$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: 2OKvrCDNia2gSKQuQVomuqUXVGSsqLT1VwCt9FwiqOU= Subject key identifier: D9:C4:4F:F5:C4:2B:AF:C6:02:66:1E:B3:A4:DA:A4:A1:58:C5:46:2F Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 06C4 Signing time: Thu 02 May 2024 23:09:41 +0000 Manifest this update: Thu 02 May 2024 23:09:41 +0000 Manifest next update: Thu 09 May 2024 23:09:41 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: J5uS0AQZuGIjQSZ52xh999nI1e6YYb/1RYY1oQ5Jd64=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: 8AJil+yJjIkRRtJKv7Y1HVAMUDavi/RkdnZw5+SOw9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: May 2 23:09:41 2024 GMT Not After : May 9 23:09:41 2024 GMT Subject: CN=66341d35-4e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:64:cf:32:b2:ca:af:92:50:de:72:b8:61: 3c:ac:2d:e6:40:3d:31:d2:a9:89:93:26:7f:1c:ed: 94:fe:98:2c:59:55:fa:bb:ca:93:dd:e3:4f:58:84: 30:85:e0:ef:d7:d8:7e:00:4c:2e:44:d9:83:55:56: ef:ca:b1:e5:08:ba:fd:59:80:45:c6:17:ea:33:ea: 3e:af:4a:35:85:0e:e1:97:0e:17:e8:6d:f2:5b:f2: bd:fa:b9:fc:67:31:f2:82:98:3f:26:f8:12:83:d6: 25:dd:84:b3:9e:46:19:be:e5:eb:53:d7:2d:03:64: 8e:ca:e9:5c:3e:cf:77:73:e6:4a:21:4f:05:c0:1d: 80:61:02:dd:12:6e:98:49:92:4f:11:a0:a9:7c:7e: c8:a0:51:2d:26:b5:fc:92:fc:73:89:b3:6b:b3:96: cd:ff:d2:73:94:de:eb:d0:ba:da:f3:6c:e1:67:09: dc:69:2c:6f:6c:a2:a2:6b:cd:34:ba:8c:37:19:45: 16:61:2e:f3:ab:6b:35:aa:61:d1:55:02:c3:d9:4a: a9:c2:30:99:76:84:e5:35:12:c8:56:2c:15:0f:03: eb:42:94:cd:f0:9d:8d:e4:a2:8b:65:91:a3:61:e1: b0:7b:ea:22:bc:11:8c:1f:f4:c1:8e:76:55:80:13: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C4:4F:F5:C4:2B:AF:C6:02:66:1E:B3:A4:DA:A4:A1:58:C5:46:2F X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:72:d8:f0:97:60:8b:44:9c:08:a3:5a:26:fb:6a:7e:d5:22: eb:28:dd:78:48:0d:ad:06:6d:bb:eb:10:14:79:3e:43:40:78: 86:5f:29:5b:5b:18:a2:3c:b7:57:20:63:f7:2d:94:74:9c:b1: 40:97:2c:90:bc:a1:d5:14:8e:be:38:8c:9d:8c:44:14:1f:10: 59:f6:78:c8:8f:87:cf:89:2b:0a:93:cd:19:17:47:4d:34:ea: b7:05:68:fc:80:32:c1:2a:0a:cb:fe:df:dd:53:82:7a:61:78: 2f:f7:9c:2e:ed:2b:bb:86:a5:9e:0e:24:27:62:cf:e8:5e:66: 55:9b:59:02:27:bc:cf:d3:9b:b2:8d:e7:f2:6d:d5:a5:ee:1f: 2b:ee:66:86:a7:5a:61:88:7e:79:57:ba:cf:a5:42:e1:b5:1c: 12:5e:07:7f:14:f5:b5:a2:80:b2:a7:c6:63:8d:e5:2c:ba:06: a1:7c:6f:6d:ea:dc:e4:e2:4b:3a:8b:3e:51:64:2b:1f:5f:e4: 17:9c:11:40:97:85:53:0a:ba:a7:9a:75:02:99:b8:c5:47:84: 6b:2c:19:0a:91:08:30:4a:04:fe:75:a5:b8:34:51:1f:f6:79: a7:57:b6:3f:5e:65:4e:6c:3d:df:bf:e0:28:89:f7:47:dd:26: a7:f0:44:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjQwNTAyMjMwOTQxWhcNMjQwNTA5MjMwOTQxWjAYMRYwFAYD VQQDEw02NjM0MWQzNS00ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt85kzzKyyq+SUN5yuGE8rC3mQD0x0qmJkyZ/HO2U/pgsWVX6u8qT3eNPWIQw heDv19h+AEwuRNmDVVbvyrHlCLr9WYBFxhfqM+o+r0o1hQ7hlw4X6G3yW/K9+rn8 ZzHygpg/JvgSg9Yl3YSznkYZvuXrU9ctA2SOyulcPs93c+ZKIU8FwB2AYQLdEm6Y SZJPEaCpfH7IoFEtJrX8kvxzibNrs5bN/9JzlN7r0Lra82zhZwncaSxvbKKia800 uow3GUUWYS7zq2s1qmHRVQLD2UqpwjCZdoTlNRLIViwVDwPrQpTN8J2N5KKLZZGj YeGwe+oivBGMH/TBjnZVgBPqJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnET/XE K6/GAmYes6TapKFYxUYvMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjctjwl2CLRJwIo1om+2p+1SLrKN14SA2tBm276xAUeT5DQHiGXylb WxiiPLdXIGP3LZR0nLFAlyyQvKHVFI6+OIydjEQUHxBZ9njIj4fPiSsKk80ZF0dN NOq3BWj8gDLBKgrL/t/dU4J6YXgv95wu7Su7hqWeDiQnYs/oXmZVm1kCJ7zP05uy jefybdWl7h8r7maGp1phiH55V7rPpULhtRwSXgd/FPW1ooCyp8ZjjeUsugahfG9t 6tzk4ks6iz5RZCsfX+QXnBFAl4VTCrqnmnUCmbjFR4RrLBkKkQgwSgT+daW4NFEf 9nmnV7Y/XmVObD3fv+AoifdH3San8ESP -----END CERTIFICATE-----Generated at Fri May 3 00:07:11 2024 by rpki-client on console-ams.rpki-client.org