$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft File: ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json) Hash identifier: pFRSgp8EFQgLNjxVWLOfJ2QWxLUDyEj6KnsiQn4Mflc= Subject key identifier: FC:FA:2D:9D:3D:9F:21:DC:ED:E3:CE:6A:F0:3C:11:E6:27:2E:D3:55 Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 Certificate issuer: /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft Manifest number: 031C Signing time: Tue 07 May 2024 03:04:52 +0000 Manifest this update: Tue 07 May 2024 03:04:52 +0000 Manifest next update: Tue 14 May 2024 03:04:52 +0000 Files and hashes: 1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: /KmyiQkasZWJH187QVLTbOWJJwK6LJYiOnKEflLOxOc=) 2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: 0ScW7DGAXWsmix/8Yzb69ngaD0iNqJaf2YwWQN6POrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Validity Not Before: May 7 03:04:52 2024 GMT Not After : May 14 03:04:52 2024 GMT Subject: CN=66399a54-47e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:f8:6b:05:cb:d7:3b:c5:45:50:f1:7f:ae: 01:13:10:b0:d8:64:11:82:76:f4:52:31:3b:63:fb: 16:8c:4d:f7:a9:f4:09:05:72:7e:1a:5b:65:17:80: ee:b8:64:69:99:a0:5a:f4:86:bb:7c:bd:ac:86:bc: f7:d5:d4:c9:07:5e:43:bd:c9:b6:cf:6a:a0:ee:b7: 05:d3:46:ac:37:7b:e5:1e:1d:13:98:f5:6e:8f:fa: bd:34:6e:0d:cd:74:41:5b:50:3c:ce:d3:43:f4:cd: af:c5:e2:0f:0c:5c:d7:82:a7:9c:f8:39:b0:8c:1b: 03:cf:a8:9a:65:a0:28:68:97:ef:b9:bc:a0:c2:25: 66:bc:2a:9b:3c:0e:4f:cf:59:21:e5:89:9c:48:e5: 9d:0f:7f:b1:5a:8a:d0:71:14:d6:0f:b0:f8:68:4b: 19:de:6a:93:cc:21:e6:54:ab:6e:db:4f:ea:69:7c: da:93:c1:dc:5d:8f:c9:c5:8d:ec:7e:b9:90:37:dc: b1:cb:57:86:a5:21:45:74:f5:41:64:df:78:07:3d: c6:8a:11:bf:9b:7f:4c:75:23:5e:87:9b:5c:33:a0: 68:28:d8:25:9a:9b:97:4d:6d:42:94:da:3d:00:cf: 0a:fa:78:f1:f9:4c:5b:fd:2a:6b:00:a0:45:3e:fa: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FA:2D:9D:3D:9F:21:DC:ED:E3:CE:6A:F0:3C:11:E6:27:2E:D3:55 X509v3 Authority Key Identifier: keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:f6:52:08:4e:95:3a:b7:26:ae:3f:75:c1:55:87:a4:16:94: c5:c5:d3:c9:45:65:40:de:6a:21:4a:53:db:91:7a:3f:79:66: d0:dd:01:5b:cb:08:aa:67:3c:24:ea:17:a8:fa:38:d5:b9:46: 66:d2:25:b9:62:61:5c:a7:3b:11:1e:0a:f1:08:55:be:87:05: 5e:65:41:4f:b7:fc:23:df:70:ba:90:9a:45:ca:67:d0:a5:87: ce:e2:bf:c2:35:77:a2:b3:a3:16:7b:cc:9a:2d:ab:93:cd:66: 1d:69:29:66:67:62:7b:97:da:b6:f8:0b:95:93:bc:e2:9e:6d: e5:80:61:46:6c:ac:0a:ca:b8:5d:94:d6:54:a7:76:c0:96:7f: 82:df:67:0f:38:d6:85:2b:8a:8a:1b:c6:f3:c9:d4:e9:89:f6: 3c:90:f4:ec:6a:fa:f9:cd:2a:d2:3b:6b:b1:ba:87:71:65:41: 16:db:8c:09:21:a1:b7:f9:f3:39:81:8d:d8:a8:0d:2c:af:6e: 29:b3:43:4c:42:1d:9f:24:d2:6d:9a:0f:2e:54:7b:74:fe:18: e4:04:48:32:68:b1:a5:f1:0d:6c:72:ab:ee:6d:69:06:c3:73: fb:3a:5a:85:6f:be:90:75:c3:56:18:ec:dc:d5:36:5a:eb:c4: b6:28:1e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4OUQxMTAvBgNVBAUTKDEwQjQwQkRCRDE4Mzk0MTdEN0FEMTIzMzJCMEJFNkY5 RkM2RTgxMDUwHhcNMjQwNTA3MDMwNDUyWhcNMjQwNTE0MDMwNDUyWjAYMRYwFAYD VQQDEw02NjM5OWE1NC00N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEv4awXL1zvFRVDxf64BExCw2GQRgnb0UjE7Y/sWjE33qfQJBXJ+GltlF4Du uGRpmaBa9Ia7fL2shrz31dTJB15Dvcm2z2qg7rcF00asN3vlHh0TmPVuj/q9NG4N zXRBW1A8ztND9M2vxeIPDFzXgqec+DmwjBsDz6iaZaAoaJfvubygwiVmvCqbPA5P z1kh5YmcSOWdD3+xWorQcRTWD7D4aEsZ3mqTzCHmVKtu20/qaXzak8HcXY/JxY3s frmQN9yxy1eGpSFFdPVBZN94Bz3GihG/m39MdSNeh5tcM6BoKNglmpuXTW1ClNo9 AM8K+njx+Uxb/SprAKBFPvpMFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPz6LZ09 nyHc7ePOavA8EeYnLtNVMB8GA1UdIwQYMBaAFBC0C9vRg5QX160SMysL5vn8boEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTg5RC9GNDRGNTZFMjgx QzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxCZlhyUkl6S3d2bS1meHVn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VMUUwyOUdEbEJmWHJSSXpLd3ZtLWZ4dWdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTg5RC9GNDRGNTZFMjgxQzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxC ZlhyUkl6S3d2bS1meHVnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN9lIITpU6tyauP3XBVYekFpTFxdPJRWVA3mohSlPbkXo/eWbQ3QFb ywiqZzwk6heo+jjVuUZm0iW5YmFcpzsRHgrxCFW+hwVeZUFPt/wj33C6kJpFymfQ pYfO4r/CNXeis6MWe8yaLauTzWYdaSlmZ2J7l9q2+AuVk7zinm3lgGFGbKwKyrhd lNZUp3bAln+C32cPONaFK4qKG8bzydTpifY8kPTsavr5zSrSO2uxuodxZUEW24wJ IaG3+fM5gY3YqA0sr24ps0NMQh2fJNJtmg8uVHt0/hjkBEgyaLGl8Q1scqvubWkG w3P7OlqFb76QdcNWGOzc1TZa68S2KB5y -----END CERTIFICATE-----Generated at Tue May 7 03:53:36 2024 by rpki-client on console-fra.rpki-client.org