$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json) Hash identifier: IjYW4DjlgpvPTPH9RBX/P5TQX5PVp4QIgtvAMwfmisI= Subject key identifier: 79:26:67:F7:35:0C:0B:8B:38:0B:57:96:66:31:F9:9F:9D:32:CE:36 Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft Manifest number: B1 Signing time: Sun 19 May 2024 06:36:17 +0000 Manifest this update: Sun 19 May 2024 06:36:16 +0000 Manifest next update: Sun 26 May 2024 06:36:16 +0000 Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: oYRyvnePiWLPwYaGE0LxpqGpsyaCjfWomGY5IkuWi+Y=) 2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: KETtLjC6TzC1ChTU5VhPa2GsuKgnmsvYAWcO3cW4jgA=) 3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: BxUovaVl0Jw7kdro+dX+O8w7d9Fi2xKh9Vj0lpxV8sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Validity Not Before: May 19 06:36:16 2024 GMT Not After : May 26 06:36:16 2024 GMT Subject: CN=66499de1-1530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:5f:d8:71:cf:af:e1:3e:e6:05:c2:a2:f4: 66:5d:f0:55:58:50:41:0d:ec:96:b0:b1:4a:0a:c5: 57:23:44:80:1f:86:49:75:65:da:2d:d0:be:2f:d7: 1b:c0:5b:05:3d:5d:c3:a4:f7:9f:30:c2:f5:da:a7: 50:ba:35:0b:89:ca:25:6f:4b:d4:e1:47:b5:46:f0: 16:93:7a:61:f6:13:02:47:54:af:80:cc:ce:a5:46: 98:89:58:3a:1f:4e:7f:76:b7:e1:00:25:ab:85:e5: d0:6a:5b:c7:79:46:54:41:a2:32:ca:f2:01:dd:33: 0a:8a:4a:66:ef:0f:37:bb:de:65:56:1a:94:90:56: 47:da:18:da:e5:5c:46:72:24:62:41:0a:69:c5:10: 0d:3d:4f:96:a9:0a:84:f6:23:ea:38:fc:b4:78:ae: b5:dd:d4:58:e1:3b:d5:3d:7e:11:d0:c7:8f:5e:b7: 66:f8:b7:ae:5b:0c:a7:f3:93:59:35:1c:4e:95:97: 63:0d:1b:e2:83:d8:ca:ae:41:36:3e:56:c5:b5:c6: b2:cd:3d:9d:8b:92:9d:39:0d:85:01:68:e7:12:ce: f4:e3:fd:8e:85:5c:a7:e5:75:3e:1f:07:bf:49:b6: f9:7e:8d:43:a2:b0:f7:4f:0d:cd:36:dc:1e:6a:d8: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:67:F7:35:0C:0B:8B:38:0B:57:96:66:31:F9:9F:9D:32:CE:36 X509v3 Authority Key Identifier: keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0d:40:0b:0b:44:17:92:24:a8:ee:81:2c:bd:9b:04:82:b6: bf:73:0c:0c:b4:60:d7:8d:e8:d5:ce:59:34:f7:a2:3c:0f:9b: 29:53:32:d2:cd:29:27:2e:d2:d8:8c:9c:d6:ec:b4:91:2c:c8: c5:b0:ab:42:75:6f:64:18:e2:65:c6:df:c5:7a:01:bf:4c:f5: a6:2a:9d:d8:ad:d2:fc:19:f7:4d:40:42:81:63:6e:fc:ab:ed: ab:9f:8c:e4:a9:fc:db:1a:38:8d:87:be:ee:23:f4:2d:76:9c: cf:23:9d:fd:ea:9f:c1:5d:bb:82:62:4a:9e:54:0c:03:8a:2d: d6:b9:36:86:cf:af:e2:ae:91:c8:48:d5:b7:b3:b4:dd:39:fc: 8c:ea:c7:81:e7:9a:b7:4a:b5:7f:9a:9c:cb:84:17:8e:67:f8: 3a:3c:c2:0b:d3:50:20:ec:81:70:ab:ed:3f:b8:66:dc:98:88: c3:48:b8:f3:fd:66:2e:00:fe:cc:3d:a7:69:64:f4:d3:69:b0: 09:a1:8f:04:66:4e:5e:85:86:8a:0a:aa:f0:52:49:51:d6:25: b0:c0:33:e3:8c:f4:90:73:5d:9e:42:e8:96:11:2e:78:30:5a: db:73:0e:76:33:ec:dc:b3:76:5f:e7:5c:e2:51:3b:4a:b2:26: 59:9d:58:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MkUxMTAvBgNVBAUTKEVGNjcwMkE3RDBBRUM4MzRERUZCOEY0MTY4QjJGRThG NEQ1ODQzRTgwHhcNMjQwNTE5MDYzNjE2WhcNMjQwNTI2MDYzNjE2WjAYMRYwFAYD VQQDEw02NjQ5OWRlMS0xNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJxf2HHPr+E+5gXCovRmXfBVWFBBDeyWsLFKCsVXI0SAH4ZJdWXaLdC+L9cb wFsFPV3DpPefMML12qdQujULicolb0vU4Ue1RvAWk3ph9hMCR1SvgMzOpUaYiVg6 H05/drfhACWrheXQalvHeUZUQaIyyvIB3TMKikpm7w83u95lVhqUkFZH2hja5VxG ciRiQQppxRANPU+WqQqE9iPqOPy0eK613dRY4TvVPX4R0MePXrdm+LeuWwyn85NZ NRxOlZdjDRvig9jKrkE2PlbFtcayzT2di5KdOQ2FAWjnEs704/2OhVyn5XU+Hwe/ Sbb5fo1DorD3Tw3NNtweath+xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkmZ/c1 DAuLOAtXlmYx+Z+dMs42MB8GA1UdIwQYMBaAFO9nAqfQrsg03vuPQWiy/o9NWEPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyRS9EQzMzNTk3QzBC NjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlEVGUtNDlCYUxMLWowMVlR LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyY0NwOUN1eURUZS00OUJhTEwtajAxWVEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyRS9EQzMzNTk3QzBCNjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlE VGUtNDlCYUxMLWowMVlRLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxDUALC0QXkiSo7oEsvZsEgra/cwwMtGDXjejVzlk096I8D5spUzLS zSknLtLYjJzW7LSRLMjFsKtCdW9kGOJlxt/FegG/TPWmKp3YrdL8GfdNQEKBY278 q+2rn4zkqfzbGjiNh77uI/QtdpzPI5396p/BXbuCYkqeVAwDii3WuTaGz6/irpHI SNW3s7TdOfyM6seB55q3SrV/mpzLhBeOZ/g6PMIL01Ag7IFwq+0/uGbcmIjDSLjz /WYuAP7MPadpZPTTabAJoY8EZk5ehYaKCqrwUklR1iWwwDPjjPSQc12eQuiWES54 MFrbcw52M+zcs3Zf51ziUTtKsiZZnVgv -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org