$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json) Hash identifier: Oxc+ZmSfjWDtOFZoBLCgT4qN1w+q6SOP0xuloDBFYWE= Subject key identifier: F1:DF:76:F5:61:9B:38:7A:E7:CE:A2:D4:E0:3E:70:35:81:0D:A4:F6 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft Manifest number: 59 Signing time: Sun 19 May 2024 07:52:34 +0000 Manifest this update: Sun 19 May 2024 07:52:34 +0000 Manifest next update: Sun 26 May 2024 07:52:34 +0000 Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: RkRxdTkn3T1WOnXgaGE7QZBTgjw0wpV1SS0NEqqKwW4=) 2: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: qKJWdgZS/qvGfDKzLjOnoqxHOKiBuuKPLXiFdy2+iuM=) 3: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: 0mFiKIphKVazFgSEsBphiIuO3MRIPBucEk0NiuaxBLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: May 19 07:52:34 2024 GMT Not After : May 26 07:52:34 2024 GMT Subject: CN=6649afc2-cb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:31:db:87:7a:34:a1:5a:41:c2:7c:9e:e9: 10:90:94:15:f3:cc:88:ce:5b:c7:c3:df:06:b1:a1: f0:06:85:2e:28:84:90:fe:c8:4a:9d:3e:39:24:b2: f9:2f:bf:c1:58:21:bb:8c:e1:1e:a7:5c:82:b2:12: f1:1e:60:90:7f:3f:f7:1a:1c:1c:32:a3:8b:eb:75: bc:87:52:d4:80:ad:62:e2:a8:6b:2c:6a:96:d6:23: 05:62:43:d7:44:cb:8a:b7:57:30:b0:0c:cd:9e:63: b5:11:5c:66:25:6a:9c:a2:98:45:1c:8e:af:95:88: 0c:4c:3e:3b:c6:b6:64:06:21:23:14:09:4c:e2:24: 1f:8e:c6:67:a2:d7:d4:d3:2b:df:35:5d:99:fc:a4: ce:df:fa:f9:65:23:61:03:57:54:62:1d:8b:85:cd: 70:f8:10:3d:7f:e7:dc:11:48:f4:42:57:bf:83:17: 45:f5:3e:09:1f:8d:ff:ee:aa:3c:72:da:77:fd:60: 94:6e:bf:ad:0a:2a:c6:d0:af:de:ac:2f:3e:7d:0b: 9d:65:aa:2d:81:d3:e9:70:2e:68:80:aa:76:61:2d: c6:84:ba:50:b5:f4:7d:81:e7:2a:cc:37:5d:93:74: fb:3b:95:f5:63:24:2e:1a:ca:97:68:6c:f3:52:f3: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:76:F5:61:9B:38:7A:E7:CE:A2:D4:E0:3E:70:35:81:0D:A4:F6 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:2b:a0:48:fc:9d:03:e8:d2:28:9b:b4:c4:14:cd:bc:d7: f3:ff:ec:d5:7a:a6:29:e5:11:6f:d9:3d:f5:d7:5d:56:00:38: b2:cd:1d:59:d7:6a:10:a3:88:77:16:c8:2c:4b:d7:25:47:f7: 08:a2:38:c2:b1:26:7a:c6:ef:ad:63:7f:55:fc:52:e7:48:a8: 3a:82:2c:dd:4b:97:b4:92:98:49:4a:e5:43:d2:07:42:32:86: 27:14:cd:ac:e8:66:b0:91:25:2b:d2:28:16:be:13:48:8d:61: a5:92:2f:ab:51:ec:89:10:3d:9d:cb:c2:e9:e7:43:72:f2:44: 54:d5:a7:84:70:e4:02:8c:aa:02:f0:63:d6:11:cc:b7:65:8f: 7a:af:65:5f:79:08:db:98:35:92:c4:5e:1b:55:26:a6:58:8d: 6d:d7:87:9c:b4:10:31:31:8d:d5:24:4f:03:1c:be:96:82:4e: fd:85:63:32:6f:bc:c7:3f:9c:5a:54:01:8f:97:f1:e7:82:14: 14:0a:29:b4:07:85:7f:55:b9:6a:dc:dd:7e:b2:58:5f:06:fe: 5c:47:61:d8:47:26:24:65:e3:5f:09:2a:19:b0:6b:93:67:86: 57:c3:c6:bb:da:98:a8:a2:ec:4a:ba:72:33:2d:1d:f2:58:9a: 00:99:33:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MkZEMDExMC8GA1UEBRMoN0E1QzRERDBBM0JCOUNEODE0QjIxNzRBRjY5M0UzRjc0 MTRCOTk1QjAeFw0yNDA1MTkwNzUyMzRaFw0yNDA1MjYwNzUyMzRaMBgxFjAUBgNV BAMTDTY2NDlhZmMyLWNiMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUWTHbh3o0oVpBwnye6RCQlBXzzIjOW8fD3waxofAGhS4ohJD+yEqdPjkksvkv v8FYIbuM4R6nXIKyEvEeYJB/P/caHBwyo4vrdbyHUtSArWLiqGssapbWIwViQ9dE y4q3VzCwDM2eY7URXGYlapyimEUcjq+ViAxMPjvGtmQGISMUCUziJB+Oxmei19TT K981XZn8pM7f+vllI2EDV1RiHYuFzXD4ED1/59wRSPRCV7+DF0X1Pgkfjf/uqjxy 2nf9YJRuv60KKsbQr96sLz59C51lqi2B0+lwLmiAqnZhLcaEulC19H2B5yrMN12T dPs7lfVjJC4aypdobPNS8zuVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8d929WGb OHrnzqLU4D5wNYENpPYwHwYDVR0jBBgwFoAUelxN0KO7nNgUshdK9pPj90FLmVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyRkQwLzJDOUFBMzFDOTU3 NjExRUU4MkVGQ0IxQ0M0RjlBRTAyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1W cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWx4TjBLTzduTmdVc2hkSzlwUGo5MEZMbVZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy RkQwLzJDOUFBMzFDOTU3NjExRUU4MkVGQ0IxQ0M0RjlBRTAyL2VseE4wS083bk5n VXNoZEs5cFBqOTBGTG1Wcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUSK6BI/J0D6NIom7TEFM281/P/7NV6pinlEW/ZPfXXXVYAOLLNHVnX ahCjiHcWyCxL1yVH9wiiOMKxJnrG761jf1X8UudIqDqCLN1Ll7SSmElK5UPSB0Iy hicUzazoZrCRJSvSKBa+E0iNYaWSL6tR7IkQPZ3LwunnQ3LyRFTVp4Rw5AKMqgLw Y9YRzLdlj3qvZV95CNuYNZLEXhtVJqZYjW3Xh5y0EDExjdUkTwMcvpaCTv2FYzJv vMc/nFpUAY+X8eeCFBQKKbQHhX9VuWrc3X6yWF8G/lxHYdhHJiRl418JKhmwa5Nn hlfDxrvamKii7Eq6cjMtHfJYmgCZMys= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org