$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json) Hash identifier: yU7AawwkVRJNWXKOs/7SFehgaiQP7YEmoIJCj5XTl1w= Subject key identifier: D2:EF:36:42:E7:27:76:77:E8:D1:B9:F6:86:B4:35:F9:CC:DB:7B:DF Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft Manifest number: C2 Signing time: Sun 19 May 2024 06:19:33 +0000 Manifest this update: Sun 19 May 2024 06:19:32 +0000 Manifest next update: Sun 26 May 2024 06:19:32 +0000 Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: 7B4EkYZiQOQl4RpB84+Z1uMAshA+tMAl8zQ/eN/pinE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: May 19 06:19:32 2024 GMT Not After : May 26 06:19:32 2024 GMT Subject: CN=664999f4-3f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:1a:e5:74:af:9b:6e:16:3e:3e:39:28:f5: c0:a0:a3:cb:12:41:61:5b:03:e4:6b:3f:7b:02:31: 3f:1b:3c:68:22:f5:2d:78:4b:af:b1:6a:58:e8:6a: bd:df:e5:9e:4e:a8:e0:fc:31:a8:dd:15:c0:69:53: 0b:e1:89:da:3e:77:cc:6e:54:19:d8:58:74:76:72: ca:41:e9:fa:1a:6f:49:f6:b6:ff:91:05:6c:6a:95: 33:92:fe:7f:42:0a:df:17:74:19:c1:49:32:cc:97: 98:b7:08:49:4b:c8:70:a3:af:4c:62:2c:fc:a4:89: 77:77:e9:11:bc:68:e2:1d:dc:51:ea:5c:1d:24:20: 4f:96:97:f3:48:83:ed:66:e0:f3:d3:eb:03:dd:77: be:97:6a:bc:d6:25:42:46:53:97:4b:2b:38:63:be: 6e:bc:69:7b:cd:f1:0e:2f:32:0e:1a:bb:98:58:da: e9:1e:ce:79:cc:f4:a2:b1:20:30:6b:d6:bb:de:3c: e6:f3:d7:da:ad:e9:73:b0:f3:35:e8:12:51:58:43: db:87:fe:85:9f:89:20:ca:3d:72:de:52:4e:85:e9: 38:f9:82:22:89:06:66:e1:ef:0c:b8:32:3e:99:fc: c7:e4:7e:36:57:74:01:0c:47:1d:2d:88:7b:65:31: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:36:42:E7:27:76:77:E8:D1:B9:F6:86:B4:35:F9:CC:DB:7B:DF X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:39:1b:b3:c2:e2:a6:61:26:ec:2d:9f:c5:71:f6:b0:42:27: 0d:3b:bb:54:53:42:eb:20:29:ae:9d:9f:c4:82:dc:29:7c:52: 33:f6:be:82:c5:23:0a:ce:16:f6:23:86:63:50:5c:1f:d7:20: 83:bf:fd:72:6e:02:97:fe:bc:5d:c3:68:7f:0a:1d:bf:53:e3: f2:85:ee:e0:bb:68:e2:e0:49:05:84:23:d4:49:8c:b6:30:3a: 88:92:15:9a:75:fa:ad:b3:33:e9:e7:1b:e7:0f:bd:a8:bd:14: 81:67:7e:6d:53:a7:4d:d6:a3:b6:a4:90:8c:50:e3:37:43:21: 26:32:77:85:30:4a:d2:49:3d:a9:40:d1:ed:00:73:6a:ff:bf: 42:63:4d:bb:46:3b:ef:42:9d:fe:d2:9d:8c:2c:4f:74:52:78: 70:75:0c:b8:aa:e2:d5:75:2e:7c:f1:1f:ba:2f:bb:19:0f:0f: 90:45:07:4a:a9:e0:f4:8f:eb:03:43:63:39:e2:cc:1a:7b:4d: a5:4f:f9:a6:b0:7f:a3:b1:b8:a4:8b:32:d5:fb:95:b5:05:5b: b8:6f:43:e8:ac:46:de:66:3b:72:9b:79:be:1f:46:1a:ab:a0: bc:9c:9d:2e:1c:e4:ea:ba:99:84:e8:4c:33:a7:d3:4b:83:30: 65:41:c7:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjQwNTE5MDYxOTMyWhcNMjQwNTI2MDYxOTMyWjAYMRYwFAYD VQQDEw02NjQ5OTlmNC0zZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EIa5XSvm24WPj45KPXAoKPLEkFhWwPkaz97AjE/GzxoIvUteEuvsWpY6Gq9 3+WeTqjg/DGo3RXAaVML4YnaPnfMblQZ2Fh0dnLKQen6Gm9J9rb/kQVsapUzkv5/ QgrfF3QZwUkyzJeYtwhJS8hwo69MYiz8pIl3d+kRvGjiHdxR6lwdJCBPlpfzSIPt ZuDz0+sD3Xe+l2q81iVCRlOXSys4Y75uvGl7zfEOLzIOGruYWNrpHs55zPSisSAw a9a73jzm89farelzsPM16BJRWEPbh/6Fn4kgyj1y3lJOhek4+YIiiQZm4e8MuDI+ mfzH5H42V3QBDEcdLYh7ZTE6BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLvNkLn J3Z36NG59oa0NfnM23vfMB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC82MjYyRjZENkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUha SkhwbW5maDRHNk1CTjllbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcORuzwuKmYSbsLZ/FcfawQicNO7tUU0LrICmunZ/EgtwpfFIz9r6C xSMKzhb2I4ZjUFwf1yCDv/1ybgKX/rxdw2h/Ch2/U+Pyhe7gu2ji4EkFhCPUSYy2 MDqIkhWadfqtszPp5xvnD72ovRSBZ35tU6dN1qO2pJCMUOM3QyEmMneFMErSST2p QNHtAHNq/79CY027RjvvQp3+0p2MLE90UnhwdQy4quLVdS588R+6L7sZDw+QRQdK qeD0j+sDQ2M54swae02lT/mmsH+jsbikizLV+5W1BVu4b0PorEbeZjtym3m+H0Ya q6C8nJ0uHOTqupmE6Ewzp9NLgzBlQceQ -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org