$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: NGK0mlxqamcVCmSiTRJuwLSAuPKP/QEI5GqpJJ0X1tI= Subject key identifier: B2:40:7D:2E:D5:2C:23:6C:E4:F6:62:B9:F3:FE:51:97:E3:67:0E:75 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0BD8 Signing time: Sat 18 May 2024 19:03:59 +0000 Manifest this update: Sat 18 May 2024 19:03:59 +0000 Manifest next update: Sat 25 May 2024 19:03:59 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: rfvRL2t2Wm2ICb7CrhaOsj/vLVRTga0fL9QQM6pTjhw=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: AnrVwsV/MhQFcPIiVWXg5bhOIcCXN96Hs63MIGs/35s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: May 18 19:03:59 2024 GMT Not After : May 25 19:03:59 2024 GMT Subject: CN=6648fb9f-fe47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:0f:76:62:b2:65:da:dc:77:4c:93:bc:25: 78:ea:56:e0:82:6d:0e:d7:ef:e3:c1:9b:f8:b4:b8: 0b:90:02:36:12:f0:31:4f:5f:3a:54:2d:35:1e:c4: 43:2a:45:80:7e:7f:a1:6d:7c:cb:a9:33:06:dc:47: 43:93:b8:2f:e7:55:a9:50:3e:35:bf:5f:44:f0:83: 57:64:0f:66:ff:d7:5b:cd:cd:90:1c:fa:6a:dd:ab: 6f:66:78:5c:84:03:e0:13:61:d0:67:c5:81:7b:76: 27:7e:32:58:df:de:30:ba:da:df:57:a2:42:af:3d: 30:53:e1:d0:04:bf:88:f7:68:76:6a:0f:2d:96:f6: 33:d4:12:58:b7:44:2f:9b:52:02:14:a3:f7:a0:5a: 0e:7e:20:05:a4:05:30:e2:62:8b:cf:6d:85:83:21: fe:6a:61:7d:07:00:76:d5:06:a0:bf:ca:dc:30:74: 43:16:f7:7e:52:e5:70:80:c5:e0:cd:af:73:f5:71: 41:e2:91:48:6b:76:d6:0d:99:e0:34:6b:d6:e7:23: b5:85:40:d2:83:c7:e0:d5:b4:5b:6e:4b:06:93:91: 87:3e:31:7b:af:62:e5:06:e6:e7:24:85:4c:1b:02: b1:7b:f1:07:49:28:3a:97:5b:a6:94:bd:9a:82:10: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:7D:2E:D5:2C:23:6C:E4:F6:62:B9:F3:FE:51:97:E3:67:0E:75 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:c7:fa:45:e3:ca:49:e7:a5:a4:f0:80:fe:14:28:81:35: c1:e0:ce:18:32:a0:7c:d7:d6:60:04:07:7d:a3:eb:0d:31:18: b6:c1:ca:24:f6:cd:1b:41:d4:61:e5:b4:f0:72:ae:2e:f4:4e: 84:c9:3a:32:a0:92:90:83:ec:0e:67:ae:f2:59:7d:b3:ba:cb: f1:6f:e6:91:41:b6:7a:e5:f3:ca:29:0e:a7:04:a1:4f:e8:3b: fe:f5:66:db:64:c9:99:f3:df:ec:71:c9:3f:17:23:7e:6c:0a: a8:3f:2c:66:0e:cb:47:19:0e:08:61:09:f5:f3:b5:d8:ef:cd: 40:e9:ba:da:c9:4c:51:c2:ba:dc:e9:9e:05:13:e4:f2:59:2d: 48:33:9f:d1:78:ba:93:05:c6:0a:b8:97:76:a0:7f:dc:85:3f: 23:59:61:6e:da:88:a1:07:d7:45:80:34:04:d0:38:8a:89:f0: 0e:3c:82:ac:0f:52:ce:68:50:9c:0b:c4:74:25:20:2b:95:51: e2:60:54:5f:62:cb:49:c1:45:88:8b:c9:f5:b3:71:88:ec:78: 07:42:eb:e2:45:5d:b5:ba:f2:f3:48:5b:ca:c1:04:c7:26:d8: 03:d3:e0:02:9a:15:4e:b8:7c:a2:89:3e:a8:f1:48:06:cf:5c: a3:f4:e4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjQwNTE4MTkwMzU5WhcNMjQwNTI1MTkwMzU5WjAYMRYwFAYD VQQDEw02NjQ4ZmI5Zi1mZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZYPdmKyZdrcd0yTvCV46lbggm0O1+/jwZv4tLgLkAI2EvAxT186VC01HsRD KkWAfn+hbXzLqTMG3EdDk7gv51WpUD41v19E8INXZA9m/9dbzc2QHPpq3atvZnhc hAPgE2HQZ8WBe3YnfjJY394wutrfV6JCrz0wU+HQBL+I92h2ag8tlvYz1BJYt0Qv m1ICFKP3oFoOfiAFpAUw4mKLz22FgyH+amF9BwB21Qagv8rcMHRDFvd+UuVwgMXg za9z9XFB4pFIa3bWDZngNGvW5yO1hUDSg8fg1bRbbksGk5GHPjF7r2LlBubnJIVM GwKxe/EHSSg6l1umlL2aghCiJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJAfS7V LCNs5PZiufP+UZfjZw51MB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIC8f6RePKSeelpPCA/hQogTXB4M4YMqB819ZgBAd9o+sNMRi2wcok 9s0bQdRh5bTwcq4u9E6EyToyoJKQg+wOZ67yWX2zusvxb+aRQbZ65fPKKQ6nBKFP 6Dv+9WbbZMmZ89/scck/FyN+bAqoPyxmDstHGQ4IYQn187XY781A6brayUxRwrrc 6Z4FE+TyWS1IM5/ReLqTBcYKuJd2oH/chT8jWWFu2oihB9dFgDQE0DiKifAOPIKs D1LOaFCcC8R0JSArlVHiYFRfYstJwUWIi8n1s3GI7HgHQuviRV21uvLzSFvKwQTH JtgD0+ACmhVOuHyiiT6o8UgGz1yj9OS7 -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org