$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: Jm6PM1Kb9pbEW5BcpN3TboKgb3OuCld01wftXxR6HFI= Subject key identifier: 0F:1C:AF:85:5B:F4:32:FD:F8:F6:F7:75:05:CD:77:97:E2:43:47:A0 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 06CB Signing time: Sat 18 May 2024 22:59:14 +0000 Manifest this update: Sat 18 May 2024 22:59:14 +0000 Manifest next update: Sat 25 May 2024 22:59:14 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: MbfDBpU/C0uj+WXz3g2TOC9Chl+t6UpA6kgW2uGsvE4=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: 8AJil+yJjIkRRtJKv7Y1HVAMUDavi/RkdnZw5+SOw9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: May 18 22:59:14 2024 GMT Not After : May 25 22:59:14 2024 GMT Subject: CN=664932c2-fbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:81:21:e3:26:f4:a8:e3:7d:c3:61:1a:57: b2:15:59:d5:26:bc:e4:95:58:6d:8a:22:f5:8e:34: 71:a2:dd:8c:47:f9:73:a4:44:cf:e5:59:f0:bb:80: e0:5b:30:c1:57:1b:9f:cc:e0:74:33:b2:3e:42:69: 83:4f:9d:db:33:8d:c5:ef:a3:0a:cd:a0:61:60:c8: 81:c0:0f:61:42:ba:f0:f9:03:ae:a7:65:2a:81:e8: 6b:56:6c:33:f8:79:5b:2c:d4:f9:89:1a:12:56:4c: 3a:d9:a5:03:af:31:29:ed:c0:05:4e:43:69:17:93: 0c:c4:3b:d3:c1:48:2a:11:85:ce:7d:44:32:00:a3: cb:c4:ff:58:11:37:80:52:9c:4f:8e:cf:39:48:43: d2:95:8c:f0:4b:d5:b6:c1:f0:fd:e0:78:43:77:fc: 7d:02:a2:3d:5a:b1:51:20:9f:17:c4:66:09:e1:e4: a1:7b:cd:72:6d:ea:2c:8b:3c:1a:0b:b4:6d:44:7f: 87:80:5a:47:f6:1f:0d:0f:7d:35:9f:d6:d5:0c:55: 6a:99:9a:e4:e2:c6:b7:6a:c3:21:c8:c4:9d:4a:63: 9c:23:90:20:7c:4f:7d:e5:11:74:e0:79:b0:5e:09: e5:e8:01:86:9d:72:72:7c:eb:b3:49:62:84:3f:f5: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1C:AF:85:5B:F4:32:FD:F8:F6:F7:75:05:CD:77:97:E2:43:47:A0 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:57:0c:71:a9:b5:c2:e5:19:86:dd:c5:04:56:5b:1f:b6:c4: 37:c1:19:c6:84:19:df:d3:25:9b:de:da:7d:03:24:47:12:1e: 0b:73:e1:93:86:de:de:36:5e:cb:fd:f7:e1:16:b5:53:a8:5d: f8:86:0d:9f:17:15:cf:d3:b2:61:35:94:0d:19:b2:79:8f:2a: ac:f2:50:4b:48:84:b4:b3:a0:ef:0e:67:ee:a9:ef:0d:b6:f1: d2:ba:61:d3:ea:ca:09:a6:cd:05:48:fd:f7:e1:db:aa:8f:2a: 8e:4d:b7:68:47:5f:35:1b:6c:36:e3:60:b6:1f:b2:7e:e8:b3: 47:83:f0:1b:b3:34:63:02:32:2c:40:18:39:ac:5d:31:cd:db: 78:e6:9b:6e:67:ba:2e:6c:2e:c6:68:e8:b8:00:0d:74:df:e2: 1b:9a:e4:f0:90:a4:57:4a:70:9b:6b:7e:43:5c:3f:07:8b:2d: 78:5f:4a:07:a8:f4:d3:b1:e7:48:44:b7:42:00:3e:51:00:10: 83:65:7e:70:13:19:a3:da:73:93:3e:ec:f0:9a:30:e0:65:26: 79:72:0f:69:5c:7b:7e:cc:61:80:be:93:b0:eb:f8:31:90:5c: d7:1f:37:c5:df:aa:4e:d9:29:a5:0d:1a:a6:ad:9c:f0:fd:14: b5:3d:40:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjQwNTE4MjI1OTE0WhcNMjQwNTI1MjI1OTE0WjAYMRYwFAYD VQQDEw02NjQ5MzJjMi1mYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxyBIeMm9KjjfcNhGleyFVnVJrzklVhtiiL1jjRxot2MR/lzpETP5Vnwu4Dg WzDBVxufzOB0M7I+QmmDT53bM43F76MKzaBhYMiBwA9hQrrw+QOup2UqgehrVmwz +HlbLNT5iRoSVkw62aUDrzEp7cAFTkNpF5MMxDvTwUgqEYXOfUQyAKPLxP9YETeA UpxPjs85SEPSlYzwS9W2wfD94HhDd/x9AqI9WrFRIJ8XxGYJ4eShe81ybeosizwa C7RtRH+HgFpH9h8ND301n9bVDFVqmZrk4sa3asMhyMSdSmOcI5AgfE995RF04Hmw Xgnl6AGGnXJyfOuzSWKEP/Wn7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8cr4Vb 9DL9+Pb3dQXNd5fiQ0egMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKVwxxqbXC5RmG3cUEVlsftsQ3wRnGhBnf0yWb3tp9AyRHEh4Lc+GT ht7eNl7L/ffhFrVTqF34hg2fFxXP07JhNZQNGbJ5jyqs8lBLSIS0s6DvDmfuqe8N tvHSumHT6soJps0FSP334duqjyqOTbdoR181G2w242C2H7J+6LNHg/AbszRjAjIs QBg5rF0xzdt45ptuZ7oubC7GaOi4AA103+IbmuTwkKRXSnCba35DXD8Hiy14X0oH qPTTsedIRLdCAD5RABCDZX5wExmj2nOTPuzwmjDgZSZ5cg9pXHt+zGGAvpOw6/gx kFzXHzfF36pO2SmlDRqmrZzw/RS1PUA3 -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org