$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: VM9dinX4jZGJ906RPzRXLZ1A+aNw0m2L9dT0ckxjYp0= Subject key identifier: 5B:73:5A:B5:10:60:57:13:FE:5A:9A:F1:E7:FE:95:49:A3:34:AC:19 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 11B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 119C Signing time: Thu 02 May 2024 17:50:07 +0000 Manifest this update: Thu 02 May 2024 17:50:07 +0000 Manifest next update: Thu 09 May 2024 17:50:07 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: SVWxTTkdM0KxNn5jCoz5tdNL+3PwSBRBBy3CZtBLqmY=) 2: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: RCSVNIFzc0MxQU2nRucYD4IwsTnamrdTeNXUkUDA6tE=) 3: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: CvHjodYxCU1lkipyPCpjKYmxopoHgKt+OYSOb3KYdj0=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: JnF5+7NsmUg1WH1IMV33GUBJe1CH0KdvlE0jmWBmNQE=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: dftwsSCca9aY9qauOgyqtvwerpP1A/WuCLeHieNK1lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4537 (0x11b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: May 2 17:50:07 2024 GMT Not After : May 9 17:50:07 2024 GMT Subject: CN=6633d24f-7347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:d1:c1:85:c4:f5:f3:f8:10:22:16:93:e1: 31:07:cd:84:eb:62:f6:4b:04:72:79:83:cc:ef:3b: 57:df:07:ab:2e:7b:ce:0d:e9:de:20:bb:2b:ee:94: a2:cd:11:58:17:57:43:5a:4f:8e:5b:1d:07:84:33: 39:71:95:10:4a:31:38:34:13:83:62:ba:53:2e:13: dd:53:0d:22:98:e9:12:9c:88:36:e3:b6:99:61:2f: a5:fb:f0:55:20:28:68:7e:04:3b:90:b6:6f:80:3b: 57:62:46:c7:97:eb:5f:11:c3:88:90:a4:af:87:8f: 08:1b:a9:11:3b:26:03:4e:c3:94:9a:21:e4:1e:ea: 99:f4:b2:a8:68:c4:3b:a6:0a:2e:dd:8e:c2:21:24: 41:65:90:8d:76:92:26:67:08:8e:1c:de:c3:b3:70: 06:22:32:31:5b:5b:ae:ff:ea:30:d3:4c:fb:66:87: 5d:c7:61:e6:f0:fb:8f:eb:6f:32:f4:52:45:f6:0f: 7e:e7:2c:8e:25:fe:54:a9:44:71:aa:0a:73:37:65: b2:f5:4c:0e:1b:b3:1a:15:c2:58:25:d6:0f:dc:cc: 4e:b5:4b:3a:72:42:07:84:47:05:c1:ed:02:28:a6: 5c:69:11:b2:46:24:a2:60:f7:9c:f4:8b:ba:c0:6f: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:73:5A:B5:10:60:57:13:FE:5A:9A:F1:E7:FE:95:49:A3:34:AC:19 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3f:0a:9f:33:81:52:b0:ab:08:d8:76:a9:79:2f:60:81:81: 43:23:f8:5c:4e:f0:0e:18:bc:98:b5:bd:58:19:9e:09:01:68: 18:de:c7:b9:be:e2:85:8e:d2:c1:83:19:93:69:5d:b0:7d:db: 7c:66:bf:ab:cc:aa:f7:d0:6e:21:85:38:bd:75:82:1f:6d:0f: 85:c6:f6:de:0b:cc:57:44:37:97:9f:d0:50:e8:55:ca:d1:9f: 77:fc:98:2e:68:9b:b4:a0:20:c9:3b:6c:0f:7f:8e:60:23:3a: 2d:28:aa:50:5f:c1:88:d0:50:32:82:2d:75:e1:f2:73:bd:c8: 88:17:6f:1d:88:b0:56:60:42:50:69:5d:5a:aa:d0:ee:b7:00: 56:68:f5:40:ed:d4:08:c1:4d:40:2a:22:e9:9e:b7:de:4f:00: bb:c4:c9:16:e6:b5:94:38:41:be:82:11:df:1d:5b:c7:39:2c: 77:49:64:d3:89:96:4f:fe:64:8d:90:eb:32:c2:cc:f7:f5:83: 51:74:71:bb:4d:70:19:ac:65:0c:1c:c0:69:25:2d:27:39:7c: 6f:3a:16:c7:25:28:9c:53:cb:50:88:69:2f:95:04:03:7c:c5: 38:d9:5b:90:d6:a6:26:78:7c:f3:95:d9:50:27:c3:29:ca:0d: f7:29:6f:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjQwNTAyMTc1MDA3WhcNMjQwNTA5MTc1MDA3WjAYMRYwFAYD VQQDEw02NjMzZDI0Zi03MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUHRwYXE9fP4ECIWk+ExB82E62L2SwRyeYPM7ztX3werLnvODeneILsr7pSi zRFYF1dDWk+OWx0HhDM5cZUQSjE4NBODYrpTLhPdUw0imOkSnIg247aZYS+l+/BV IChofgQ7kLZvgDtXYkbHl+tfEcOIkKSvh48IG6kROyYDTsOUmiHkHuqZ9LKoaMQ7 pgou3Y7CISRBZZCNdpImZwiOHN7Ds3AGIjIxW1uu/+ow00z7Zoddx2Hm8PuP628y 9FJF9g9+5yyOJf5UqURxqgpzN2Wy9UwOG7MaFcJYJdYP3MxOtUs6ckIHhEcFwe0C KKZcaRGyRiSiYPec9Iu6wG8gyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtzWrUQ YFcT/lqa8ef+lUmjNKwZMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARPwqfM4FSsKsI2HapeS9ggYFDI/hcTvAOGLyYtb1YGZ4JAWgY3se5 vuKFjtLBgxmTaV2wfdt8Zr+rzKr30G4hhTi9dYIfbQ+FxvbeC8xXRDeXn9BQ6FXK 0Z93/JguaJu0oCDJO2wPf45gIzotKKpQX8GI0FAygi114fJzvciIF28diLBWYEJQ aV1aqtDutwBWaPVA7dQIwU1AKiLpnrfeTwC7xMkW5rWUOEG+ghHfHVvHOSx3SWTT iZZP/mSNkOsywsz39YNRdHG7TXAZrGUMHMBpJS0nOXxvOhbHJSicU8tQiGkvlQQD fMU42VuQ1qYmeHzzldlQJ8Mpyg33KW+r -----END CERTIFICATE-----Generated at Thu May 2 20:04:53 2024 by rpki-client on console-ams.rpki-client.org