$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json) Hash identifier: EsVq80kwXzyiotPCMZgld275/iql8JNBfNQ5yTytzrs= Subject key identifier: A8:7D:B8:6C:E9:50:36:C4:AF:C9:80:FB:20:DA:EF:B0:39:0B:11:A8 Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft Manifest number: 0125 Signing time: Thu 21 Nov 2024 02:57:12 +0000 Manifest this update: Thu 21 Nov 2024 02:57:11 +0000 Manifest next update: Thu 28 Nov 2024 02:57:11 +0000 Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: O2yYK8Pev4xbKoyZ6Pjh5gwl+kvMsggW0XCMoI0i1Zo=) 2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: /4irTBpoiGzznlRheaSOxr6kHjZLLSh0iN5TT10J9KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: Nov 21 02:57:11 2024 GMT Not After : Nov 28 02:57:11 2024 GMT Subject: CN=673ea187-8960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:86:db:47:c7:7e:a5:df:eb:a9:34:a8:90: 87:53:d4:32:1e:7d:4b:2a:c6:fe:81:36:93:5f:22: 92:77:8c:0e:93:31:8a:d5:d0:c5:e7:b7:cd:ce:29: dc:56:cb:06:55:ca:99:a2:0a:5a:f2:fb:d0:c7:aa: 5b:80:14:30:e8:13:89:ef:c1:1b:84:a6:bc:5c:05: 68:45:b1:29:3b:44:ba:ea:e0:eb:7c:4b:9d:d1:db: d3:7f:13:8e:8c:67:e4:88:f9:4f:fd:b2:8c:b8:2e: 2d:8e:e6:2e:b4:a5:a9:26:32:cf:3b:d0:5f:6f:06: 1c:90:7c:7b:b6:fe:b6:b2:fd:f5:4b:d6:4d:46:12: a7:7f:79:d5:e9:96:32:6a:8e:bd:4a:99:5f:9a:fe: 3b:c3:21:a5:c1:9a:b5:c0:c0:8a:ae:f3:0e:5c:11: a7:25:74:b5:b5:6e:1f:9f:ef:25:a5:52:4f:4e:55: 6c:c3:60:69:c2:49:3a:d3:61:89:93:47:b4:ed:36: 54:e7:f7:02:9b:2d:c8:32:cb:a8:72:bd:d8:a8:85: fe:ae:f4:e8:c0:d0:e4:c6:7d:73:ca:46:24:2f:21: 28:4b:05:c9:c4:d1:27:ae:42:7c:8c:19:3b:fc:b4: 78:5b:e8:04:b7:20:d0:a2:44:dd:7c:7a:50:a5:f9: f9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:B8:6C:E9:50:36:C4:AF:C9:80:FB:20:DA:EF:B0:39:0B:11:A8 X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f0:77:be:56:06:18:49:ed:d5:ba:da:96:f9:81:9e:54:c5: 7d:8b:f5:a6:8b:6c:02:d6:57:36:b3:73:39:37:11:31:b2:5d: 51:b3:38:a2:d7:a1:54:bb:99:34:31:51:55:b7:eb:09:5f:91: 33:76:bf:d8:13:4d:76:bc:08:4d:0c:67:2e:16:45:9f:0e:23: 4d:58:c0:3a:88:15:0c:ec:7d:0e:e8:02:f3:03:cd:ea:f9:04: 73:9a:d6:77:c7:41:89:6b:18:a1:12:8f:f1:77:cb:8e:c4:8b: aa:ff:72:39:a8:11:b7:55:c3:e3:14:44:48:c1:65:8b:2e:a7: 6e:81:06:33:0a:e4:1f:53:55:1a:8e:f7:37:3f:0b:ac:c0:1f: 5a:02:e2:fa:04:e6:34:26:61:8e:4e:f1:86:61:6d:3d:e3:65: 38:b0:2a:4c:ba:55:50:18:04:c8:08:a9:52:f0:41:a7:cf:22: 4a:8d:6c:6e:78:04:2a:36:f9:15:bc:51:a8:79:be:04:9b:7e: 75:37:20:7a:d4:26:ae:10:71:c6:77:4f:94:b7:40:c6:e4:01: d0:2a:5e:b5:c2:4d:52:c9:d2:88:6e:aa:b2:dd:0c:2d:3c:70: 80:4c:23:34:f2:dc:ff:bd:72:09:a0:f8:71:27:ad:ad:50:52: 08:24:e3:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjQxMTIxMDI1NzExWhcNMjQxMTI4MDI1NzExWjAYMRYwFAYD VQQDEw02NzNlYTE4Ny04OTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAiG20fHfqXf66k0qJCHU9QyHn1LKsb+gTaTXyKSd4wOkzGK1dDF57fNzinc VssGVcqZogpa8vvQx6pbgBQw6BOJ78EbhKa8XAVoRbEpO0S66uDrfEud0dvTfxOO jGfkiPlP/bKMuC4tjuYutKWpJjLPO9BfbwYckHx7tv62sv31S9ZNRhKnf3nV6ZYy ao69Splfmv47wyGlwZq1wMCKrvMOXBGnJXS1tW4fn+8lpVJPTlVsw2Bpwkk602GJ k0e07TZU5/cCmy3IMsuocr3YqIX+rvTowNDkxn1zykYkLyEoSwXJxNEnrkJ8jBk7 /LR4W+gEtyDQokTdfHpQpfn5FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh9uGzp UDbEr8mA+yDa77A5CxGoMB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC82MjYyRjZENkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUha SkhwbW5maDRHNk1CTjllbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA48He+VgYYSe3VutqW+YGeVMV9i/Wmi2wC1lc2s3M5NxExsl1Rszii 16FUu5k0MVFVt+sJX5Ezdr/YE012vAhNDGcuFkWfDiNNWMA6iBUM7H0O6ALzA83q +QRzmtZ3x0GJaxihEo/xd8uOxIuq/3I5qBG3VcPjFERIwWWLLqdugQYzCuQfU1Ua jvc3PwuswB9aAuL6BOY0JmGOTvGGYW0942U4sCpMulVQGATICKlS8EGnzyJKjWxu eAQqNvkVvFGoeb4Em351NyB61CauEHHGd0+Ut0DG5AHQKl61wk1SydKIbqqy3Qwt PHCATCM08tz/vXIJoPhxJ62tUFIIJOPW -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org