$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: qweHJ7lQ5og1izcSneEW6ms0TyjMi3zuxxzaECZaFtE= Subject key identifier: 12:EB:D7:B3:1C:AE:C0:5F:82:9C:FC:92:12:67:CF:C0:DC:45:52:7F Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 1227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 1210 Signing time: Fri 22 Nov 2024 17:08:57 +0000 Manifest this update: Fri 22 Nov 2024 17:08:56 +0000 Manifest next update: Fri 29 Nov 2024 17:08:56 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: i/F7bV2gWXVVHqxfNZlmJPrinJfiK1O3t9vCsqaK+r0=) 2: D4F8B4B407D511EF86AD0733C4F9AE02.roa (hash: NccEMCqAY6Q4s87TmJw+IxbzpvybsP6p9O44DoX+2ok=) 3: D23C828C07D511EF86AD0733C4F9AE02.roa (hash: TIcF9eCaMV6FnGaU4Vlj0gKLnYzPZQ9nJWLLlWU8tG0=) 4: D30F4BB807D511EF86AD0733C4F9AE02.roa (hash: hyPyTgVROwH264cYH1g18w3q6Dp/RsLhE4jRRmTdm6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4647 (0x1227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Nov 22 17:08:56 2024 GMT Not After : Nov 29 17:08:56 2024 GMT Subject: CN=6740baa9-77e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:2a:e4:47:65:c5:0f:f9:9e:24:12:5a:44: 6f:3e:d0:e5:c1:4c:b9:3e:c7:2a:a1:5c:02:bc:a3: 51:e5:e4:e8:01:89:c0:8f:e4:6a:f4:b0:89:73:f2: 35:78:09:33:a1:e5:2f:77:19:94:06:61:05:e6:63: 1c:46:a6:6e:24:b2:49:2e:e1:9f:89:fe:3e:47:a3: 10:dd:05:a9:93:3a:39:6f:b5:e7:9b:c8:f5:87:e2: 02:1c:95:14:1b:eb:24:09:52:66:8b:23:81:68:6a: fc:5e:8b:cb:c1:ee:6f:bc:7b:36:8b:1a:c5:ea:ce: 36:15:29:6e:22:3f:b4:32:aa:0c:e7:8a:b2:d2:0f: 63:c7:53:c7:f4:b2:17:73:3f:74:52:12:a8:c4:42: 9d:41:32:cb:6f:ed:24:ac:e5:45:e7:78:5d:a1:0b: 5f:f1:3f:2b:64:82:8a:19:49:aa:de:04:47:b1:7d: 1f:8e:bf:03:35:e2:01:fb:d8:46:a4:d4:2e:e2:b9: e0:4d:fd:74:52:5a:d0:71:61:79:7a:09:25:a8:cd: 7a:d5:e8:06:0a:52:05:15:14:76:27:5c:7e:e5:4f: 35:7b:16:94:0e:f9:fd:2c:f9:79:63:17:c8:fa:a2: b5:5f:32:05:e4:b5:d6:43:49:1a:d8:87:ac:00:17: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:D7:B3:1C:AE:C0:5F:82:9C:FC:92:12:67:CF:C0:DC:45:52:7F X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cd:6f:24:27:90:fe:4c:d3:9c:b9:19:57:76:39:4c:0d:f3: ec:92:18:62:1d:38:42:16:e2:b7:b4:e9:ed:25:6c:30:5e:7c: e0:cc:76:4a:68:2f:2d:c3:db:43:8a:dd:c1:9c:31:3a:09:46: 40:31:01:10:74:c6:6f:ea:9d:b6:64:61:10:9c:53:cd:48:2a: 4d:2c:85:63:f7:68:db:bb:88:7f:a6:1c:3b:48:f1:a3:35:6b: 96:5c:ff:a8:a0:a2:3e:5d:fe:9c:58:c4:22:41:1a:9a:68:cf: e2:86:f2:8a:83:7c:42:c3:08:1b:39:1f:3d:bd:77:45:11:1c: 79:bc:1d:b8:c4:b5:cf:77:45:c3:58:be:b7:98:d5:3a:4a:3e: 1b:62:46:15:39:4f:6a:cc:56:55:34:35:19:6d:dc:55:f3:ac: c9:88:df:de:bc:9e:3c:51:a8:60:86:f0:44:32:10:cf:e9:44: 1f:09:bf:11:38:7f:35:0e:98:bf:14:f3:fd:95:7c:7e:a2:83: ea:44:fd:92:19:cf:3f:ee:77:63:5f:10:45:1e:7d:46:ba:45: e1:74:46:c0:c9:9a:cd:d6:de:5f:76:05:e7:a9:8c:07:80:49: 28:05:1c:7e:08:03:27:d3:00:a4:b9:a7:54:5a:db:6d:df:d7: 79:bb:00:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjQxMTIyMTcwODU2WhcNMjQxMTI5MTcwODU2WjAYMRYwFAYD VQQDEw02NzQwYmFhOS03N2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ooq5EdlxQ/5niQSWkRvPtDlwUy5PscqoVwCvKNR5eToAYnAj+Rq9LCJc/I1 eAkzoeUvdxmUBmEF5mMcRqZuJLJJLuGfif4+R6MQ3QWpkzo5b7Xnm8j1h+ICHJUU G+skCVJmiyOBaGr8XovLwe5vvHs2ixrF6s42FSluIj+0MqoM54qy0g9jx1PH9LIX cz90UhKoxEKdQTLLb+0krOVF53hdoQtf8T8rZIKKGUmq3gRHsX0fjr8DNeIB+9hG pNQu4rngTf10UlrQcWF5egklqM161egGClIFFRR2J1x+5U81exaUDvn9LPl5YxfI +qK1XzIF5LXWQ0ka2IesABfjvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLr17Mc rsBfgpz8khJnz8DcRVJ/MB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARzW8kJ5D+TNOcuRlXdjlMDfPskhhiHThCFuK3tOntJWwwXnzgzHZK aC8tw9tDit3BnDE6CUZAMQEQdMZv6p22ZGEQnFPNSCpNLIVj92jbu4h/phw7SPGj NWuWXP+ooKI+Xf6cWMQiQRqaaM/ihvKKg3xCwwgbOR89vXdFERx5vB24xLXPd0XD WL63mNU6Sj4bYkYVOU9qzFZVNDUZbdxV86zJiN/evJ48UahghvBEMhDP6UQfCb8R OH81Dpi/FPP9lXx+ooPqRP2SGc8/7ndjXxBFHn1GukXhdEbAyZrN1t5fdgXnqYwH gEkoBRx+CAMn0wCkuadUWttt39d5uwDk -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org