$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: ew2WvQSkpPKbzPjxQ8ouqtwrVbxTOYuirGQyhHR3pPc= Subject key identifier: E0:5A:A0:01:B6:9D:27:EE:85:36:62:CE:02:98:86:E6:4B:46:2A:FE Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 293F Signing time: Sat 04 May 2024 15:55:32 +0000 Manifest this update: Sat 04 May 2024 15:55:31 +0000 Manifest next update: Sat 11 May 2024 15:55:31 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: QFy6lf2mJZio6tHEqxXAEAkDiRK6+s0FYmniUyBrgO8=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: 8Jl9AiWamPsqzIL3OorWOBFy/PQ9g2itsr3pzc8dDLo=) 3: 010E8732D43411EB8586EA31C4F9AE02.roa (hash: lhmAwDS/ueuyTAGYheVLKMhDi3MITfuL0lNRMF6yh0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10596 (0x2964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: May 4 15:55:31 2024 GMT Not After : May 11 15:55:31 2024 GMT Subject: CN=66365a74-e611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:fa:71:74:c3:5e:3a:cf:d8:24:7b:09:60: a5:4c:33:1d:3d:a1:98:0e:0c:ce:26:a2:11:52:6e: a4:01:d9:3f:42:d8:49:5b:13:cb:dd:41:7a:d1:48: 07:bc:8c:6b:04:bc:29:06:83:a7:78:a9:18:9b:9f: d4:6a:ed:08:cd:4c:ee:30:ea:c6:b7:9c:f3:61:25: 15:12:9a:c8:51:1c:7c:67:dd:63:89:df:6c:ed:f2: 85:dd:d1:2e:4e:a6:f7:31:b3:01:a3:5a:89:46:ce: ea:94:f6:c6:71:36:bf:3b:d3:0b:87:f6:0b:80:33: 1a:de:5f:94:6b:d7:6c:7c:c9:04:21:32:4e:60:f8: 4d:ae:cc:cd:2b:27:94:96:58:82:c5:88:f7:3a:b9: bf:b8:08:ae:21:81:cb:15:93:ff:54:28:37:c2:85: 96:e8:24:d7:b7:f0:bb:d0:00:87:67:95:7b:23:50: d4:da:2c:52:b2:92:9a:ca:a7:fd:2b:d5:5a:50:dc: ec:df:4b:ad:25:1e:fc:a7:6e:fc:6d:77:38:68:db: 83:5e:fd:ed:70:7b:6b:2c:4f:1b:6a:69:85:93:28: 49:bb:cd:71:b0:78:e7:7b:63:55:09:6d:e6:92:b3: 24:a9:7b:39:f1:3f:7e:e8:33:ab:28:0f:01:cd:aa: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5A:A0:01:B6:9D:27:EE:85:36:62:CE:02:98:86:E6:4B:46:2A:FE X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c8:60:ed:e8:ec:ce:8d:9a:56:f8:40:94:5d:dd:4f:f7:3c: a6:d6:1e:2d:4e:7f:25:76:ec:d9:f6:00:94:18:90:25:03:41: a2:cd:04:d4:db:8a:3e:87:2a:f5:ba:bc:c4:60:b6:6b:f8:a9: 21:f2:0e:e8:09:4a:30:cb:b3:c7:8e:9b:d8:e0:e6:e3:dc:2e: c8:7a:ff:68:d2:bb:01:4f:20:b2:22:80:06:7f:3c:82:28:7c: f5:14:74:4d:58:20:a8:c7:dc:0b:2a:bc:df:f5:25:a7:45:3a: ef:d7:6f:e7:b8:ea:12:5e:37:e4:6b:4f:cd:1e:fe:a9:68:0d: ad:c7:60:b8:5d:41:6c:33:bc:2f:13:4b:79:87:26:d7:ee:c9: 30:8c:0a:3a:c5:7a:ad:ef:0a:4c:10:f8:3a:c1:e1:ae:03:4a: fb:ce:ce:08:4c:0e:23:0b:ca:66:97:8e:50:14:89:ec:d8:9a: 78:04:f8:56:f1:ac:4a:99:0f:33:ad:47:63:1c:36:d5:62:f6: ce:5c:d7:82:e4:ed:c5:cd:c7:cb:25:53:07:02:2b:6d:e4:42: 78:89:d3:45:c4:36:c9:29:d1:12:c9:a0:ec:76:b2:13:76:bb: 18:5c:77:7a:be:22:b4:84:28:7c:f8:a3:dc:d0:8c:d9:64:d0: f5:d9:24:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjQwNTA0MTU1NTMxWhcNMjQwNTExMTU1NTMxWjAYMRYwFAYD VQQDEw02NjM2NWE3NC1lNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xv6cXTDXjrP2CR7CWClTDMdPaGYDgzOJqIRUm6kAdk/QthJWxPL3UF60UgH vIxrBLwpBoOneKkYm5/Uau0IzUzuMOrGt5zzYSUVEprIURx8Z91jid9s7fKF3dEu Tqb3MbMBo1qJRs7qlPbGcTa/O9MLh/YLgDMa3l+Ua9dsfMkEITJOYPhNrszNKyeU lliCxYj3Orm/uAiuIYHLFZP/VCg3woWW6CTXt/C70ACHZ5V7I1DU2ixSspKayqf9 K9VaUNzs30utJR78p278bXc4aNuDXv3tcHtrLE8bammFkyhJu81xsHjne2NVCW3m krMkqXs58T9+6DOrKA8BzaoWgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBaoAG2 nSfuhTZizgKYhuZLRir+MB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6yGDt6OzOjZpW+ECUXd1P9zym1h4tTn8lduzZ9gCUGJAlA0GizQTU 24o+hyr1urzEYLZr+Kkh8g7oCUowy7PHjpvY4Obj3C7Iev9o0rsBTyCyIoAGfzyC KHz1FHRNWCCox9wLKrzf9SWnRTrv12/nuOoSXjfka0/NHv6paA2tx2C4XUFsM7wv E0t5hybX7skwjAo6xXqt7wpMEPg6weGuA0r7zs4ITA4jC8pml45QFIns2Jp4BPhW 8axKmQ8zrUdjHDbVYvbOXNeC5O3FzcfLJVMHAitt5EJ4idNFxDbJKdESyaDsdrIT drsYXHd6viK0hCh8+KPc0IzZZND12SQM -----END CERTIFICATE-----Generated at Sat May 4 16:33:55 2024 by rpki-client on console-fra.rpki-client.org