$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: PJEuNl2mBA/AhIu4TT3VynRA9IMW4xGZlGnn4TVx1xM= Subject key identifier: AB:11:CE:64:04:C5:07:69:DD:3A:DC:F9:90:1E:24:7B:30:57:E6:4B Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0BD1 Signing time: Sat 04 May 2024 19:14:14 +0000 Manifest this update: Sat 04 May 2024 19:14:14 +0000 Manifest next update: Sat 11 May 2024 19:14:14 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: Ezpk2jV3VXdObC4nDurfM7FHhGVHr7AuuojLURtkVSA=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: AnrVwsV/MhQFcPIiVWXg5bhOIcCXN96Hs63MIGs/35s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: May 4 19:14:14 2024 GMT Not After : May 11 19:14:14 2024 GMT Subject: CN=66368906-6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:1c:72:c9:26:41:9c:5a:40:a4:bd:c8:d3: bc:47:43:38:2e:71:f7:fc:f3:f6:87:63:53:a4:e2: e1:d5:48:e7:55:c0:b4:c8:a2:20:2d:72:79:89:6a: 13:3a:9e:c5:97:bb:99:98:6c:85:a0:9f:34:4e:89: f5:3d:e7:79:08:48:7c:2f:a3:ee:b9:24:0c:31:0a: a0:6e:5f:a2:71:bd:66:5e:e2:fb:d8:1e:3e:ec:32: df:6c:17:3a:69:17:2d:77:c2:1d:9f:4a:6b:bb:b0: 40:b1:42:c9:2c:cc:1f:f4:21:d2:98:6a:0c:fd:80: fe:c0:21:0d:88:c1:39:1e:6f:87:e1:df:36:53:10: 93:14:36:5b:c5:0e:04:fc:d5:20:b9:8b:21:10:da: 84:0a:2d:b6:6d:eb:8b:13:1b:c7:95:e3:6f:fa:e6: 88:46:eb:7f:0a:d1:3d:15:76:b5:2b:b9:8c:7a:f8: c9:a7:3f:fb:3c:d2:c5:7f:e9:a6:c3:da:f3:32:21: f5:dc:55:33:ac:ab:1a:e7:a4:d6:df:c7:a2:82:62: 89:2c:73:e3:21:92:1a:e7:8e:c1:73:2c:f9:79:96: cc:55:88:33:9b:0c:00:cc:c3:87:d8:23:77:39:d0: e7:2d:e3:4c:05:2f:ce:b8:91:dd:b0:30:c9:24:07: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:11:CE:64:04:C5:07:69:DD:3A:DC:F9:90:1E:24:7B:30:57:E6:4B X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:00:69:47:cd:f9:b7:0d:d4:b2:a1:cf:07:ac:78:67:ab:d0: c1:f6:f8:a6:db:d9:c7:8b:db:1e:3f:ba:6a:ac:56:81:bd:f9: 9f:cb:11:57:a6:25:87:a5:2e:3a:b9:c2:2f:3c:1c:a8:68:b6: 17:40:09:2c:c8:e6:bb:15:ce:85:47:3f:d7:97:b5:dc:b2:8c: 0a:8e:93:13:28:37:f8:7d:73:09:3d:1f:82:96:d7:9c:f3:da: a0:36:c5:12:4a:ac:be:d6:ee:d1:50:ef:56:94:bb:c5:a9:ca: d1:62:a0:1c:be:5b:99:32:4f:c8:4e:b6:b4:20:9c:15:38:02: 6a:ca:c0:ca:0e:bf:90:7b:ab:57:6e:29:70:85:71:61:c5:e3: eb:fa:19:62:6f:4a:28:de:66:80:84:96:2e:24:92:f0:06:f6: 10:f3:bc:a9:29:19:b9:68:86:5b:d4:c7:39:7a:f2:de:b5:d6: bd:dd:12:43:03:cb:bd:f1:15:47:76:d8:fb:46:88:27:d1:92: 50:c7:7e:69:74:15:59:ba:24:5f:27:02:09:1a:ff:aa:79:93: 67:a7:cb:47:d4:1c:21:47:5f:b3:c2:19:88:b2:e0:00:71:55: 5d:7e:3b:b4:bc:f8:a3:f6:d8:c9:5d:91:dd:96:48:6e:b9:ff: 30:76:ae:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjQwNTA0MTkxNDE0WhcNMjQwNTExMTkxNDE0WjAYMRYwFAYD VQQDEw02NjM2ODkwNi02NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Z0ccskmQZxaQKS9yNO8R0M4LnH3/PP2h2NTpOLh1UjnVcC0yKIgLXJ5iWoT Op7Fl7uZmGyFoJ80Ton1Ped5CEh8L6PuuSQMMQqgbl+icb1mXuL72B4+7DLfbBc6 aRctd8Idn0pru7BAsULJLMwf9CHSmGoM/YD+wCENiME5Hm+H4d82UxCTFDZbxQ4E /NUguYshENqECi22beuLExvHleNv+uaIRut/CtE9FXa1K7mMevjJpz/7PNLFf+mm w9rzMiH13FUzrKsa56TW38eigmKJLHPjIZIa547Bcyz5eZbMVYgzmwwAzMOH2CN3 OdDnLeNMBS/OuJHdsDDJJAcEkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsRzmQE xQdp3Trc+ZAeJHswV+ZLMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoAGlHzfm3DdSyoc8HrHhnq9DB9vim29nHi9seP7pqrFaBvfmfyxFX piWHpS46ucIvPByoaLYXQAksyOa7Fc6FRz/Xl7XcsowKjpMTKDf4fXMJPR+Cltec 89qgNsUSSqy+1u7RUO9WlLvFqcrRYqAcvluZMk/ITra0IJwVOAJqysDKDr+Qe6tX bilwhXFhxePr+hlib0oo3maAhJYuJJLwBvYQ87ypKRm5aIZb1Mc5evLetda93RJD A8u98RVHdtj7Rogn0ZJQx35pdBVZuiRfJwIJGv+qeZNnp8tH1BwhR1+zwhmIsuAA cVVdfju0vPij9tjJXZHdlkhuuf8wdq5e -----END CERTIFICATE-----Generated at Sat May 4 20:37:15 2024 by rpki-client on console-fra.rpki-client.org