$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: 6wDXr/cH0XcQn8Log7MPXV58575jKCWgzDRfjC/W9m0= Subject key identifier: 2A:3C:B7:A1:80:76:BC:B5:51:4B:56:66:1B:B3:85:B4:D6:1B:8F:37 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 33DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 33D4 Signing time: Tue 30 Apr 2024 15:11:54 +0000 Manifest this update: Tue 30 Apr 2024 15:11:53 +0000 Manifest next update: Tue 07 May 2024 15:11:53 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: TeVOmpww5YjJ9RBjTgo0W8guere5Hhc5xeqdg9mT5kA=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: 0a3GL0idAd/Vd/8utkLzz0DPOmg7fwIV+oY0ckaEHqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13277 (0x33dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Apr 30 15:11:53 2024 GMT Not After : May 7 15:11:53 2024 GMT Subject: CN=66310a39-3e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:2e:96:3a:31:5a:5d:9f:b4:88:c8:55:7d: 26:51:54:c0:fe:73:c4:61:b2:f8:07:fc:cd:e3:eb: dc:02:b7:ab:1c:bb:41:b0:3d:4b:20:f6:54:66:83: 71:b4:74:08:13:7c:f4:0d:08:f7:1d:5b:b5:dc:aa: ab:d4:42:8f:7f:24:c2:9d:af:f8:29:f8:42:f5:7e: bf:4e:98:b6:db:0c:ab:bf:67:21:7e:d4:15:42:c8: 6d:6f:d9:17:be:77:6e:68:e3:de:31:ad:f0:e6:6a: da:eb:10:79:73:9a:f4:c7:bb:0e:38:2b:b3:54:1f: 10:16:7d:b0:06:25:ef:07:0b:fc:36:fa:24:cc:a4: 37:79:70:e0:b7:1d:90:30:2c:26:1a:90:04:a3:4c: 55:e2:26:4d:f2:e1:32:41:c1:e7:5c:35:6b:56:34: 29:1e:c1:ce:a0:cf:9b:ef:ec:7b:b1:8c:3d:75:cf: 00:36:b3:b1:60:15:a5:4f:49:10:76:41:47:3a:37: 64:f5:e7:75:ae:32:20:5a:f5:e8:c9:11:ff:7e:8d: 7f:a7:f1:e3:e9:26:d9:b2:c6:50:68:cd:09:ef:2a: b5:f5:45:c4:9d:69:35:a2:ea:d0:72:92:a4:4b:3e: ca:0f:59:43:51:4b:0d:69:3d:b7:63:24:3b:f0:f2: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:B7:A1:80:76:BC:B5:51:4B:56:66:1B:B3:85:B4:D6:1B:8F:37 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0b:14:97:3d:74:ee:a7:ac:e2:7a:e0:1c:ea:b4:89:4f:21: 74:13:6f:41:6c:24:50:39:3c:71:11:c2:f6:50:a1:49:2f:9e: 1a:d0:e1:47:ad:e6:da:fa:0a:b2:1f:c9:2b:80:bd:f9:0d:a6: e8:1a:5f:c1:57:b9:06:4a:82:72:47:34:6e:39:f9:37:36:1e: 7f:0a:ef:76:e6:9c:bf:4a:9f:b7:fb:2b:49:2d:7a:58:f2:9c: d6:c8:c7:52:f2:47:96:fc:4f:0e:3b:29:18:b6:8d:c5:24:3d: 7d:00:ad:91:23:25:06:1e:d0:16:19:14:50:a3:15:de:e0:2c: a8:2a:fd:0e:37:38:df:e9:fe:25:90:40:f8:d4:ec:28:69:e4: ea:42:99:60:0d:2b:db:6a:9f:8d:ba:62:60:35:0f:46:4c:69: 7b:ed:8a:58:5d:6b:49:46:3e:6a:3c:ab:0c:89:8a:ad:fc:16: a5:e2:2e:d3:69:f4:48:0b:c0:00:3c:a1:f8:cc:83:46:ce:cf: e1:60:a0:19:90:a2:39:db:70:30:38:ff:b4:b1:a8:fb:d0:61: 95:a9:14:15:48:6f:b9:d1:d0:62:4d:c7:5c:c0:f6:e7:dd:0b: 22:51:85:4d:e7:b8:65:23:9b:d9:35:19:71:11:f2:58:82:cc: 10:14:f9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjQwNDMwMTUxMTUzWhcNMjQwNTA3MTUxMTUzWjAYMRYwFAYD VQQDEw02NjMxMGEzOS0zZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFsuljoxWl2ftIjIVX0mUVTA/nPEYbL4B/zN4+vcArerHLtBsD1LIPZUZoNx tHQIE3z0DQj3HVu13Kqr1EKPfyTCna/4KfhC9X6/Tpi22wyrv2chftQVQshtb9kX vnduaOPeMa3w5mra6xB5c5r0x7sOOCuzVB8QFn2wBiXvBwv8NvokzKQ3eXDgtx2Q MCwmGpAEo0xV4iZN8uEyQcHnXDVrVjQpHsHOoM+b7+x7sYw9dc8ANrOxYBWlT0kQ dkFHOjdk9ed1rjIgWvXoyRH/fo1/p/Hj6SbZssZQaM0J7yq19UXEnWk1ourQcpKk Sz7KD1lDUUsNaT23YyQ78PJFCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo8t6GA dry1UUtWZhuzhbTWG483MB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLCxSXPXTup6zieuAc6rSJTyF0E29BbCRQOTxxEcL2UKFJL54a0OFH reba+gqyH8krgL35DaboGl/BV7kGSoJyRzRuOfk3Nh5/Cu925py/Sp+3+ytJLXpY 8pzWyMdS8keW/E8OOykYto3FJD19AK2RIyUGHtAWGRRQoxXe4CyoKv0ONzjf6f4l kED41OwoaeTqQplgDSvbap+NumJgNQ9GTGl77YpYXWtJRj5qPKsMiYqt/Bal4i7T afRIC8AAPKH4zINGzs/hYKAZkKI523AwOP+0saj70GGVqRQVSG+50dBiTcdcwPbn 3QsiUYVN57hlI5vZNRlxEfJYgswQFPnx -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:22 2024 by rpki-client on console-ams.rpki-client.org