$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: Ru5jWBPoE2CJx3f0Un8mFa1zBXD9vnEznzm/vOYvk18= Subject key identifier: 53:60:EF:D7:14:FF:1C:DB:65:FA:39:78:59:44:2E:E6:3E:DA:FF:69 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 044C Signing time: Fri 22 Nov 2024 23:47:21 +0000 Manifest this update: Fri 22 Nov 2024 23:47:20 +0000 Manifest next update: Fri 29 Nov 2024 23:47:20 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: s0E7VZ2991viVYjK1gcIL2/2EWVCiYz5lQEA+yFOlC0=) 2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: bk3YWO13qvzV1V5OwS6neaChdhLqD8dAb9uNZzEGn/o=) 3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: XAfIT/qxEsdDsMsTiyi2Wu+Sy8d4PnjJ3uyzRb6KPmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Nov 22 23:47:20 2024 GMT Not After : Nov 29 23:47:20 2024 GMT Subject: CN=67411809-27b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:2b:c3:24:06:1f:d7:c3:83:04:da:ab:4a: e4:a2:67:db:db:60:b1:5e:58:d0:d4:53:de:33:00: 3c:82:30:c3:e6:88:12:69:93:5a:fc:95:fd:78:ca: 24:ca:61:b0:ea:71:2b:ab:93:de:53:72:ad:b5:57: a2:44:e7:b5:6a:09:70:8a:28:6a:94:9f:f6:e0:94: 9f:0c:f7:6d:b7:ce:66:bf:0e:7b:45:89:5c:4b:b2: 09:bb:0d:56:2d:ff:8d:eb:75:9b:d6:ee:35:d6:c9: 0f:c3:92:47:42:a0:b4:32:22:3a:93:14:e0:55:05: 8c:c4:ae:5f:e6:25:11:58:e0:de:1a:f2:52:1e:f8: 33:68:5b:c3:3d:f8:65:76:ec:16:49:fd:3d:03:c1: dc:71:9f:4f:54:17:16:7f:e8:33:96:5a:01:0c:d9: 37:ab:18:01:95:b5:74:a2:e4:0e:7f:ab:b8:44:24: f3:bd:6f:41:db:e5:70:d9:21:f9:f1:7f:10:35:e7: 73:27:61:01:1f:bd:f8:cf:5c:32:2e:be:29:7d:52: 2b:57:fc:95:0a:db:73:a3:c9:a7:56:83:29:d0:92: 5f:7b:70:7e:ef:94:fd:e6:8f:a1:74:b8:9c:36:6a: 8a:a1:3e:2a:c4:08:58:07:f8:91:ce:a6:e1:e1:c3: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:60:EF:D7:14:FF:1C:DB:65:FA:39:78:59:44:2E:E6:3E:DA:FF:69 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:47:b9:ad:eb:0c:df:44:bc:73:ee:18:15:df:1d:a0:01:cc: f5:f8:d8:04:75:e9:8b:bf:9e:3f:5c:bb:ec:16:81:40:24:82: 21:2c:29:a4:05:83:60:95:ae:e1:29:e7:a0:ca:70:a5:73:d4: 7e:22:a8:cd:97:f9:c8:38:64:01:9f:31:ed:c4:9a:9b:28:c8: 7d:7f:e7:16:3e:2c:00:6c:de:81:41:0e:e4:7f:41:14:59:50: d3:4d:3e:58:b4:db:cd:17:bc:e1:c9:7e:bb:16:a9:a7:58:e0: ec:f5:60:93:d7:f5:2a:09:b9:e5:80:db:7a:db:33:23:a7:55: cf:15:e9:00:0f:c5:00:7c:3f:10:0d:b1:21:e8:1c:87:c5:a4: b4:30:ab:38:56:0f:16:89:c3:5d:8c:42:93:ec:2a:cc:3b:5e: 13:d5:b2:a4:af:c5:68:e8:99:25:3d:f7:eb:fb:7f:45:88:3d: 23:02:9f:29:7d:a1:f1:f8:81:c5:68:7e:64:73:d9:96:c3:96: 3a:b9:ca:78:fe:70:ff:66:8a:d0:af:8f:29:8d:8d:45:42:6c: 92:e4:84:b7:7a:dc:bb:8c:29:f2:f4:7e:9b:37:1c:64:ad:e3: b1:19:6b:8b:48:c9:7f:7a:e0:65:9e:f5:de:2c:3b:1b:d4:b9: 10:60:80:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjQxMTIyMjM0NzIwWhcNMjQxMTI5MjM0NzIwWjAYMRYwFAYD VQQDEw02NzQxMTgwOS0yN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAIrwyQGH9fDgwTaq0rkomfb22CxXljQ1FPeMwA8gjDD5ogSaZNa/JX9eMok ymGw6nErq5PeU3KttVeiROe1aglwiihqlJ/24JSfDPdtt85mvw57RYlcS7IJuw1W Lf+N63Wb1u411skPw5JHQqC0MiI6kxTgVQWMxK5f5iURWODeGvJSHvgzaFvDPfhl duwWSf09A8HccZ9PVBcWf+gzlloBDNk3qxgBlbV0ouQOf6u4RCTzvW9B2+Vw2SH5 8X8QNedzJ2EBH734z1wyLr4pfVIrV/yVCttzo8mnVoMp0JJfe3B+75T95o+hdLic NmqKoT4qxAhYB/iRzqbh4cNg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNg79cU /xzbZfo5eFlELuY+2v9pMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2R7mt6wzfRLxz7hgV3x2gAcz1+NgEdemLv54/XLvsFoFAJIIhLCmk BYNgla7hKeegynClc9R+IqjNl/nIOGQBnzHtxJqbKMh9f+cWPiwAbN6BQQ7kf0EU WVDTTT5YtNvNF7zhyX67FqmnWODs9WCT1/UqCbnlgNt62zMjp1XPFekAD8UAfD8Q DbEh6ByHxaS0MKs4Vg8WicNdjEKT7CrMO14T1bKkr8Vo6JklPffr+39FiD0jAp8p faHx+IHFaH5kc9mWw5Y6ucp4/nD/ZorQr48pjY1FQmyS5IS3ety7jCny9H6bNxxk reOxGWuLSMl/euBlnvXeLDsb1LkQYIB9 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org