$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: NWAE5Lk/Pf93kmHmg2l/tM9YzQ8ANGgU18M6RYFYNmQ= Subject key identifier: 25:3F:BC:2C:F6:E5:D8:58:37:E4:3D:BB:D5:8A:1A:A6:3B:34:45:0E Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 11C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 11AE Signing time: Sat 18 May 2024 17:45:26 +0000 Manifest this update: Sat 18 May 2024 17:45:26 +0000 Manifest next update: Sat 25 May 2024 17:45:26 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: /DVH2bo3PSeXVytHntKB1GLDcQJEPCXDgmbOXx/WXWY=) 2: D4F8B4B407D511EF86AD0733C4F9AE02.roa (hash: NccEMCqAY6Q4s87TmJw+IxbzpvybsP6p9O44DoX+2ok=) 3: D23C828C07D511EF86AD0733C4F9AE02.roa (hash: TIcF9eCaMV6FnGaU4Vlj0gKLnYzPZQ9nJWLLlWU8tG0=) 4: D30F4BB807D511EF86AD0733C4F9AE02.roa (hash: hyPyTgVROwH264cYH1g18w3q6Dp/RsLhE4jRRmTdm6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4549 (0x11c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: May 18 17:45:26 2024 GMT Not After : May 25 17:45:26 2024 GMT Subject: CN=6648e936-e918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:43:a6:4c:62:5e:72:78:ac:71:bf:70:31: 7c:f4:4c:7c:51:2d:3d:ec:d4:27:b1:c8:ae:5c:85: 7a:8a:13:f6:e0:75:5d:fd:d3:9a:5a:7c:de:4e:e7: e7:9f:17:66:61:fd:a5:73:49:db:9b:11:ba:d1:0e: fd:15:3b:fb:47:95:eb:bb:60:76:16:1f:40:a5:12: 36:b8:f1:87:03:4a:f2:58:5b:74:46:3f:5f:7e:76: a4:ad:47:3f:28:8c:27:27:c0:1f:70:6c:f6:be:75: 77:87:69:0c:c1:df:2a:cc:58:e0:e5:71:23:98:02: 6a:96:4c:1f:33:44:2b:34:76:6e:69:4f:5c:6a:6c: f0:6e:bc:0e:39:9c:f7:34:56:9d:2c:d7:93:06:20: 9e:f2:e9:9d:56:77:44:db:cb:55:9e:4d:74:6f:8d: ae:09:73:84:32:3c:2a:39:cd:50:b5:7f:f6:af:8d: 64:d5:0d:1f:84:e0:fc:3a:27:ca:4e:61:cf:3a:29: d1:55:c4:5c:b9:b8:c9:34:12:75:35:c0:e8:2c:37: e0:37:f0:c3:0e:b6:1a:a1:77:6d:55:67:33:eb:bb: 03:92:66:70:5c:51:eb:c0:85:8e:48:9f:e3:04:e3: 85:5e:69:f6:5e:1d:12:49:82:38:bb:2b:3a:73:97: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:BC:2C:F6:E5:D8:58:37:E4:3D:BB:D5:8A:1A:A6:3B:34:45:0E X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a0:3d:93:11:93:54:03:55:80:36:5d:64:5c:1b:59:89:5f: eb:5b:7d:f9:ee:70:71:f4:5b:f4:de:af:d8:91:bf:73:31:27: 47:ad:82:39:10:d7:5d:d8:d1:d7:f3:9e:d6:84:4c:8f:48:3a: 40:ee:cc:db:6b:a0:c6:b9:f2:b8:b2:e0:33:7b:89:58:bd:09: 00:60:df:57:61:3d:b3:e2:ec:5e:05:88:31:1a:13:e9:53:2b: b1:05:e6:98:13:5a:aa:b9:a3:cb:fa:c1:b4:d5:61:31:d7:ab: 29:e6:76:ac:ec:ed:88:b7:e4:e8:33:dc:1c:1c:c2:aa:0c:be: f1:14:39:8f:da:86:fb:0e:7f:e5:29:b9:17:de:49:e3:98:6d: 0b:9b:80:9e:63:d9:aa:fa:f3:3f:f8:e4:df:11:35:00:19:ec: 88:f4:fa:5f:52:98:8a:c6:47:6f:30:fb:6e:91:c8:a3:99:34: 22:45:bf:d0:e8:2f:08:d2:14:6c:ac:6f:9a:44:6d:bc:dc:b9: c1:62:76:e3:34:07:59:54:ad:f2:e0:e6:6e:28:0d:9f:24:f0: cf:63:ba:ac:53:a9:ca:c9:a7:3a:53:73:a8:87:02:75:57:2d: 4b:f9:86:51:17:17:60:d3:c7:61:4b:47:c6:3d:67:b3:a8:a4: 22:79:a4:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjQwNTE4MTc0NTI2WhcNMjQwNTI1MTc0NTI2WjAYMRYwFAYD VQQDEw02NjQ4ZTkzNi1lOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsVDpkxiXnJ4rHG/cDF89Ex8US097NQnsciuXIV6ihP24HVd/dOaWnzeTufn nxdmYf2lc0nbmxG60Q79FTv7R5Xru2B2Fh9ApRI2uPGHA0ryWFt0Rj9ffnakrUc/ KIwnJ8AfcGz2vnV3h2kMwd8qzFjg5XEjmAJqlkwfM0QrNHZuaU9camzwbrwOOZz3 NFadLNeTBiCe8umdVndE28tVnk10b42uCXOEMjwqOc1QtX/2r41k1Q0fhOD8OifK TmHPOinRVcRcubjJNBJ1NcDoLDfgN/DDDrYaoXdtVWcz67sDkmZwXFHrwIWOSJ/j BOOFXmn2Xh0SSYI4uys6c5dFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU/vCz2 5dhYN+Q9u9WKGqY7NEUOMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPoD2TEZNUA1WANl1kXBtZiV/rW3357nBx9Fv03q/Ykb9zMSdHrYI5 ENdd2NHX857WhEyPSDpA7szba6DGufK4suAze4lYvQkAYN9XYT2z4uxeBYgxGhPp UyuxBeaYE1qquaPL+sG01WEx16sp5nas7O2It+ToM9wcHMKqDL7xFDmP2ob7Dn/l KbkX3knjmG0Lm4CeY9mq+vM/+OTfETUAGeyI9PpfUpiKxkdvMPtukcijmTQiRb/Q 6C8I0hRsrG+aRG283LnBYnbjNAdZVK3y4OZuKA2fJPDPY7qsU6nKyac6U3OohwJ1 Vy1L+YZRFxdg08dhS0fGPWezqKQieaRt -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org