$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: ErxhFG28ndcvZtt10Xs/o6QES9lOBetTgovRD+H72G4= Subject key identifier: B0:AF:97:7B:89:C7:98:BC:12:62:CA:D7:38:14:DE:AA:27:87:1D:B2 Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 5B Signing time: Wed 15 May 2024 07:52:05 +0000 Manifest this update: Wed 15 May 2024 07:52:04 +0000 Manifest next update: Wed 22 May 2024 07:52:04 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: jDYaqwdlO9boEnKS015BU3qkIB+ejsKJ0SWAgL51JMw=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: MuheuDbxWA9cTRmQYpvrgqrlEvSaTJmW3FLp8JLtH4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: May 15 07:52:04 2024 GMT Not After : May 22 07:52:04 2024 GMT Subject: CN=664469a5-6751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:a5:87:9b:6e:3e:5c:56:44:e0:fe:f7:d3: dd:0d:b1:9d:9e:22:e8:1e:6a:fc:77:7c:95:e3:35: 25:5e:52:26:25:37:66:0a:e0:8f:9e:d7:7e:c8:8b: a4:28:69:fe:56:79:7c:cb:09:0b:a0:e0:1e:2a:0f: 5f:e9:e3:4d:47:2f:ce:b1:ed:2f:b5:38:16:9a:24: e8:ce:42:4e:df:65:65:c9:77:c1:c5:23:0f:67:87: 60:e4:38:3b:25:fd:94:c3:d1:e6:0f:e8:d8:04:e0: ba:70:41:89:e3:43:8b:d4:01:2c:90:9c:49:26:d8: 8d:50:11:e3:98:12:f0:d3:24:4a:b2:93:3e:36:9d: 50:b8:59:38:da:7a:3a:fc:3b:fd:71:e0:13:1d:cd: c7:45:3b:55:72:d9:8c:5e:bc:2a:7b:55:c8:4b:3c: 9f:8f:22:24:f0:e7:df:2b:6a:71:a3:6a:97:93:09: d4:09:cd:07:a3:9a:0e:6c:53:25:90:18:56:1c:0a: 45:ae:ad:8b:f1:e6:7f:48:ae:d9:3a:1a:18:4d:7d: 3a:ec:69:db:42:37:86:f1:2f:5b:53:27:c2:3b:8c: 61:42:5b:38:a1:64:30:b7:e1:7b:47:13:f0:93:69: 27:be:05:95:d5:c3:8e:b5:db:62:f1:8b:23:42:31: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AF:97:7B:89:C7:98:BC:12:62:CA:D7:38:14:DE:AA:27:87:1D:B2 X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0f:30:0e:75:b8:7d:3f:59:0f:16:40:9c:3d:61:6b:8f:bf: ef:16:e5:5a:a6:33:83:bb:8a:8b:84:ff:05:57:78:06:7f:f5: 47:a3:1c:fd:ba:3c:75:7a:aa:db:6b:7d:c2:db:c6:0d:ef:16: 0b:9b:86:64:9a:87:c7:63:e6:4b:91:5e:d6:7e:24:00:eb:c0: 38:6c:7a:a9:24:01:42:f0:d3:b9:55:bd:ec:48:4f:97:c7:44: dc:6c:50:bc:85:e7:00:8d:c3:99:0e:a8:7b:26:62:32:2d:ea: 99:6f:55:b7:de:9b:35:5c:64:78:89:b0:57:a4:23:b5:56:83: f9:ef:12:b6:f6:d2:c5:6b:05:85:a9:d2:57:0e:25:ee:98:2f: 3f:cc:f3:a2:74:a6:47:5c:d3:8b:70:ff:5f:38:41:76:2d:7f: 81:ea:40:d1:c9:56:20:e4:13:95:d1:d3:66:47:f1:a8:dd:bf: 57:41:2c:9a:a9:35:35:29:fe:0a:8f:a2:83:6d:31:68:32:6f: 0f:2c:07:57:a5:f0:3b:08:58:82:1e:88:1a:00:80:b4:73:c2: a2:2f:73:3c:17:ba:0d:76:a5:96:a5:0d:4c:00:b0:06:ef:38: 4f:7d:78:b3:34:69:ae:f7:64:1a:4d:aa:ee:c1:22:78:a8:f8: ef:39:4a:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjIzRjExMC8GA1UEBRMoREJEQUQwMDkwMTdEOTFERkI0MzhENzBEMUI4RDREMzQ4 NjJGMDY4RTAeFw0yNDA1MTUwNzUyMDRaFw0yNDA1MjIwNzUyMDRaMBgxFjAUBgNV BAMTDTY2NDQ2OWE1LTY3NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOzqWHm24+XFZE4P73090NsZ2eIugeavx3fJXjNSVeUiYlN2YK4I+e137Ii6Qo af5WeXzLCQug4B4qD1/p401HL86x7S+1OBaaJOjOQk7fZWXJd8HFIw9nh2DkODsl /ZTD0eYP6NgE4LpwQYnjQ4vUASyQnEkm2I1QEeOYEvDTJEqykz42nVC4WTjaejr8 O/1x4BMdzcdFO1Vy2YxevCp7VchLPJ+PIiTw598ranGjapeTCdQJzQejmg5sUyWQ GFYcCkWurYvx5n9Irtk6GhhNfTrsadtCN4bxL1tTJ8I7jGFCWzihZDC34XtHE/CT aSe+BZXVw46122LxiyNCMbePAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsK+Xe4nH mLwSYsrXOBTeqieHHbIwHwYDVR0jBBgwFoAU29rQCQF9kd+0ONcNG41NNIYvBo4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMjNGLzA5NjkxMjdDOENB QTExRUU4NjRERkQ2REM0RjlBRTAyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJv NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjlyUUNRRjlrZC0wT05jTkc0MU5OSVl2Qm80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MjNGLzA5NjkxMjdDOENBQTExRUU4NjRERkQ2REM0RjlBRTAyLzI5clFDUUY5a2Qt ME9OY05HNDFOTklZdkJvNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADEPMA51uH0/WQ8WQJw9YWuPv+8W5VqmM4O7iouE/wVXeAZ/9UejHP26 PHV6qttrfcLbxg3vFgubhmSah8dj5kuRXtZ+JADrwDhseqkkAULw07lVvexIT5fH RNxsULyF5wCNw5kOqHsmYjIt6plvVbfemzVcZHiJsFekI7VWg/nvErb20sVrBYWp 0lcOJe6YLz/M86J0pkdc04tw/184QXYtf4HqQNHJViDkE5XR02ZH8ajdv1dBLJqp NTUp/gqPooNtMWgybw8sB1el8DsIWIIeiBoAgLRzwqIvczwXug12pZalDUwAsAbv OE99eLM0aa73ZBpNqu7BInio+O85Sg0= -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org