$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: wxLAK99kjhlhDNEMtHzmlco9l6qcFZxwi13srzMOmpc= Subject key identifier: 2E:95:34:A4:69:02:12:7B:AC:3C:91:8C:D1:A2:7E:57:53:8C:6B:BB Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 5D Signing time: Sun 19 May 2024 07:45:42 +0000 Manifest this update: Sun 19 May 2024 07:45:42 +0000 Manifest next update: Sun 26 May 2024 07:45:41 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: eVrmV7EkJPwTQMHRLuvezgoh6HcxCUgPo+Xtsw5iNxo=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: MuheuDbxWA9cTRmQYpvrgqrlEvSaTJmW3FLp8JLtH4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: May 19 07:45:42 2024 GMT Not After : May 26 07:45:41 2024 GMT Subject: CN=6649ae26-8c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:c2:1a:10:96:5d:12:3e:d1:be:34:69:a9: 4e:77:3c:80:f9:59:e0:1b:19:54:7c:e0:37:b2:8e: 9e:31:d1:7e:f4:8e:3e:d7:6b:1d:cd:39:f8:d3:9f: 4d:02:89:78:e0:ce:aa:9d:8b:6b:a7:7c:99:bb:e0: 1d:22:4b:fd:82:54:10:32:1a:95:3e:ff:ab:19:a4: 3c:82:d7:65:21:c8:21:9f:95:47:b3:da:5b:d3:88: 83:e2:8d:13:8e:dd:85:5a:5a:e8:80:03:12:15:ff: 75:f3:6b:89:eb:bc:6f:3b:e9:e2:c5:f8:7f:c9:b6: 0c:48:04:24:08:90:67:b7:c5:29:58:ec:83:16:e5: 3e:03:e6:72:ab:f1:a3:9f:93:1d:11:66:02:8e:3e: 01:67:4e:53:58:ea:7e:e9:92:5f:a9:ee:36:a7:dd: 04:85:24:43:34:87:03:90:42:99:a2:3b:9b:9b:fe: 41:85:af:6f:6b:9c:79:c1:62:dd:aa:58:45:c2:55: 5c:7e:b0:0d:f4:3e:91:c8:9d:c6:a4:01:1c:60:98: cb:fa:9e:de:90:44:b9:7d:cf:ea:eb:8d:5f:02:49: 3e:cd:8a:2c:14:96:08:d7:dc:50:62:0e:57:4b:95: c0:ab:c4:e0:23:29:0b:1c:07:a8:0a:08:51:02:1c: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:34:A4:69:02:12:7B:AC:3C:91:8C:D1:A2:7E:57:53:8C:6B:BB X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5c:79:16:b9:8d:cc:31:bf:e0:46:d8:06:bc:a8:be:79:d7: ce:3e:d7:c1:04:92:5e:63:2b:74:cb:b6:cf:90:5e:c1:16:f2: 01:4d:ff:23:f7:36:07:48:1b:59:d7:7a:a1:36:ed:3e:11:17: 0e:99:49:82:5e:1b:bb:82:64:88:2f:95:b6:bd:cb:1b:50:5e: ab:c0:31:e0:3d:52:c1:03:c2:0f:f4:90:f5:0c:73:6d:63:fd: 43:83:3b:80:39:de:02:7c:08:e5:b3:0a:69:01:9e:21:df:fe: e2:63:84:d4:30:39:45:6e:90:ca:8c:79:56:8b:cd:e0:f6:4d: 27:23:35:23:21:b9:b3:07:87:f7:45:3c:24:27:d9:b2:ad:14: 34:62:02:86:4b:c0:3d:72:1c:2d:fa:41:9a:c6:b8:4b:50:cc: 91:5e:08:d2:5a:4f:9c:06:bc:02:13:48:e1:94:13:35:76:7c: 87:c5:dc:f4:96:dd:91:aa:83:5e:29:7d:de:d9:fa:7b:b6:67: a2:e8:e1:bb:7b:f8:e9:ea:36:f3:30:c7:27:61:57:4a:cb:eb: 01:45:2b:ff:66:df:ca:47:f3:8f:ab:ad:42:b8:ea:ae:41:f1: 59:df:1f:6d:91:a0:1e:84:af:6c:d3:e2:0c:1f:9e:12:ec:3d: e3:9e:c5:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjIzRjExMC8GA1UEBRMoREJEQUQwMDkwMTdEOTFERkI0MzhENzBEMUI4RDREMzQ4 NjJGMDY4RTAeFw0yNDA1MTkwNzQ1NDJaFw0yNDA1MjYwNzQ1NDFaMBgxFjAUBgNV BAMTDTY2NDlhZTI2LThjMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsRMIaEJZdEj7RvjRpqU53PID5WeAbGVR84Deyjp4x0X70jj7Xax3NOfjTn00C iXjgzqqdi2unfJm74B0iS/2CVBAyGpU+/6sZpDyC12UhyCGflUez2lvTiIPijROO 3YVaWuiAAxIV/3Xza4nrvG876eLF+H/JtgxIBCQIkGe3xSlY7IMW5T4D5nKr8aOf kx0RZgKOPgFnTlNY6n7pkl+p7jan3QSFJEM0hwOQQpmiO5ub/kGFr29rnHnBYt2q WEXCVVx+sA30PpHIncakARxgmMv6nt6QRLl9z+rrjV8CST7NiiwUlgjX3FBiDldL lcCrxOAjKQscB6gKCFECHOgbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULpU0pGkC EnusPJGM0aJ+V1OMa7swHwYDVR0jBBgwFoAU29rQCQF9kd+0ONcNG41NNIYvBo4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMjNGLzA5NjkxMjdDOENB QTExRUU4NjRERkQ2REM0RjlBRTAyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJv NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjlyUUNRRjlrZC0wT05jTkc0MU5OSVl2Qm80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MjNGLzA5NjkxMjdDOENBQTExRUU4NjRERkQ2REM0RjlBRTAyLzI5clFDUUY5a2Qt ME9OY05HNDFOTklZdkJvNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlceRa5jcwxv+BG2Aa8qL55184+18EEkl5jK3TLts+QXsEW8gFN/yP3 NgdIG1nXeqE27T4RFw6ZSYJeG7uCZIgvlba9yxtQXqvAMeA9UsEDwg/0kPUMc21j /UODO4A53gJ8COWzCmkBniHf/uJjhNQwOUVukMqMeVaLzeD2TScjNSMhubMHh/dF PCQn2bKtFDRiAoZLwD1yHC36QZrGuEtQzJFeCNJaT5wGvAITSOGUEzV2fIfF3PSW 3ZGqg14pfd7Z+nu2Z6Lo4bt7+OnqNvMwxydhV0rL6wFFK/9m38pH84+rrUK46q5B 8VnfH22RoB6Er2zT4gwfnhLsPeOexb0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org