$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: AX10x9sSYRPVJuTaUPWJSLyIF2qb7PJhTXABu/Yt7sI= Subject key identifier: BA:D1:22:C5:A0:4E:1A:76:92:0F:45:94:3C:34:B0:0D:30:F6:B8:2D Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0C3C Signing time: Fri 22 Nov 2024 18:11:01 +0000 Manifest this update: Fri 22 Nov 2024 18:11:00 +0000 Manifest next update: Fri 29 Nov 2024 18:11:00 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: icqM491/XUxjblx9pyiLzaySiC3lTUtkjzJ7CCiIeIA=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Nov 22 18:11:00 2024 GMT Not After : Nov 29 18:11:00 2024 GMT Subject: CN=6740c934-bb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:f3:ec:02:54:d3:41:f4:97:68:8a:dd:9e: 75:ad:5d:53:5b:51:c0:8f:3f:03:4c:6b:03:b7:de: 8d:5a:6c:a4:67:c0:e4:0f:86:f6:d2:fb:08:c1:5e: 89:c0:7d:e1:01:25:3c:1d:16:5c:93:d6:67:d0:42: 48:66:38:a9:7d:77:c6:f3:55:20:e2:6f:80:45:d3: c9:d9:4f:9a:85:99:e4:39:5a:69:40:9b:8a:88:eb: 35:57:6e:ff:d5:88:9d:fe:49:ea:01:41:c4:bd:36: 0a:4c:e1:52:d8:48:37:ab:e6:92:92:72:de:04:88: 84:bc:cb:14:e8:03:2b:72:43:b4:af:18:56:20:f6: 18:69:78:f2:b6:c2:27:fc:90:77:5c:9a:8f:bb:db: 86:11:c4:d7:3a:b9:3f:0f:06:18:77:ca:94:ef:cf: c3:ea:3f:02:e5:e8:13:e7:6b:51:24:6d:54:45:f3: 5c:5f:fa:1d:2f:6b:1e:46:e4:d2:0e:f9:72:cc:fb: 8f:53:f7:ff:98:09:0b:5b:33:c4:3e:8c:9e:85:bd: 6c:81:8d:a8:4d:0b:d0:45:a6:f7:53:eb:2c:5e:50: ec:dd:83:8c:bd:05:f6:23:f1:0c:69:fe:32:7e:63: 1e:82:d1:ed:46:ec:c0:7e:91:1b:5e:00:68:d7:81: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D1:22:C5:A0:4E:1A:76:92:0F:45:94:3C:34:B0:0D:30:F6:B8:2D X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:23:13:54:d1:37:80:5a:ff:f9:e8:11:8b:74:8c:ed:1f:37: 2d:c7:cd:22:ef:81:d4:5d:80:38:f4:03:a5:7e:5b:c5:d1:7f: 2e:67:c6:d0:8e:8a:3d:ff:a9:e5:eb:b0:ff:4f:6f:1d:1c:08: 7e:e2:a7:c6:0e:51:6c:56:eb:57:bf:56:57:00:4e:e4:08:33: 90:51:3d:15:64:f5:ac:6f:19:a8:68:d5:00:84:4a:80:1f:ee: 81:8a:dc:72:b7:94:d9:97:f0:4e:3f:2a:70:fe:97:9f:8f:8e: 69:52:f4:0a:bb:8a:79:ae:86:fd:08:d2:86:09:16:37:33:49: 30:f2:52:72:1d:3b:95:f0:f8:75:57:d7:a3:99:dd:c1:95:8a: 1f:b5:09:95:02:a7:e1:d9:66:e5:f8:db:b5:94:a0:80:50:6c: 5f:28:95:dc:97:e4:92:c2:e1:5a:3b:ce:b7:7f:69:f7:b7:1b: 30:f6:43:43:36:eb:ac:e1:54:9f:9e:5d:32:38:a0:4c:96:b0: ce:30:05:13:34:80:c5:7d:25:67:87:5f:fd:0f:91:cb:eb:c4: 34:09:48:5a:f9:36:cc:05:ff:c0:36:91:18:49:6d:91:e7:34: d0:17:91:99:e1:83:34:58:06:ec:c6:d1:e6:2f:90:44:cb:0c: 6d:b3:51:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjQxMTIyMTgxMTAwWhcNMjQxMTI5MTgxMTAwWjAYMRYwFAYD VQQDEw02NzQwYzkzNC1iYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2vz7AJU00H0l2iK3Z51rV1TW1HAjz8DTGsDt96NWmykZ8DkD4b20vsIwV6J wH3hASU8HRZck9Zn0EJIZjipfXfG81Ug4m+ARdPJ2U+ahZnkOVppQJuKiOs1V27/ 1Yid/knqAUHEvTYKTOFS2Eg3q+aSknLeBIiEvMsU6AMrckO0rxhWIPYYaXjytsIn /JB3XJqPu9uGEcTXOrk/DwYYd8qU78/D6j8C5egT52tRJG1URfNcX/odL2seRuTS DvlyzPuPU/f/mAkLWzPEPoyehb1sgY2oTQvQRab3U+ssXlDs3YOMvQX2I/EMaf4y fmMegtHtRuzAfpEbXgBo14FBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrRIsWg Thp2kg9FlDw0sA0w9rgtMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpIxNU0TeAWv/56BGLdIztHzctx80i74HUXYA49AOlflvF0X8uZ8bQ joo9/6nl67D/T28dHAh+4qfGDlFsVutXv1ZXAE7kCDOQUT0VZPWsbxmoaNUAhEqA H+6Bitxyt5TZl/BOPypw/pefj45pUvQKu4p5rob9CNKGCRY3M0kw8lJyHTuV8Ph1 V9ejmd3BlYoftQmVAqfh2Wbl+Nu1lKCAUGxfKJXcl+SSwuFaO863f2n3txsw9kND Nuus4VSfnl0yOKBMlrDOMAUTNIDFfSVnh1/9D5HL68Q0CUha+TbMBf/ANpEYSW2R 5zTQF5GZ4YM0WAbsxtHmL5BEywxts1G3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org