$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: IWxDx2eC3eGAhHkupAWge6gFqn7TdBSGfL647jtDud0= Subject key identifier: 24:53:CF:2F:3F:85:BF:0C:62:FD:2B:45:BF:D6:E6:F3:50:65:E1:71 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 0732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 072D Signing time: Tue 26 Nov 2024 21:14:56 +0000 Manifest this update: Tue 26 Nov 2024 21:14:55 +0000 Manifest next update: Tue 03 Dec 2024 21:14:55 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: rAuI32gvKDy7bn19b0/1GyIwwubmCTNfa6ZtAIDzELw=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: 8AJil+yJjIkRRtJKv7Y1HVAMUDavi/RkdnZw5+SOw9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 21:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Nov 26 21:14:55 2024 GMT Not After : Dec 3 21:14:55 2024 GMT Subject: CN=67463a50-42fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:47:93:fd:bd:01:77:90:40:1a:6b:3a:01: 4e:e4:28:e3:ea:56:0c:57:8b:49:68:f1:de:0b:80: 8a:bd:78:b0:cf:81:89:20:e1:01:02:ea:ae:4f:da: bc:2b:72:5c:b7:df:f6:be:a9:04:d8:ae:ff:44:f7: c1:1d:53:52:b6:fa:fe:83:18:3e:b7:e7:da:93:2f: 6d:3e:97:e3:ac:9f:ee:e7:a6:2c:13:68:42:9b:a6: e0:dc:14:0c:6f:57:b6:43:8f:a1:a4:d0:75:39:69: 40:3e:81:97:e9:ba:b3:01:2c:96:23:0c:9a:cc:f0: aa:71:4d:93:9b:02:f5:26:21:ec:2e:c0:61:6c:0f: 96:02:a7:b7:43:1a:49:90:0c:f8:4b:e7:84:b3:76: b0:dc:70:7a:27:6a:a6:27:d0:96:67:bc:2c:12:ca: e8:27:af:42:8e:1e:1d:c3:37:17:c0:16:27:2f:d4: be:87:40:6c:49:be:43:2c:1c:f3:a5:d8:43:cf:ec: 59:d2:0a:c6:b9:df:f8:21:e8:cf:40:4a:42:60:b9: eb:7a:f5:a4:ff:fc:25:97:b6:3f:be:ab:02:b1:f7: a0:3f:d4:be:57:08:41:89:39:86:fe:bc:3c:66:25: 1c:61:d9:91:2a:50:32:a3:5c:cc:59:39:40:29:c5: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:CF:2F:3F:85:BF:0C:62:FD:2B:45:BF:D6:E6:F3:50:65:E1:71 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c6:0b:2f:18:08:ae:37:97:97:9f:1b:f8:aa:dc:22:63:a5: d5:0a:d8:01:29:ea:06:66:cc:9f:21:57:8a:77:53:7e:b1:9c: f3:e7:da:25:1b:22:94:c8:da:a3:59:b3:cc:ec:da:96:16:bd: 79:75:21:c4:21:0b:96:49:b3:5b:5b:e7:f6:79:d4:ec:de:fd: fe:88:13:e6:6a:78:a1:6f:5b:3f:41:82:ae:23:8e:89:5d:13: ff:c2:0d:ee:5e:a8:c3:20:22:12:d9:95:15:5a:25:b9:d3:a6: 55:66:85:51:90:6b:32:32:26:c2:7a:69:ab:8c:6c:60:97:41: 19:db:9b:84:33:f9:2e:ce:ea:0f:60:c8:18:7c:8d:5d:d2:11: bf:a3:da:bd:b1:2b:97:69:9e:c1:da:5e:c1:70:f6:72:4b:54: 21:a5:ef:b2:63:84:89:45:d6:f2:97:c6:d1:47:37:61:50:6f: 4a:98:e8:03:2c:21:92:be:d1:d3:1d:8b:fb:19:08:f9:0f:17: 01:ee:b7:f9:f9:4c:26:6d:33:7d:ed:f6:19:09:b0:9c:89:5e: 85:08:f0:68:85:b9:f5:96:97:e3:22:d6:c4:24:c6:18:67:e9: 23:a3:fa:c9:a5:aa:3e:e4:b9:12:3b:df:48:1e:99:4a:55:f7: 3a:bc:e5:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjQxMTI2MjExNDU1WhcNMjQxMjAzMjExNDU1WjAYMRYwFAYD VQQDEw02NzQ2M2E1MC00MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnFHk/29AXeQQBprOgFO5Cjj6lYMV4tJaPHeC4CKvXiwz4GJIOEBAuquT9q8 K3Jct9/2vqkE2K7/RPfBHVNStvr+gxg+t+faky9tPpfjrJ/u56YsE2hCm6bg3BQM b1e2Q4+hpNB1OWlAPoGX6bqzASyWIwyazPCqcU2TmwL1JiHsLsBhbA+WAqe3QxpJ kAz4S+eEs3aw3HB6J2qmJ9CWZ7wsEsroJ69Cjh4dwzcXwBYnL9S+h0BsSb5DLBzz pdhDz+xZ0grGud/4IejPQEpCYLnrevWk//wll7Y/vqsCsfegP9S+VwhBiTmG/rw8 ZiUcYdmRKlAyo1zMWTlAKcXpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRTzy8/ hb8MYv0rRb/W5vNQZeFxMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaxgsvGAiuN5eXnxv4qtwiY6XVCtgBKeoGZsyfIVeKd1N+sZzz59ol GyKUyNqjWbPM7NqWFr15dSHEIQuWSbNbW+f2edTs3v3+iBPmanihb1s/QYKuI46J XRP/wg3uXqjDICIS2ZUVWiW506ZVZoVRkGsyMibCemmrjGxgl0EZ25uEM/kuzuoP YMgYfI1d0hG/o9q9sSuXaZ7B2l7BcPZyS1Qhpe+yY4SJRdbyl8bRRzdhUG9KmOgD LCGSvtHTHYv7GQj5DxcB7rf5+UwmbTN97fYZCbCciV6FCPBohbn1lpfjItbEJMYY Z+kjo/rJpao+5LkSO99IHplKVfc6vOV4 -----END CERTIFICATE-----Generated at Wed Nov 27 00:10:01 2024 by rpki-client on console-ams.rpki-client.org