$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: lJUJlylP1VE6EiDoi/uJfx10MsEKZoXiZtYShSspy3Y= Subject key identifier: 80:B4:86:4F:0E:56:AB:EF:8A:51:BD:28:C6:41:01:83:51:19:39:60 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0DEA Signing time: Fri 22 Nov 2024 17:46:22 +0000 Manifest this update: Fri 22 Nov 2024 17:46:21 +0000 Manifest next update: Fri 29 Nov 2024 17:46:21 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: sJPXof4Qeiyh1z6nz1mIe3oADzRRWtOCknqtUC0lwBU=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: v5QbolKjhNBzyr+duNW3NDbzWARV1KK0/NfSC41oYJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Nov 22 17:46:21 2024 GMT Not After : Nov 29 17:46:21 2024 GMT Subject: CN=6740c36e-5e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:31:6c:85:13:2e:41:08:c0:21:87:d0:32: 04:fb:24:bf:67:48:28:0e:bf:71:b9:11:6b:ec:f4: b9:06:91:82:92:18:01:ed:d7:5b:74:10:98:56:3a: a2:86:fa:5d:81:35:e0:7e:86:35:9b:58:49:c9:90: e9:e0:06:f8:e3:e7:ea:64:31:18:9f:be:5b:a1:e1: e8:42:6a:4a:e8:2d:cc:26:6c:aa:88:14:5d:a4:29: e1:cf:a5:b2:f3:23:a4:c2:6e:e4:dd:e6:4f:a3:e8: 80:15:eb:2d:c4:f8:32:1d:83:e4:44:13:63:6b:03: a4:35:ac:b2:5c:72:fe:d7:69:22:82:5e:ac:bf:8c: a0:1c:69:35:b3:84:17:53:0e:1c:5d:35:d4:6a:04: b6:23:1b:d4:66:b0:ec:7f:32:4b:e8:06:49:c5:8c: e3:fc:fd:c5:32:75:76:30:17:b6:29:de:d3:f3:9d: 0e:f1:92:0c:f0:f5:17:c7:74:87:32:a2:07:2f:27: 5c:06:53:56:98:08:f5:d4:8f:15:46:8f:90:b3:79: c0:e0:4c:91:80:fe:f8:ce:ba:aa:e9:b8:e4:40:7a: 19:51:e7:17:62:da:69:60:57:43:41:2d:dd:7e:7b: f6:9e:e0:a6:d6:a0:92:3a:27:eb:49:58:42:4b:63: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B4:86:4F:0E:56:AB:EF:8A:51:BD:28:C6:41:01:83:51:19:39:60 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9c:c3:7a:1d:01:cd:cf:59:c9:75:c6:03:3b:2f:04:7f:52: a4:af:63:2d:74:d4:e6:2a:d6:f0:1b:53:a4:75:2b:48:7f:d3: f6:c7:d5:bd:35:41:e7:33:5b:0a:45:10:65:b6:e7:2e:88:ea: 97:af:1a:f0:6a:15:28:c2:14:b4:3b:bd:e9:a2:24:b9:44:dc: 83:2d:dd:b9:ab:5c:9f:c9:f1:3b:d2:91:1b:b4:99:91:1c:53: 82:74:61:49:9c:a2:cc:1a:3d:a4:48:25:bd:50:6d:98:cc:d7: c4:fe:65:50:4a:28:c5:2a:23:ee:1e:5a:40:ab:7b:64:7c:f6: 77:ac:df:d5:b6:d6:c5:00:f9:5e:63:9f:26:e7:4f:01:a5:57: 98:07:0b:76:ab:94:5b:c6:72:aa:62:c4:32:03:0a:c0:4b:34: c5:5b:72:90:6c:1e:f1:73:e3:64:f8:71:46:90:42:c3:12:48: ac:ae:ff:48:81:3b:0f:d7:e0:e3:3e:06:b3:7e:c1:31:6d:de: 6d:67:7f:9f:ed:89:96:59:9c:c3:19:cb:64:61:a9:50:6e:72: b3:bc:7a:c7:49:44:08:a8:d2:db:0b:f4:7c:91:0c:3e:4e:e8: a5:c0:ae:e4:cf:1c:51:59:86:4c:95:96:74:af:38:ea:36:7a: 73:68:99:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjQxMTIyMTc0NjIxWhcNMjQxMTI5MTc0NjIxWjAYMRYwFAYD VQQDEw02NzQwYzM2ZS01ZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7QxbIUTLkEIwCGH0DIE+yS/Z0goDr9xuRFr7PS5BpGCkhgB7ddbdBCYVjqi hvpdgTXgfoY1m1hJyZDp4Ab44+fqZDEYn75boeHoQmpK6C3MJmyqiBRdpCnhz6Wy 8yOkwm7k3eZPo+iAFestxPgyHYPkRBNjawOkNayyXHL+12kigl6sv4ygHGk1s4QX Uw4cXTXUagS2IxvUZrDsfzJL6AZJxYzj/P3FMnV2MBe2Kd7T850O8ZIM8PUXx3SH MqIHLydcBlNWmAj11I8VRo+Qs3nA4EyRgP74zrqq6bjkQHoZUecXYtppYFdDQS3d fnv2nuCm1qCSOifrSVhCS2NFrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC0hk8O VqvvilG9KMZBAYNRGTlgMB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHnMN6HQHNz1nJdcYDOy8Ef1Kkr2MtdNTmKtbwG1OkdStIf9P2x9W9 NUHnM1sKRRBltucuiOqXrxrwahUowhS0O73poiS5RNyDLd25q1yfyfE70pEbtJmR HFOCdGFJnKLMGj2kSCW9UG2YzNfE/mVQSijFKiPuHlpAq3tkfPZ3rN/VttbFAPle Y58m508BpVeYBwt2q5RbxnKqYsQyAwrASzTFW3KQbB7xc+Nk+HFGkELDEkisrv9I gTsP1+DjPgazfsExbd5tZ3+f7YmWWZzDGctkYalQbnKzvHrHSUQIqNLbC/R8kQw+ TuilwK7kzxxRWYZMlZZ0rzjqNnpzaJlY -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org