$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: GUxy63OaQketkmyMhVNFjFUM2KyyJJPJ0DdMAVS1RTQ= Subject key identifier: D5:8A:4E:F9:70:3D:2C:71:0D:44:F4:98:78:6F:D7:94:AF:0B:3C:F0 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0950 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0949 Signing time: Mon 06 May 2024 21:12:40 +0000 Manifest this update: Mon 06 May 2024 21:12:40 +0000 Manifest next update: Mon 13 May 2024 21:12:40 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: CMEakCNrZtRI8hcm4GRLlXgd8Iky3Q5hDrkbjrOK0rU=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: 18SIX3dz7M2BarL24RVj7+MW8xIKhIQyEnwHIV5fJvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2384 (0x950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: May 6 21:12:40 2024 GMT Not After : May 13 21:12:40 2024 GMT Subject: CN=663947c8-4047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:dd:68:3d:7a:d5:2d:1c:59:78:35:ee:e6: 6b:5a:36:9b:af:4c:ac:54:99:05:26:07:35:48:78: e1:06:f9:1f:81:bf:6b:6b:75:15:76:f0:72:7e:96: 85:98:06:45:13:57:f0:74:5d:a1:d6:c7:ca:c7:2c: d6:71:11:85:81:77:52:4a:21:d2:ef:f4:e9:4b:69: 87:8b:bb:cc:1b:30:e2:c7:a0:e4:1e:68:63:9f:13: ec:12:a5:ca:8d:40:2d:a7:64:d9:f4:b5:7c:b5:d5: 3c:a8:94:c6:c7:c0:c3:8f:af:ad:5a:bf:e7:a5:3c: 59:d2:7b:62:00:81:fb:e3:f5:22:2b:99:95:9c:2a: f9:4f:5d:2d:8c:b2:1f:44:b3:37:bd:40:8e:99:19: 03:14:f7:d8:2a:73:0d:34:cd:d4:ac:f5:08:09:28: 35:d4:26:ae:b5:21:dd:89:a7:32:4c:cf:8a:d5:2e: c7:dc:61:bb:77:75:1a:90:3e:2f:96:38:d2:ad:1b: e0:5b:72:c0:96:34:d2:a8:50:89:80:2a:9e:c4:59: 90:61:9c:ad:0b:2b:ab:e1:52:75:86:93:4a:e0:fa: df:f8:40:f0:d0:5b:aa:72:de:9b:a1:f8:ea:03:a9: 3f:1f:78:1c:ae:23:0a:e8:3f:c7:ca:26:a6:76:e8: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:4E:F9:70:3D:2C:71:0D:44:F4:98:78:6F:D7:94:AF:0B:3C:F0 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:21:f7:da:c2:88:98:70:0c:24:63:24:61:65:7b:c4:bf:2c: 73:e1:2d:fd:10:02:b5:16:14:d7:8c:4d:4e:d6:75:05:60:5f: 2e:4c:65:08:a8:58:b7:26:ee:ec:f8:0a:68:90:ff:5c:36:f6: 52:af:c0:8f:20:57:5f:cb:63:bc:50:50:1c:4e:cb:62:6e:66: 4e:af:8d:be:1e:90:67:2c:9a:55:12:64:9a:d0:77:e3:97:ce: a8:68:18:eb:a3:de:0d:fd:f3:2f:2f:e1:ac:de:37:66:a9:52: ce:a2:24:60:ec:14:1c:63:cb:8c:a0:0a:86:9c:af:b5:a3:fd: 06:b0:9b:c4:ef:27:5e:08:18:de:a5:e5:5b:4c:e4:21:b0:2d: 45:46:eb:0f:07:ed:07:31:1a:08:47:bc:04:7b:d4:4f:a4:2f: fd:3c:27:76:20:a7:49:e6:4e:cf:aa:c0:bc:4b:ef:62:c8:64: 7e:dc:03:0b:22:eb:7a:30:16:d4:42:80:75:86:51:59:6c:62: eb:ba:e9:a4:17:97:f7:7e:f8:88:73:2c:d9:fc:2f:c4:8e:bb: e0:74:9f:02:fc:2b:04:29:60:0f:5a:89:d0:cf:5d:b1:89:35: 86:06:8c:1a:44:fd:81:ed:68:c4:49:8b:75:41:1b:ec:09:bc: c8:ae:7a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjQwNTA2MjExMjQwWhcNMjQwNTEzMjExMjQwWjAYMRYwFAYD VQQDEw02NjM5NDdjOC00MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIzdaD161S0cWXg17uZrWjabr0ysVJkFJgc1SHjhBvkfgb9ra3UVdvByfpaF mAZFE1fwdF2h1sfKxyzWcRGFgXdSSiHS7/TpS2mHi7vMGzDix6DkHmhjnxPsEqXK jUAtp2TZ9LV8tdU8qJTGx8DDj6+tWr/npTxZ0ntiAIH74/UiK5mVnCr5T10tjLIf RLM3vUCOmRkDFPfYKnMNNM3UrPUICSg11CautSHdiacyTM+K1S7H3GG7d3UakD4v ljjSrRvgW3LAljTSqFCJgCqexFmQYZytCyur4VJ1hpNK4Prf+EDw0Fuqct6bofjq A6k/H3gcriMK6D/HyiamduiV9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWKTvlw PSxxDUT0mHhv15SvCzzwMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJIffawoiYcAwkYyRhZXvEvyxz4S39EAK1FhTXjE1O1nUFYF8uTGUI qFi3Ju7s+ApokP9cNvZSr8CPIFdfy2O8UFAcTstibmZOr42+HpBnLJpVEmSa0Hfj l86oaBjro94N/fMvL+Gs3jdmqVLOoiRg7BQcY8uMoAqGnK+1o/0GsJvE7ydeCBje peVbTOQhsC1FRusPB+0HMRoIR7wEe9RPpC/9PCd2IKdJ5k7PqsC8S+9iyGR+3AML Iut6MBbUQoB1hlFZbGLruumkF5f3fviIcyzZ/C/EjrvgdJ8C/CsEKWAPWonQz12x iTWGBowaRP2B7WjESYt1QRvsCbzIrnqV -----END CERTIFICATE-----Generated at Mon May 6 22:41:03 2024 by rpki-client on console-ams.rpki-client.org