$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: nOpZd0iz5YyVEochTFBwg/tZpnVshwOz94Xar/pdLfw= Subject key identifier: F1:A9:DC:EC:C1:02:7B:00:E7:C7:1C:32:CC:45:D1:77:30:39:A6:40 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 344B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 3441 Signing time: Fri 22 Nov 2024 15:02:44 +0000 Manifest this update: Fri 22 Nov 2024 15:02:44 +0000 Manifest next update: Fri 29 Nov 2024 15:02:44 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: jN9M7IXoJNLjgFjTtxGBVRtg9LGXOgmgtUNfgSQOqGA=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: +Z1Ldyuz4HB0yeC9kiN8GX7/0TnuMGaHDVLqOr783Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13387 (0x344b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Nov 22 15:02:44 2024 GMT Not After : Nov 29 15:02:44 2024 GMT Subject: CN=67409d14-af52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:fa:f1:eb:9a:f5:72:9f:06:7e:ae:53:d9: d8:33:0d:b6:5e:c1:2f:c4:09:3a:5e:9e:08:5d:e8: 56:0e:67:6f:a4:da:6c:c9:7d:7a:49:4a:02:3d:df: ad:dc:e8:39:a9:3c:1d:e2:da:1e:67:80:b8:ad:a1: 7d:ba:3e:ec:1d:df:0d:42:8c:39:68:84:ec:a8:74: ba:71:03:4c:98:90:54:8f:06:6d:a6:dc:3c:09:c1: b3:f8:ea:ae:c0:f1:e5:f1:b5:19:66:cd:28:6f:29: 21:05:e0:2b:ed:95:43:a1:5e:2e:34:83:72:30:b7: 99:d9:7e:91:cd:c5:62:ea:59:6c:09:fd:2a:73:8e: 8b:44:c7:74:4e:5c:84:bf:8e:99:08:93:d9:90:9b: ff:6f:8e:55:75:f3:18:6d:b0:ea:6f:fe:35:c8:7c: 3a:a4:31:eb:fd:c7:47:02:2b:33:92:b5:17:8c:85: 2d:b7:c0:ea:7c:c0:0a:36:1e:9c:66:b8:20:eb:c0: fa:d5:97:c1:18:bc:f9:25:8c:2b:ca:a2:ba:81:76: f5:fd:28:17:aa:20:34:12:25:9d:79:7b:43:86:3b: e2:ac:a2:24:c4:db:f6:cf:08:cb:e9:3b:b0:32:c5: 16:fc:a0:ba:83:18:17:49:55:89:0f:67:04:6b:02: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A9:DC:EC:C1:02:7B:00:E7:C7:1C:32:CC:45:D1:77:30:39:A6:40 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0c:95:de:8a:87:ed:d3:76:51:2f:a3:86:49:2e:8b:1f:27: 2b:4b:57:ea:87:af:ed:cb:71:d0:d0:5f:3d:0a:8f:10:7f:2b: 65:02:ac:45:57:4a:cd:bf:53:e8:7d:cc:38:a5:49:7d:6c:cf: bd:bb:e7:38:91:ff:09:85:76:2f:e1:e1:fd:cb:04:77:1b:26: 16:59:b6:77:83:a6:44:d3:47:e8:d0:18:2a:83:e8:c4:24:02: 70:d9:e3:a0:17:42:45:4c:0a:89:e2:2e:22:24:04:86:2d:dd: 1a:d2:11:46:c5:3b:fa:dc:67:20:ff:39:a6:18:bb:00:21:12: 3f:2c:0a:85:55:c0:60:3d:c9:67:b3:58:87:ba:d7:ee:54:04: 2a:74:3f:ff:63:99:bd:66:15:03:a9:85:c3:37:e8:aa:c6:84: 30:fe:90:54:51:e6:e3:0a:0a:23:dd:4e:8f:e3:e8:2a:29:7e: f0:d9:bf:5b:87:80:77:cb:fd:e6:af:ff:0e:4d:82:f9:1a:ec: 33:94:a5:62:61:9c:75:b1:a4:d8:b0:cf:cc:7d:3d:ff:8f:85: c8:bd:60:81:b8:62:30:23:ba:b4:e5:7f:85:22:f1:d8:53:da: 5e:51:91:00:16:98:d6:54:05:e1:9b:b0:f0:e1:4c:a0:da:6c: 18:9c:dd:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjQxMTIyMTUwMjQ0WhcNMjQxMTI5MTUwMjQ0WjAYMRYwFAYD VQQDEw02NzQwOWQxNC1hZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusT68eua9XKfBn6uU9nYMw22XsEvxAk6Xp4IXehWDmdvpNpsyX16SUoCPd+t 3Og5qTwd4toeZ4C4raF9uj7sHd8NQow5aITsqHS6cQNMmJBUjwZtptw8CcGz+Oqu wPHl8bUZZs0obykhBeAr7ZVDoV4uNINyMLeZ2X6RzcVi6llsCf0qc46LRMd0TlyE v46ZCJPZkJv/b45VdfMYbbDqb/41yHw6pDHr/cdHAiszkrUXjIUtt8DqfMAKNh6c Zrgg68D61ZfBGLz5JYwryqK6gXb1/SgXqiA0EiWdeXtDhjvirKIkxNv2zwjL6Tuw MsUW/KC6gxgXSVWJD2cEawIFcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGp3OzB AnsA58ccMsxF0XcwOaZAMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIDJXeioft03ZRL6OGSS6LHycrS1fqh6/ty3HQ0F89Co8QfytlAqxF V0rNv1Pofcw4pUl9bM+9u+c4kf8JhXYv4eH9ywR3GyYWWbZ3g6ZE00fo0Bgqg+jE JAJw2eOgF0JFTAqJ4i4iJASGLd0a0hFGxTv63Gcg/zmmGLsAIRI/LAqFVcBgPcln s1iHutfuVAQqdD//Y5m9ZhUDqYXDN+iqxoQw/pBUUebjCgoj3U6P4+gqKX7w2b9b h4B3y/3mr/8OTYL5GuwzlKViYZx1saTYsM/MfT3/j4XIvWCBuGIwI7q05X+FIvHY U9peUZEAFpjWVAXhm7Dw4Uyg2mwYnN2t -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org