$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: KsIkXlPVumeq713Gw1Q2/08yqusUc/+RLkzDpt7cyO4= Subject key identifier: 46:30:9F:5F:B0:A8:8F:81:52:EE:7C:78:81:01:B9:9A:B0:3E:69:F6 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 29D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 29AA Signing time: Fri 22 Nov 2024 15:37:07 +0000 Manifest this update: Fri 22 Nov 2024 15:37:06 +0000 Manifest next update: Fri 29 Nov 2024 15:37:06 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: hQ0m+mgDekIBPaHAyuOlwcMaswwcSuYAwjc+Owv7YtY=) 2: 692291CA8D2111EFBB185E3DC4F9AE02.roa (hash: FXpji9Hi7AcmUDbv2EIFfiM1bpRv55YE0E+91g5QKX0=) 3: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: 8Jl9AiWamPsqzIL3OorWOBFy/PQ9g2itsr3pzc8dDLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10706 (0x29d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Nov 22 15:37:06 2024 GMT Not After : Nov 29 15:37:06 2024 GMT Subject: CN=6740a522-dec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:e2:5c:b3:96:8d:64:58:f7:bc:c7:11:37: c4:88:b3:69:cc:05:4b:54:a6:87:43:db:da:75:bb: a4:eb:66:f0:06:d9:6a:88:ed:0e:11:42:a4:f3:84: 1a:5b:e9:45:df:a0:6d:88:43:bf:de:03:d9:ee:93: 10:65:ca:df:37:11:37:69:f6:24:cc:4f:bc:78:d5: 20:47:ee:76:2b:01:19:73:65:a2:48:2e:5d:3b:53: 29:9c:be:2d:6c:7b:bc:5f:f7:0b:9a:86:65:00:93: f1:8a:56:36:a8:b6:bb:2e:6d:79:77:15:29:a9:77: 27:e4:67:36:eb:48:5d:8a:05:a4:67:a5:cf:db:c2: 3d:cf:e3:c8:c2:5b:3d:43:e0:c8:d0:51:f6:5d:7d: cd:a2:f1:26:9d:cd:93:a2:bf:b6:60:d2:e0:98:96: dc:95:79:9a:91:6c:fa:d5:f4:f4:21:6f:ce:24:32: 2a:2b:f4:8e:49:f8:e5:be:9f:b8:df:35:32:c8:29: 94:cf:3d:4a:71:cb:78:b8:9c:36:3c:a4:95:57:a0: ea:e7:05:1d:3b:95:50:4f:ae:d7:9c:de:5f:ef:24: 40:9c:33:29:4c:55:d6:9e:86:1d:38:a8:de:10:97: d3:cc:49:d0:3d:92:a9:2e:6b:56:cd:c1:3c:5e:a7: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:9F:5F:B0:A8:8F:81:52:EE:7C:78:81:01:B9:9A:B0:3E:69:F6 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:17:75:e1:6b:bb:52:dd:4d:74:7e:a4:3a:6c:93:90:4d:be: f5:bc:00:00:01:23:6d:cc:00:61:3c:c6:d2:d8:24:98:c9:ed: 71:50:60:f9:af:d6:54:6b:d0:2a:71:19:3d:2d:9f:d2:d3:9c: 0b:05:f6:3a:27:27:3d:e8:44:b4:98:53:b3:85:ab:b9:0c:05: 7e:c6:2d:cf:f6:1d:3b:e1:16:e6:10:4f:f1:77:a2:42:b9:78: d0:ef:9a:d8:20:6b:8e:df:3b:60:93:68:45:be:a0:a8:bb:a0: c7:fb:3a:1f:8e:fb:a8:25:65:a2:1a:f5:9c:21:d4:ff:d8:d5: bb:df:0a:69:c1:6e:22:9b:4b:d4:90:25:98:98:6f:90:9f:14: e2:0d:b6:1b:12:11:be:87:00:fe:ba:e2:bd:41:f1:c6:7f:78: 04:0e:38:67:cd:68:78:9a:6f:22:de:30:3d:38:e1:00:c2:6e: 10:0d:59:bf:a4:97:e4:d4:5f:6c:93:16:9c:55:01:2e:de:9d: 94:ed:bc:30:db:3c:e8:17:46:50:8d:fd:b5:72:19:04:2d:00: dd:36:e8:fa:af:f3:59:9e:83:f1:7d:56:9d:8b:31:da:78:72: 51:d8:a9:83:57:65:6a:69:47:82:2e:d3:58:25:ac:96:b8:d4: 42:9a:ee:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjQxMTIyMTUzNzA2WhcNMjQxMTI5MTUzNzA2WjAYMRYwFAYD VQQDEw02NzQwYTUyMi1kZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NriXLOWjWRY97zHETfEiLNpzAVLVKaHQ9vadbuk62bwBtlqiO0OEUKk84Qa W+lF36BtiEO/3gPZ7pMQZcrfNxE3afYkzE+8eNUgR+52KwEZc2WiSC5dO1MpnL4t bHu8X/cLmoZlAJPxilY2qLa7Lm15dxUpqXcn5Gc260hdigWkZ6XP28I9z+PIwls9 Q+DI0FH2XX3NovEmnc2Tor+2YNLgmJbclXmakWz61fT0IW/OJDIqK/SOSfjlvp+4 3zUyyCmUzz1Kcct4uJw2PKSVV6Dq5wUdO5VQT67XnN5f7yRAnDMpTFXWnoYdOKje EJfTzEnQPZKpLmtWzcE8XqecSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYwn1+w qI+BUu58eIEBuZqwPmn2MB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5F3Xha7tS3U10fqQ6bJOQTb71vAAAASNtzABhPMbS2CSYye1xUGD5 r9ZUa9AqcRk9LZ/S05wLBfY6Jyc96ES0mFOzhau5DAV+xi3P9h074RbmEE/xd6JC uXjQ75rYIGuO3ztgk2hFvqCou6DH+zofjvuoJWWiGvWcIdT/2NW73wppwW4im0vU kCWYmG+QnxTiDbYbEhG+hwD+uuK9QfHGf3gEDjhnzWh4mm8i3jA9OOEAwm4QDVm/ pJfk1F9skxacVQEu3p2U7bww2zzoF0ZQjf21chkELQDdNuj6r/NZnoPxfVadizHa eHJR2KmDV2VqaUeCLtNYJayWuNRCmu4f -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org