$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: PG5tmTxAMZKw349GEwbjjb/zUtsKoFupwhm2ypBl8EA= Subject key identifier: C7:A8:5C:A4:94:02:83:68:38:1D:DF:01:29:8E:F8:87:A9:FF:16:EA Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 071F Signing time: Fri 22 Nov 2024 21:22:13 +0000 Manifest this update: Fri 22 Nov 2024 21:22:13 +0000 Manifest next update: Fri 29 Nov 2024 21:22:13 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: Liwakqy7NE3DlI3RSGtZB1Y0EtcrbkCN0tpmU1g9Uq0=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: uCYVydwlEOxsSRnMvhl5LmQaFeZ5CLA5JUdzvNDerFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Nov 22 21:22:13 2024 GMT Not After : Nov 29 21:22:13 2024 GMT Subject: CN=6740f605-7d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:04:25:af:47:3e:ad:7f:d5:ef:a2:8e:94: 02:74:58:bc:14:03:ce:9c:71:59:b0:ff:07:bc:40: 22:24:75:ed:bf:b2:b4:02:51:13:95:04:06:19:8b: 98:e8:44:28:ff:58:34:77:56:55:51:29:64:fc:ea: 0b:01:17:5e:0e:d5:05:bf:29:95:03:e5:1f:a5:15: 59:9a:05:49:2e:97:c3:94:c8:95:54:f8:b3:47:94: dc:fc:5f:b5:39:9a:61:a7:3f:77:1b:62:fd:fa:13: c0:84:9c:f8:7d:aa:f5:ee:c3:4c:55:40:61:1b:10: 49:70:53:d0:1c:9d:5c:f3:0c:e4:7a:ad:e5:f0:5d: 07:46:ef:15:bf:f0:d5:36:a2:52:4d:9b:db:a7:56: b5:0b:f9:08:3c:68:59:31:eb:ae:09:5a:d4:d9:20: 67:c7:86:2f:8a:5d:d0:2c:42:ea:bc:49:35:bf:01: aa:74:62:c9:59:53:d2:d3:d7:cc:ab:aa:26:a6:f3: be:3d:92:f7:5b:93:6e:c5:51:b0:53:f0:4d:1e:d0: 80:91:a1:38:c9:a0:70:1d:f1:cd:fa:b0:db:f3:62: 19:ba:42:95:e4:a2:59:15:c8:4a:bf:17:f2:9a:ca: 2a:46:71:db:46:8c:07:5b:e3:4d:ce:24:1e:1a:43: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A8:5C:A4:94:02:83:68:38:1D:DF:01:29:8E:F8:87:A9:FF:16:EA X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:58:52:e4:8a:48:1a:aa:17:92:a9:60:a5:f9:86:e6:8b:d3: 2e:b8:a9:b5:ed:9c:8d:b0:b0:55:92:31:7f:cd:e2:b0:61:2a: cf:02:e2:f8:a1:0e:a4:7c:68:f1:e4:4d:a5:4f:1c:1d:bb:39: 17:ac:86:77:ad:cc:63:32:9d:6a:af:d9:4a:84:51:34:12:7f: 06:40:07:0d:17:08:3c:38:3f:e2:e8:bd:89:96:c9:29:db:37: 14:3f:fc:51:36:bc:3d:72:e5:ce:d6:12:8e:9f:59:e5:cf:c8: 0d:f8:36:a2:c0:05:3c:a4:bd:7a:70:1f:db:26:7e:b7:4d:0a: 1f:a6:09:49:a9:78:39:04:df:bb:42:7c:d7:bb:b4:74:65:32: 2b:a9:85:ee:f9:b0:8e:23:c5:67:cb:02:55:da:3f:3f:19:6e: 7d:b4:94:bf:a7:f0:2f:f8:e8:83:6b:5c:3d:bf:77:95:9b:c9: eb:5a:d7:16:ba:af:23:18:7a:76:5c:ef:c4:93:ba:33:cc:c6: 1b:58:c5:61:9f:5d:79:a8:2b:58:38:1b:ce:8a:92:0d:74:a6: 01:b3:48:31:a7:67:29:b3:a4:f6:e9:d2:42:ea:3d:92:2c:52: 97:fc:06:f0:e4:2c:53:e5:8c:90:68:ff:49:bd:a6:a5:c3:ff: f0:1e:95:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjQxMTIyMjEyMjEzWhcNMjQxMTI5MjEyMjEzWjAYMRYwFAYD VQQDEw02NzQwZjYwNS03ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3sEJa9HPq1/1e+ijpQCdFi8FAPOnHFZsP8HvEAiJHXtv7K0AlETlQQGGYuY 6EQo/1g0d1ZVUSlk/OoLARdeDtUFvymVA+UfpRVZmgVJLpfDlMiVVPizR5Tc/F+1 OZphpz93G2L9+hPAhJz4far17sNMVUBhGxBJcFPQHJ1c8wzkeq3l8F0HRu8Vv/DV NqJSTZvbp1a1C/kIPGhZMeuuCVrU2SBnx4Yvil3QLELqvEk1vwGqdGLJWVPS09fM q6ompvO+PZL3W5NuxVGwU/BNHtCAkaE4yaBwHfHN+rDb82IZukKV5KJZFchKvxfy msoqRnHbRowHW+NNziQeGkOqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeoXKSU AoNoOB3fASmO+Iep/xbqMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHWFLkikgaqheSqWCl+Ybmi9MuuKm17ZyNsLBVkjF/zeKwYSrPAuL4 oQ6kfGjx5E2lTxwduzkXrIZ3rcxjMp1qr9lKhFE0En8GQAcNFwg8OD/i6L2Jlskp 2zcUP/xRNrw9cuXO1hKOn1nlz8gN+DaiwAU8pL16cB/bJn63TQofpglJqXg5BN+7 QnzXu7R0ZTIrqYXu+bCOI8VnywJV2j8/GW59tJS/p/Av+OiDa1w9v3eVm8nrWtcW uq8jGHp2XO/Ek7ozzMYbWMVhn115qCtYOBvOipINdKYBs0gxp2cps6T26dJC6j2S LFKX/Abw5CxT5YyQaP9Jvaalw//wHpVl -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org