$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json) Hash identifier: h+jYuobQuWQly7PbQiWiwo3p0HTTCiYjxbtBec9jNMY= Subject key identifier: 78:0E:0D:62:26:43:5A:28:5F:69:73:B3:03:7D:15:52:46:EE:63:C1 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft Manifest number: 57 Signing time: Wed 15 May 2024 07:58:56 +0000 Manifest this update: Wed 15 May 2024 07:58:55 +0000 Manifest next update: Wed 22 May 2024 07:58:55 +0000 Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: z64H8vRnZY8+pl/3+ZOB5xz+axDMHbhP8ENHTGOS27E=) 2: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: qKJWdgZS/qvGfDKzLjOnoqxHOKiBuuKPLXiFdy2+iuM=) 3: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: 0mFiKIphKVazFgSEsBphiIuO3MRIPBucEk0NiuaxBLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: May 15 07:58:55 2024 GMT Not After : May 22 07:58:55 2024 GMT Subject: CN=66446b40-13f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:04:4e:eb:ed:36:a3:aa:5a:37:09:69:d1: 72:0a:1c:0f:b9:f6:4c:08:3f:68:e0:5b:10:31:65: f1:08:7d:51:01:73:71:ca:42:42:f3:3f:40:9f:94: 43:a5:13:82:fe:94:5b:55:09:73:6b:38:27:ab:54: ef:e2:c4:b2:9b:1d:96:71:eb:eb:2f:37:3e:92:5c: b9:ec:5e:dd:13:ff:03:72:dc:16:c7:d0:fd:56:37: 8f:b6:29:4b:9c:fc:2a:85:3a:b7:9d:02:5e:dd:f5: 6b:b5:4a:72:2e:dc:09:0b:da:b5:8b:1c:92:2f:ef: 77:b9:fd:30:d4:4f:7f:42:f6:81:96:7c:73:1f:c7: 11:3d:01:7b:a6:c1:16:b4:ef:ff:7f:d3:73:c0:ed: e8:98:e9:fa:4d:2a:10:6b:48:b2:7f:0b:ee:a8:60: e6:df:79:f3:61:c7:70:fa:a9:08:2d:22:b5:50:fb: 19:c6:70:15:e3:13:af:ae:1d:6b:e9:62:3a:bc:1e: 37:98:a6:2d:e1:f5:e1:f0:5a:8d:ab:a9:e6:31:9a: 8a:a1:6f:66:9b:94:c4:ce:b6:52:2a:1e:c5:d7:bf: 87:50:56:6b:59:23:c2:9c:aa:0e:97:ad:67:75:c6: 18:80:65:cd:11:9d:4e:53:07:c8:2b:c1:55:3d:57: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0E:0D:62:26:43:5A:28:5F:69:73:B3:03:7D:15:52:46:EE:63:C1 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:af:b7:c4:57:57:66:cf:f6:45:f8:c0:7e:5a:aa:e9:3f:f2: 1c:af:6e:9d:61:7e:1b:66:ca:02:d5:c3:f4:32:03:e4:48:09: 6b:63:d0:27:11:45:fb:92:a2:dd:9d:98:46:0f:6a:0b:cd:d3: d7:a5:66:02:f7:5e:b8:51:5f:a9:25:d0:d0:f3:37:22:8d:24: 79:3b:cf:31:96:15:04:5a:a5:5f:4e:1f:7e:0f:63:bd:88:90: 44:b8:ed:9b:3b:fc:5d:87:c0:15:2c:20:20:28:21:20:a0:b6: f1:53:82:79:de:c3:d7:de:22:57:ed:f4:4e:6a:69:8f:e5:43: af:a6:ec:50:18:df:f2:31:60:90:71:71:46:7e:f2:7a:c2:4e: 89:13:4f:52:e7:ed:ac:36:d3:8d:9f:52:c4:7c:7d:2d:a6:ff: f8:0e:da:b5:d6:9c:c4:00:12:9d:05:af:b5:db:a8:20:02:3e: 23:2a:86:ef:20:3e:94:e3:bc:42:76:ba:f6:ec:1d:d0:3b:bc: 36:4b:65:69:02:16:87:02:41:b1:9e:52:48:76:0c:8b:f4:f2: a5:07:3c:02:a4:3f:f5:93:cf:fc:63:64:b0:5c:4a:6e:f7:39: b5:40:41:10:80:67:f1:43:6d:75:70:94:5a:fa:f7:db:2a:ae: b5:83:3d:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MkZEMDExMC8GA1UEBRMoN0E1QzRERDBBM0JCOUNEODE0QjIxNzRBRjY5M0UzRjc0 MTRCOTk1QjAeFw0yNDA1MTUwNzU4NTVaFw0yNDA1MjIwNzU4NTVaMBgxFjAUBgNV BAMTDTY2NDQ2YjQwLTEzZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2vARO6+02o6paNwlp0XIKHA+59kwIP2jgWxAxZfEIfVEBc3HKQkLzP0CflEOl E4L+lFtVCXNrOCerVO/ixLKbHZZx6+svNz6SXLnsXt0T/wNy3BbH0P1WN4+2KUuc /CqFOredAl7d9Wu1SnIu3AkL2rWLHJIv73e5/TDUT39C9oGWfHMfxxE9AXumwRa0 7/9/03PA7eiY6fpNKhBrSLJ/C+6oYObfefNhx3D6qQgtIrVQ+xnGcBXjE6+uHWvp Yjq8HjeYpi3h9eHwWo2rqeYxmoqhb2ablMTOtlIqHsXXv4dQVmtZI8Kcqg6XrWd1 xhiAZc0RnU5TB8grwVU9VysnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeA4NYiZD WihfaXOzA30VUkbuY8EwHwYDVR0jBBgwFoAUelxN0KO7nNgUshdK9pPj90FLmVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyRkQwLzJDOUFBMzFDOTU3 NjExRUU4MkVGQ0IxQ0M0RjlBRTAyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1W cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWx4TjBLTzduTmdVc2hkSzlwUGo5MEZMbVZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy RkQwLzJDOUFBMzFDOTU3NjExRUU4MkVGQ0IxQ0M0RjlBRTAyL2VseE4wS083bk5n VXNoZEs5cFBqOTBGTG1Wcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqvt8RXV2bP9kX4wH5aquk/8hyvbp1hfhtmygLVw/QyA+RICWtj0CcR RfuSot2dmEYPagvN09elZgL3XrhRX6kl0NDzNyKNJHk7zzGWFQRapV9OH34PY72I kES47Zs7/F2HwBUsICAoISCgtvFTgnnew9feIlft9E5qaY/lQ6+m7FAY3/IxYJBx cUZ+8nrCTokTT1Ln7aw2042fUsR8fS2m//gO2rXWnMQAEp0Fr7XbqCACPiMqhu8g PpTjvEJ2uvbsHdA7vDZLZWkCFocCQbGeUkh2DIv08qUHPAKkP/WTz/xjZLBcSm73 ObVAQRCAZ/FDbXVwlFr699sqrrWDPSo= -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org