$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: 9wfEHZkwpYPQ3efxWY/ug7+/14GAotz+CVYzq//wL2c= Subject key identifier: D6:12:74:E2:25:FD:8C:9D:4B:BD:5B:D7:E3:A8:58:9E:63:63:49:A0 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 296B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2946 Signing time: Sat 18 May 2024 15:52:48 +0000 Manifest this update: Sat 18 May 2024 15:52:47 +0000 Manifest next update: Sat 25 May 2024 15:52:47 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: p6vSw+oDA1Xkd3LzCjDDw6so/y+z//zmoULHRLwqL8E=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: 8Jl9AiWamPsqzIL3OorWOBFy/PQ9g2itsr3pzc8dDLo=) 3: 010E8732D43411EB8586EA31C4F9AE02.roa (hash: lhmAwDS/ueuyTAGYheVLKMhDi3MITfuL0lNRMF6yh0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10603 (0x296b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: May 18 15:52:47 2024 GMT Not After : May 25 15:52:47 2024 GMT Subject: CN=6648ced0-6829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:e0:17:bb:b8:5f:74:0a:a8:c7:b0:d6:93: ad:ed:8d:c3:13:87:20:ae:73:4e:64:0d:56:51:8b: 81:65:ca:c1:ad:92:93:bc:d7:50:81:a7:67:57:76: f3:0b:23:60:03:cc:3f:dc:4a:6a:35:55:d4:38:3b: f4:8e:98:d4:3a:0b:4c:9e:20:82:e7:c6:b1:db:e4: 51:56:0d:f9:ba:78:dc:d7:48:83:71:49:01:98:57: e8:fb:b7:a8:45:12:29:08:5d:c0:a3:87:4e:0c:35: 73:53:58:a5:5f:7f:97:6d:ed:08:93:91:4f:4d:2b: 11:27:b0:4b:b6:bd:c3:f3:67:4a:1f:8f:59:fc:f2: f6:60:32:6d:b4:07:69:ec:e9:5f:d8:d2:36:ca:02: ac:3e:94:62:79:db:e9:7e:cd:dd:2a:31:ee:45:c8: aa:ea:ea:18:f7:19:ff:a0:56:ee:5d:8d:85:e1:8c: d6:3c:a9:22:ca:a3:00:81:3a:34:2e:44:29:77:83: fa:c0:93:99:d6:1e:30:20:8e:0b:42:04:6f:df:11: 99:36:c2:6f:4c:3e:10:5c:5d:2d:53:19:9b:33:b6: 9e:32:34:f8:d3:25:43:9a:28:78:cc:11:be:c9:07: 20:f7:91:ae:43:df:3c:a9:06:32:cc:d7:9d:e8:29: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:74:E2:25:FD:8C:9D:4B:BD:5B:D7:E3:A8:58:9E:63:63:49:A0 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:eb:4e:4c:19:de:5e:38:f6:94:27:2b:34:78:62:94:cc:de: b1:58:43:c5:50:5c:ba:c6:12:72:23:00:9c:ab:f7:24:58:e6: 4d:1a:91:90:e6:93:6c:cb:bc:db:9f:f7:14:44:50:e9:2f:16: 20:af:f3:6c:ce:0f:e9:49:7a:60:fc:54:ba:8e:d3:7b:9e:11: 00:05:6a:e0:20:63:b4:2b:9d:7e:ef:25:01:73:7a:01:f9:4b: 5b:17:24:b5:06:c6:c7:d4:eb:29:1c:87:bd:16:a9:11:ff:9b: 00:39:2a:c9:af:64:bb:47:a3:37:21:d5:f3:05:08:c1:91:bd: fd:33:f2:ea:24:78:b9:29:98:88:6d:81:5c:0d:d7:9d:e3:ac: 19:73:8b:4d:c9:88:53:30:92:c8:a1:6d:52:d3:43:83:ae:d9: 6a:7e:2f:d0:cd:4e:77:ff:ba:32:ff:f7:7a:f9:0f:35:a2:26: e4:2d:b5:2f:32:3a:ba:7d:cb:2b:ba:05:9a:c0:90:6e:b4:0d: 38:17:b6:38:00:ea:63:74:27:93:cb:1a:ea:81:b8:c8:b7:80: 27:3e:a9:f7:a6:98:d3:fc:0e:97:b6:f6:72:b6:76:f8:da:cf: 68:6f:0e:19:a3:36:25:99:75:d6:89:6e:87:5a:bb:5e:31:e7: 89:54:6d:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjQwNTE4MTU1MjQ3WhcNMjQwNTI1MTU1MjQ3WjAYMRYwFAYD VQQDEw02NjQ4Y2VkMC02ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxELgF7u4X3QKqMew1pOt7Y3DE4cgrnNOZA1WUYuBZcrBrZKTvNdQgadnV3bz CyNgA8w/3EpqNVXUODv0jpjUOgtMniCC58ax2+RRVg35unjc10iDcUkBmFfo+7eo RRIpCF3Ao4dODDVzU1ilX3+Xbe0Ik5FPTSsRJ7BLtr3D82dKH49Z/PL2YDJttAdp 7Olf2NI2ygKsPpRiedvpfs3dKjHuRciq6uoY9xn/oFbuXY2F4YzWPKkiyqMAgTo0 LkQpd4P6wJOZ1h4wII4LQgRv3xGZNsJvTD4QXF0tUxmbM7aeMjT40yVDmih4zBG+ yQcg95GuQ988qQYyzNed6CmhHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYSdOIl /YydS71b1+OoWJ5jY0mgMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD605MGd5eOPaUJys0eGKUzN6xWEPFUFy6xhJyIwCcq/ckWOZNGpGQ 5pNsy7zbn/cURFDpLxYgr/Nszg/pSXpg/FS6jtN7nhEABWrgIGO0K51+7yUBc3oB +UtbFyS1BsbH1OspHIe9FqkR/5sAOSrJr2S7R6M3IdXzBQjBkb39M/LqJHi5KZiI bYFcDded46wZc4tNyYhTMJLIoW1S00ODrtlqfi/QzU53/7oy//d6+Q81oibkLbUv Mjq6fcsrugWawJButA04F7Y4AOpjdCeTyxrqgbjIt4AnPqn3ppjT/A6XtvZytnb4 2s9obw4ZozYlmXXWiW6HWrteMeeJVG30 -----END CERTIFICATE-----Generated at Sat May 18 17:20:05 2024 by rpki-client on console-ams.rpki-client.org