$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: CredpqRoQVTQidnDBu0YEWMCpcmP0vEAyrYvHDInwZw= Subject key identifier: 8C:CF:84:A0:97:15:CE:0F:E6:9E:8B:03:08:9B:21:7C:8A:90:6C:00 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 06BA Signing time: Mon 06 May 2024 23:13:13 +0000 Manifest this update: Mon 06 May 2024 23:13:12 +0000 Manifest next update: Mon 13 May 2024 23:13:12 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: pi+wGKeUp68G+WpLO2Ek/DeNvNpeQ0mBASNUUcpBRD8=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: uCYVydwlEOxsSRnMvhl5LmQaFeZ5CLA5JUdzvNDerFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: May 6 23:13:12 2024 GMT Not After : May 13 23:13:12 2024 GMT Subject: CN=66396409-02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:41:12:2c:62:3c:17:9c:a1:e7:3b:11:6b: 84:61:9a:5e:f3:98:ba:c2:8c:53:ed:d1:11:d7:c9: 2c:00:30:06:3b:1f:85:92:a8:67:e9:2a:0d:23:57: 63:76:8d:4e:31:8e:08:59:d8:7f:77:5e:8c:17:a3: 43:e4:3a:05:36:70:09:a4:61:96:f0:35:8d:13:37: 61:bb:f2:5a:e9:c3:9b:d4:a7:84:fe:de:32:4c:d0: 2a:56:53:75:e3:76:32:95:a3:06:81:24:6d:e5:4e: 3c:2b:a5:9a:3c:86:e9:11:be:06:a6:d5:a3:97:46: dc:81:55:19:d6:18:da:dd:f5:45:75:cc:59:d2:fb: 04:b5:a3:af:79:29:bd:05:f1:08:8e:35:24:35:f0: 5c:06:82:81:46:ca:b1:6c:e7:d0:8c:9d:67:80:c7: 18:15:e5:30:20:72:51:3f:fa:bd:82:f6:01:09:5f: 26:65:02:d0:4a:ea:52:92:06:da:91:9f:47:e9:28: 5e:bc:fb:0e:6c:a5:ec:1d:d6:b3:29:c8:a8:82:b6: ac:ed:d4:01:02:76:9d:c7:78:f7:c5:c2:c3:5d:8d: 0b:5e:f2:01:92:05:8a:3f:a6:d8:d8:67:73:a3:9c: 6d:0d:1c:67:14:b8:aa:e4:6c:a9:77:28:40:55:53: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:84:A0:97:15:CE:0F:E6:9E:8B:03:08:9B:21:7C:8A:90:6C:00 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:78:86:dd:03:d1:6a:a0:d7:3b:ce:1f:77:30:f0:af:71:26: 01:42:b5:b9:f9:1d:b8:05:ae:d2:9b:f7:5f:e7:94:64:27:81: 5b:5f:79:c4:c7:2e:84:37:4a:36:c4:df:af:b5:95:8d:58:e5: 75:47:7f:d0:bc:b0:fa:83:3b:77:93:11:8b:c4:19:35:9e:c0: 0b:8d:b5:d8:9e:50:ec:74:52:78:e1:28:ce:e0:cb:38:4d:bd: ca:19:d0:26:40:9f:b8:0e:f8:11:f5:58:c1:10:84:bb:b1:38: 97:c7:73:3f:61:0e:76:c2:0e:b2:b7:91:92:24:fd:f1:09:1d: 2a:cf:6d:4f:ac:30:76:3f:00:95:19:6e:f0:68:29:3f:5a:2c: 5f:9d:63:d3:7d:22:50:f6:e5:a5:31:8e:5e:a8:4f:b4:3f:04: dd:01:d7:16:09:9f:0a:1c:30:66:64:33:f7:d5:64:52:e0:1a: 1b:1f:76:3b:a9:a4:8e:8f:20:d0:fc:9a:19:cc:51:6a:08:7d: 1b:37:30:ea:c3:aa:ac:7b:99:e2:e2:16:18:06:91:77:48:dd: b2:cd:14:57:37:fe:99:30:24:69:74:09:a5:21:37:fd:63:f7: 08:47:81:7a:3d:e9:ec:4a:91:29:c4:93:5c:f6:58:8f:ea:bb: 09:51:62:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjQwNTA2MjMxMzEyWhcNMjQwNTEzMjMxMzEyWjAYMRYwFAYD VQQDEw02NjM5NjQwOS0wMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RRBEixiPBecoec7EWuEYZpe85i6woxT7dER18ksADAGOx+Fkqhn6SoNI1dj do1OMY4IWdh/d16MF6ND5DoFNnAJpGGW8DWNEzdhu/Ja6cOb1KeE/t4yTNAqVlN1 43YylaMGgSRt5U48K6WaPIbpEb4GptWjl0bcgVUZ1hja3fVFdcxZ0vsEtaOveSm9 BfEIjjUkNfBcBoKBRsqxbOfQjJ1ngMcYFeUwIHJRP/q9gvYBCV8mZQLQSupSkgba kZ9H6ShevPsObKXsHdazKciogras7dQBAnadx3j3xcLDXY0LXvIBkgWKP6bY2Gdz o5xtDRxnFLiq5GypdyhAVVMQrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzPhKCX Fc4P5p6LAwibIXyKkGwAMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAneIbdA9FqoNc7zh93MPCvcSYBQrW5+R24Ba7Sm/df55RkJ4FbX3nE xy6EN0o2xN+vtZWNWOV1R3/QvLD6gzt3kxGLxBk1nsALjbXYnlDsdFJ44SjO4Ms4 Tb3KGdAmQJ+4DvgR9VjBEIS7sTiXx3M/YQ52wg6yt5GSJP3xCR0qz21PrDB2PwCV GW7waCk/WixfnWPTfSJQ9uWlMY5eqE+0PwTdAdcWCZ8KHDBmZDP31WRS4BobH3Y7 qaSOjyDQ/JoZzFFqCH0bNzDqw6qse5ni4hYYBpF3SN2yzRRXN/6ZMCRpdAmlITf9 Y/cIR4F6PensSpEpxJNc9liP6rsJUWL7 -----END CERTIFICATE-----Generated at Tue May 7 01:58:14 2024 by rpki-client on console-fra.rpki-client.org