$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json) Hash identifier: 9gnBU61YOyuNCi0JDu2KXlT22hCXB9VIlWve+JdTcQw= Subject key identifier: D4:84:28:BE:38:EA:6B:97:2B:4D:E7:85:B9:81:E4:E9:FB:0F:62:40 Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft Manifest number: B9 Signing time: Wed 01 May 2024 06:45:45 +0000 Manifest this update: Wed 01 May 2024 06:45:44 +0000 Manifest next update: Wed 08 May 2024 06:45:44 +0000 Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: r2AajnzmK3pWmtmNZZCb6Xi5wH+vBu1muf3yVBDGKKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: May 1 06:45:44 2024 GMT Not After : May 8 06:45:44 2024 GMT Subject: CN=6631e518-9840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:2e:dd:c5:ad:81:ac:d5:71:7e:5a:a7:a5: 92:c4:55:28:ef:c3:2b:90:8b:94:0e:39:cc:ad:7d: 84:61:66:9e:ee:38:11:85:94:72:57:fc:0b:9d:ad: 30:0f:39:e9:4f:0a:ad:21:43:72:2e:bb:cb:c6:65: 3b:70:18:ac:a7:c0:e1:74:9a:9a:c8:75:8b:6a:52: 6f:66:06:e1:5b:80:c8:a9:c7:b5:37:e9:ec:09:36: 09:59:5f:b4:d0:8f:93:c1:b9:b4:99:c8:c5:b3:1b: 5c:da:17:b4:b2:30:e9:78:ee:7b:d2:b7:09:7c:ff: d0:2c:11:ff:71:45:10:84:b9:98:05:38:80:3e:50: df:d6:70:09:fe:cd:3c:96:a4:33:00:3d:95:0d:4e: f9:66:4b:e7:82:6b:02:5c:0b:41:b8:a2:31:d1:1d: 3f:f1:70:7b:66:aa:35:c0:f4:a3:fb:0d:1d:87:1c: f1:09:37:8e:6e:ec:cc:17:de:7e:23:70:fd:f6:88: 98:ff:a3:06:f8:be:0d:b7:de:69:bd:20:ae:49:95: 1b:28:cf:3f:2b:11:33:93:7b:06:85:a4:e7:6a:c9: 34:41:b4:a8:ce:eb:ba:d4:6a:9d:81:f9:77:80:8a: 17:f7:5c:5f:a9:58:1c:61:05:1c:31:5e:bf:1a:89: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:28:BE:38:EA:6B:97:2B:4D:E7:85:B9:81:E4:E9:FB:0F:62:40 X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:fd:40:01:86:7b:de:72:2a:6f:6b:43:f5:22:24:07:57: 71:37:02:69:24:62:56:90:7c:bb:71:31:95:53:85:57:06:e4: 73:06:cf:28:dc:1f:de:9c:71:58:53:72:8f:8a:74:f1:ac:e8: db:fb:74:91:cf:b7:06:58:5d:e8:0e:99:c7:de:18:fb:48:95: c8:6c:77:ff:30:92:43:54:ed:73:10:4e:07:86:48:36:f5:d5: 76:c7:75:f3:24:bb:a3:57:1d:b2:b4:c4:75:d3:ce:aa:82:5d: 5a:80:04:7e:a0:b0:06:f7:98:de:c4:87:c6:17:ca:72:d4:b4: 83:24:50:d0:db:8c:7b:29:bc:65:4a:c0:d4:dd:f8:22:20:6c: d3:3b:fa:9f:9c:74:16:e7:0f:23:4c:c8:6b:30:d6:7f:99:63: 1d:44:58:c4:69:2c:04:af:b5:a6:94:ba:d7:01:ea:1f:00:7c: 1a:8c:fe:72:35:b5:7b:c9:cd:37:4b:0b:36:3b:8b:9a:a8:26: 9f:05:c0:6e:32:be:8d:f7:1c:b7:37:b3:c7:39:6a:dc:57:9c: 5a:4a:8b:b8:87:8e:8e:82:d6:6a:aa:fe:23:5c:c8:77:6a:c2: 99:d4:3c:58:a7:ba:1f:a7:0b:c5:0d:b2:f9:a1:56:a4:52:5d: 66:03:e3:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjQwNTAxMDY0NTQ0WhcNMjQwNTA4MDY0NTQ0WjAYMRYwFAYD VQQDEw02NjMxZTUxOC05ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MMu3cWtgazVcX5ap6WSxFUo78MrkIuUDjnMrX2EYWae7jgRhZRyV/wLna0w DznpTwqtIUNyLrvLxmU7cBisp8DhdJqayHWLalJvZgbhW4DIqce1N+nsCTYJWV+0 0I+Twbm0mcjFsxtc2he0sjDpeO570rcJfP/QLBH/cUUQhLmYBTiAPlDf1nAJ/s08 lqQzAD2VDU75ZkvngmsCXAtBuKIx0R0/8XB7Zqo1wPSj+w0dhxzxCTeObuzMF95+ I3D99oiY/6MG+L4Nt95pvSCuSZUbKM8/KxEzk3sGhaTnask0QbSozuu61Gqdgfl3 gIoX91xfqVgcYQUcMV6/GokK9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSEKL44 6muXK03nhbmB5On7D2JAMB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC82MjYyRjZENkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUha SkhwbW5maDRHNk1CTjllbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ZP1AAYZ73nIqb2tD9SIkB1dxNwJpJGJWkHy7cTGVU4VXBuRzBs8o 3B/enHFYU3KPinTxrOjb+3SRz7cGWF3oDpnH3hj7SJXIbHf/MJJDVO1zEE4Hhkg2 9dV2x3XzJLujVx2ytMR1086qgl1agAR+oLAG95jexIfGF8py1LSDJFDQ24x7Kbxl SsDU3fgiIGzTO/qfnHQW5w8jTMhrMNZ/mWMdRFjEaSwEr7WmlLrXAeofAHwajP5y NbV7yc03Sws2O4uaqCafBcBuMr6N9xy3N7PHOWrcV5xaSou4h46OgtZqqv4jXMh3 asKZ1DxYp7ofpwvFDbL5oVakUl1mA+Mu -----END CERTIFICATE-----Generated at Wed May 1 07:55:38 2024 by rpki-client on console-fra.rpki-client.org