$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: SgHc+8loyWiov3k8jjhL0A2PFMla1LOWGYH7i73xJik= Subject key identifier: 9F:B1:C3:87:43:F5:17:61:07:46:86:53:E3:5D:E6:F2:1A:20:FB:64 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 0713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 0703 Signing time: Fri 22 Nov 2024 21:31:45 +0000 Manifest this update: Fri 22 Nov 2024 21:31:44 +0000 Manifest next update: Fri 29 Nov 2024 21:31:44 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: p6VDTWKeca6+ejpNo68TxHNEFG+uxhuDD5ZNtaXn48k=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: +ebPDBzqWaOOxu18OJS9gA27Iyig6p/f8enEMBE6spw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Nov 22 21:31:44 2024 GMT Not After : Nov 29 21:31:44 2024 GMT Subject: CN=6740f840-deda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:ed:c2:0d:62:56:86:d3:7f:e0:34:85:96: 0f:ec:6a:18:e6:de:14:78:df:ff:3d:62:ac:9a:21: 5d:de:dd:11:80:14:0c:b6:25:6d:a5:97:45:a6:46: a9:74:65:2b:14:ca:6a:c0:86:88:8b:e9:55:66:cd: d8:11:3f:c8:06:5e:ed:fb:fc:8d:60:08:95:2b:5e: a5:86:ee:59:01:19:38:d9:9a:bc:e3:b3:c6:ca:15: 1f:04:50:84:8e:1c:04:45:f2:19:a7:ce:65:c5:e5: e2:55:0f:7b:fa:8b:38:ea:73:98:b2:67:71:63:2a: ea:3d:d4:59:7c:a0:67:0a:99:d4:13:1b:c5:79:cb: b8:39:aa:43:f8:03:8e:b5:d0:48:d5:44:95:b7:04: ae:a8:f2:54:37:9d:30:ea:81:96:ad:4f:32:1d:93: c4:4d:73:4f:0e:3f:f8:a9:1e:9b:9e:ec:b5:a8:3c: 69:ee:49:42:f0:1a:09:6b:d8:15:c4:82:eb:ca:0b: d8:92:4d:ea:34:c3:28:0a:b7:7c:91:96:7c:8a:5d: 83:5e:76:94:2c:f0:23:42:cb:18:1c:f0:20:2b:e8: b2:97:44:c7:c3:75:f6:d1:93:a3:61:7b:52:22:98: 12:c1:bc:cc:30:bd:e7:95:62:87:31:76:26:95:aa: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B1:C3:87:43:F5:17:61:07:46:86:53:E3:5D:E6:F2:1A:20:FB:64 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:50:a2:ce:ec:24:21:a2:d1:70:75:ca:bc:fa:33:7f:f0:6e: 2a:09:42:f4:88:ac:97:ab:11:8b:5f:72:62:03:61:4e:9c:04: 62:8d:26:2d:3b:88:7c:7e:de:2c:a3:1f:f5:d1:c8:14:ea:8c: 47:5c:45:5f:73:07:6d:6c:d3:f3:94:d8:eb:46:19:50:aa:3c: ba:eb:84:4e:3d:ff:45:d6:be:ff:f1:c7:22:86:91:93:5b:2f: 33:5d:d8:94:91:b0:0f:03:87:71:e8:12:5a:e6:fa:22:e9:3d: 10:6e:49:41:26:4c:f4:5e:8b:9e:ce:d1:dd:a6:e6:79:89:91: 79:95:c6:34:db:5c:4d:6b:1c:b3:da:a1:1e:34:bd:30:2a:85: 69:de:ad:01:58:09:45:2c:e2:a8:55:d9:24:a2:8f:e7:f7:63: 09:c8:a2:39:c9:41:5a:93:c5:af:40:aa:25:17:a0:87:df:10: 6d:2a:ad:7a:4f:ef:9e:5c:e3:80:ca:c9:8f:f1:e1:2d:78:9f: 77:3d:20:47:3a:e7:13:7e:df:22:88:f9:83:5a:f9:83:a6:b3: 91:4a:b1:e2:9c:28:95:a0:aa:71:a9:e4:72:c8:9e:ad:1e:78: f8:fc:b2:7c:21:87:3f:84:53:1e:20:50:20:e6:3b:29:ca:18: 55:44:2d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjQxMTIyMjEzMTQ0WhcNMjQxMTI5MjEzMTQ0WjAYMRYwFAYD VQQDEw02NzQwZjg0MC1kZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTntwg1iVobTf+A0hZYP7GoY5t4UeN//PWKsmiFd3t0RgBQMtiVtpZdFpkap dGUrFMpqwIaIi+lVZs3YET/IBl7t+/yNYAiVK16lhu5ZARk42Zq847PGyhUfBFCE jhwERfIZp85lxeXiVQ97+os46nOYsmdxYyrqPdRZfKBnCpnUExvFecu4OapD+AOO tdBI1USVtwSuqPJUN50w6oGWrU8yHZPETXNPDj/4qR6bnuy1qDxp7klC8BoJa9gV xILrygvYkk3qNMMoCrd8kZZ8il2DXnaULPAjQssYHPAgK+iyl0THw3X20ZOjYXtS IpgSwbzMML3nlWKHMXYmlarqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+xw4dD 9RdhB0aGU+Nd5vIaIPtkMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+UKLO7CQhotFwdcq8+jN/8G4qCUL0iKyXqxGLX3JiA2FOnARijSYt O4h8ft4sox/10cgU6oxHXEVfcwdtbNPzlNjrRhlQqjy664ROPf9F1r7/8ccihpGT Wy8zXdiUkbAPA4dx6BJa5voi6T0QbklBJkz0XoueztHdpuZ5iZF5lcY021xNaxyz 2qEeNL0wKoVp3q0BWAlFLOKoVdkkoo/n92MJyKI5yUFak8WvQKolF6CH3xBtKq16 T++eXOOAysmP8eEteJ93PSBHOucTft8iiPmDWvmDprORSrHinCiVoKpxqeRyyJ6t Hnj4/LJ8IYc/hFMeIFAg5jspyhhVRC3u -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org