 67:28:c3:33:f4:16:a3:23:fc:3d:53:8f:90:a5:0a: 90:9b:ab:3d:55:51:89:3a:03:ac:e9:3b:53:88:36: 19:e2:95:cf:05:e7:20:d3:41:0e:9e:db:76:56:eb: e5:1a:09:e8:0d:de:22:19:92:27:91:2f:ff:62:d6: 2e:90:a0:20:b4:1d:c4:6a:af:3f:01:80:98:8f:64: 40:b7:30:96:25:80:78:c5:5d:e9:dc:38:70:92:cd: 57:7d:4b:5d:67:8d:42:f8:30:fb:38:45:9f:1e:ca: 59:1b:07:12:5a:02:71:1c:90:d2:88:70:2c:66:e0: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:3B:BA:00:F3:B6:75:17:64:FC:84:6A:C6:5E:D3:C1:7D:E5:5B X509v3 Authority Key Identifier: keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d7:8f:f5:fc:13:34:d2:79:96:7c:76:5e:4d:c6:25:3a:5c: 1d:da:6d:93:2c:33:27:57:d4:63:91:ae:45:4e:f0:3a:c3:33: e7:93:e1:2b:0a:f8:55:e6:51:74:65:56:7f:af:25:22:3b:cb: 79:54:20:f5:e2:12:37:84:13:74:97:f8:c9:0c:ae:e3:00:4a: f6:48:48:86:43:31:b8:9f:9e:3c:f7:0f:7b:40:b3:42:0f:76: 4b:30:5e:ce:20:f9:1c:93:ec:6a:59:22:04:49:b1:33:1a:6c: 3f:7e:5b:51:ff:3b:24:fa:b5:3e:c6:2c:1c:b6:60:26:02:8a: 5e:cb:aa:a0:8c:2f:ca:5d:f0:2b:45:1d:79:eb:83:97:82:44: 5d:4a:da:e2:6e:d3:1c:ed:4f:cf:75:7c:c9:1b:52:df:9a:f0: 8e:d3:a3:df:ff:e2:94:3f:1d:67:9f:da:38:77:ed:05:f2:0b: 96:95:01:bd:f2:d0:3c:a9:47:16:c5:b2:f2:04:13:6f:87:5f: 42:02:1a:b4:eb:bb:fe:12:c2:58:db:6c:ad:2e:2d:34:32:f5: 70:6e:53:23:75:96:2d:65:3f:7c:60:15:08:e3:48:70:2b:6c: 0f:f8:3f:0f:f0:62:9e:f8:e0:d8:30:d9:0e:2b:19:fd:aa:9f: fc:bb:b1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx RkRCNDgzNUIwHhcNMjQwNTE4MjMxNjEwWhcNMjQwNTI1MjMxNjEwWjAYMRYwFAYD VQQDEw02NjQ5MzZiYS0zYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjYkTZoxSfCBvyyfNpljbRroDe+LzkF8AIx3imXeYgFmYkwcwOOnLgfuE7LZ OPCGJy7XlOIFMkQRt3p3geGed4CwgCRFSsk7S+uTBDvWnq55pFitrhuMQV4zg/SB K61emG517nmC/k5XCCqZUD8Xmkhl7Mu+5MMPkuAns++d5hmI8LivLxtnKMMz9Baj I/w9U4+QpQqQm6s9VVGJOgOs6TtTiDYZ4pXPBecg00EOntt2VuvlGgnoDd4iGZIn kS//YtYukKAgtB3Eaq8/AYCYj2RAtzCWJYB4xV3p3Dhwks1XfUtdZ41C+DD7OEWf HspZGwcSWgJxHJDSiHAsZuB3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCm8O7oA 87Z1F2T8hGrGXtPBfeVbMB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDU1RS82MkE1RUI2QTFENUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBD TzNIRWJMWnNfaW9mMjBnMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD14/1/BM00nmWfHZeTcYlOlwd2m2TLDMnV9Rjka5FTvA6wzPnk+Er CvhV5lF0ZVZ/ryUiO8t5VCD14hI3hBN0l/jJDK7jAEr2SEiGQzG4n5489w97QLNC D3ZLMF7OIPkck+xqWSIESbEzGmw/fltR/zsk+rU+xiwctmAmAopey6qgjC/KXfAr RR1564OXgkRdStribtMc7U/PdXzJG1LfmvCO06Pf/+KUPx1nn9o4d+0F8guWlQG9 8tA8qUcWxbLyBBNvh19CAhq067v+EsJY22ytLi00MvVwblMjdZYtZT98YBUI40hw K2wP+D8P8GKe+ODYMNkOKxn9qp/8u7E5 -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org