$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: yDmuTQUgRANHcfO7tV1T1tDUR68ILXacicRWHug8l6Y= Subject key identifier: FB:54:21:AA:22:07:9E:33:47:FD:5F:7D:5A:EA:70:25:86:EC:B4:E1 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 06A3 Signing time: Sat 18 May 2024 23:21:25 +0000 Manifest this update: Sat 18 May 2024 23:21:25 +0000 Manifest next update: Sat 25 May 2024 23:21:25 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: m1SBZOvCj4DkYvvdgAszAug3ZQGUINUrBSrFY4zinKg=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: +ebPDBzqWaOOxu18OJS9gA27Iyig6p/f8enEMBE6spw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: May 18 23:21:25 2024 GMT Not After : May 25 23:21:25 2024 GMT Subject: CN=664937f5-5068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:cb:aa:bb:57:7c:ec:a6:22:85:26:5a:0f: d4:81:eb:47:52:1f:d3:1b:34:d1:d6:78:9d:27:bb: 01:26:87:8c:02:b6:40:e6:8e:90:e9:9c:8c:52:c5: 3b:8a:71:1c:dc:f2:3b:e6:3e:11:16:ea:b2:ca:3f: e2:2e:6f:05:bd:6c:f2:6e:2e:69:72:c2:c7:62:60: 19:20:e4:96:5b:5a:3d:50:f8:06:42:33:41:3a:33: 4e:51:9c:a9:58:48:c7:dd:e9:50:d2:aa:c3:e8:43: 31:c4:cc:d3:06:ed:13:64:a7:1c:aa:5f:5f:b8:63: b5:7c:48:35:91:1b:6b:84:67:2b:3d:6f:c3:b8:56: d4:87:45:2a:98:4b:0a:a3:43:a5:49:e2:7a:33:07: 57:a7:95:0e:1d:e7:c1:e1:21:42:50:27:74:7b:1f: 4f:db:68:31:fb:38:83:e2:22:f5:84:da:83:4d:b1: 4f:f9:79:8e:62:b4:0b:a0:b0:5d:a5:2e:ef:2e:04: ed:1f:6e:70:58:dc:48:f2:eb:fa:38:8c:3f:ab:d0: 87:f4:38:30:c6:93:65:41:b8:a8:2f:ca:4c:69:8a: 84:70:3f:aa:a4:09:d8:97:c5:fd:76:23:36:aa:b8: 70:f8:f2:77:29:4d:55:72:6b:3c:c1:cf:ba:7f:42: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:54:21:AA:22:07:9E:33:47:FD:5F:7D:5A:EA:70:25:86:EC:B4:E1 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0d:0a:95:cf:ba:22:27:f6:7d:65:52:6d:1d:87:26:7c:db: 78:51:ad:f8:d8:ca:22:5b:04:cf:96:f6:29:5f:23:b0:f2:13: f8:52:f8:9d:ed:b7:b3:ac:a9:6e:8f:d1:5e:03:08:26:60:59: b5:f4:1b:3e:fa:27:d9:a3:58:f0:c9:e9:44:36:2a:1b:99:2e: b5:d9:70:da:04:28:ee:29:1e:f5:b9:7e:e9:22:14:88:ba:80: 67:1c:15:5f:39:63:8b:14:29:c8:6f:96:66:74:b7:86:f8:1d: ae:93:bb:ce:c9:b0:10:47:66:37:75:5a:28:14:19:b5:61:a1: 89:fd:68:9f:c2:3d:08:45:10:b9:73:c2:17:41:ab:0b:2b:0e: b8:a4:b8:24:52:46:54:77:e3:9e:b7:31:f7:9c:ec:44:03:31: 2d:89:bf:58:d6:bd:4e:60:72:75:e4:27:3e:9b:1e:27:40:1b: 7a:6f:19:eb:92:dd:64:fc:ba:be:42:ab:9f:9d:1d:70:71:94: eb:ea:4a:ab:20:aa:66:34:96:4b:fa:73:c4:e7:c3:72:49:7f: 3b:ad:3d:0c:f5:a7:60:b1:64:f0:2c:2a:89:ce:2b:59:a1:e1: 5b:8a:95:76:0d:2a:f9:70:28:f4:94:73:64:5d:3f:4c:24:57: 7b:40:86:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjQwNTE4MjMyMTI1WhcNMjQwNTI1MjMyMTI1WjAYMRYwFAYD VQQDEw02NjQ5MzdmNS01MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs7LqrtXfOymIoUmWg/UgetHUh/TGzTR1nidJ7sBJoeMArZA5o6Q6ZyMUsU7 inEc3PI75j4RFuqyyj/iLm8FvWzybi5pcsLHYmAZIOSWW1o9UPgGQjNBOjNOUZyp WEjH3elQ0qrD6EMxxMzTBu0TZKccql9fuGO1fEg1kRtrhGcrPW/DuFbUh0UqmEsK o0OlSeJ6MwdXp5UOHefB4SFCUCd0ex9P22gx+ziD4iL1hNqDTbFP+XmOYrQLoLBd pS7vLgTtH25wWNxI8uv6OIw/q9CH9DgwxpNlQbioL8pMaYqEcD+qpAnYl8X9diM2 qrhw+PJ3KU1Vcms8wc+6f0JKdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtUIaoi B54zR/1ffVrqcCWG7LThMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMDQqVz7oiJ/Z9ZVJtHYcmfNt4Ua342MoiWwTPlvYpXyOw8hP4Uvid 7bezrKluj9FeAwgmYFm19Bs++ifZo1jwyelENiobmS612XDaBCjuKR71uX7pIhSI uoBnHBVfOWOLFCnIb5ZmdLeG+B2uk7vOybAQR2Y3dVooFBm1YaGJ/Wifwj0IRRC5 c8IXQasLKw64pLgkUkZUd+OetzH3nOxEAzEtib9Y1r1OYHJ15Cc+mx4nQBt6bxnr kt1k/Lq+QqufnR1wcZTr6kqrIKpmNJZL+nPE58NySX87rT0M9adgsWTwLCqJzitZ oeFbipV2DSr5cCj0lHNkXT9MJFd7QIaI -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org