$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: CGAFZulagMSvpqHelt07Wl9d35Voi8h7L5c2DpqWEf0= Subject key identifier: D5:9D:40:A7:59:46:AA:DB:AA:DC:33:B3:EE:4C:E9:89:EB:8F:FE:15 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 03E5 Signing time: Sun 05 May 2024 02:25:54 +0000 Manifest this update: Sun 05 May 2024 02:25:54 +0000 Manifest next update: Sun 12 May 2024 02:25:54 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: quiAQ7kD6i3VFYP2vuVTpXiKD7yCDscq42RinEaS1JY=) 2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: bk3YWO13qvzV1V5OwS6neaChdhLqD8dAb9uNZzEGn/o=) 3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: XAfIT/qxEsdDsMsTiyi2Wu+Sy8d4PnjJ3uyzRb6KPmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: May 5 02:25:54 2024 GMT Not After : May 12 02:25:54 2024 GMT Subject: CN=6636ee32-1f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:34:2d:1d:9e:64:6c:42:fe:5e:eb:a7:a9: 24:f0:03:18:d0:65:06:23:a3:2e:3c:cb:89:27:2e: 62:a0:8a:b6:fa:c5:11:12:16:f7:68:cd:ae:b5:e0: e7:83:ec:d9:88:ef:fe:cf:f5:10:71:13:29:bf:9b: 16:55:c5:41:01:c1:fd:66:46:e7:88:00:0d:9a:ad: 0d:61:8c:b0:27:c3:18:ce:54:11:16:93:07:62:7e: ce:41:e5:8a:e0:a2:e0:96:e4:ad:91:6b:51:fb:ec: 95:ee:f6:80:a0:db:be:c1:13:b8:57:0e:cc:cd:52: 4c:12:35:c6:36:b9:fa:47:02:7c:02:45:ee:f2:7a: 21:14:f1:86:18:f0:2e:cd:ef:1c:40:ab:99:a9:71: ca:11:ef:50:5c:f7:7b:9d:09:d8:66:00:3c:90:a5: d8:58:56:5e:6c:aa:9e:4c:ce:ad:b8:ec:5e:5e:6b: 95:c9:77:8c:cd:f4:fd:10:8c:d0:37:eb:53:71:38: 40:aa:8c:b4:ff:c0:f3:14:d2:1c:09:5a:04:cc:36: 96:ab:27:36:30:ad:b4:0f:db:4e:5d:d4:8b:bc:24: a0:78:3d:15:9c:ac:e7:1a:60:c3:8b:b4:9f:44:9e: 89:8b:4c:62:51:0a:ec:e1:3d:74:6d:e6:f8:f0:e2: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9D:40:A7:59:46:AA:DB:AA:DC:33:B3:EE:4C:E9:89:EB:8F:FE:15 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:80:89:83:73:76:d4:ad:2e:27:62:8b:fd:c3:26:3f:75:68: e4:8c:22:23:4d:b8:dd:3c:90:e2:f4:aa:00:39:40:ac:d4:8a: 49:89:08:a0:d6:4f:ee:76:75:87:c4:86:4c:8b:8f:54:b6:63: 36:48:c4:d3:de:b8:09:9e:fe:89:7c:fe:5b:a1:6d:79:a8:27: 33:ae:1c:71:c8:b7:c1:88:14:ca:42:eb:12:bd:fb:bf:ea:60: 50:7f:b0:74:f7:98:ed:a5:a9:d8:0b:fa:c4:6b:04:52:03:96: 09:0a:10:80:b7:94:9a:be:c8:26:b5:02:5e:ae:30:8a:29:f5: 9f:02:dc:59:9f:68:01:48:0e:60:50:c5:e0:aa:63:ff:82:1e: 53:c2:06:20:8c:c2:7d:8d:d0:be:dd:f8:ee:50:d1:f1:eb:bd: 62:4d:c1:d1:61:98:63:e5:d6:fa:32:a0:bd:5b:a1:7c:09:27: be:34:0d:cb:c4:93:a4:76:65:09:17:99:2f:89:80:36:56:3f: c0:80:2a:7d:62:48:60:1b:bd:2b:8b:7b:9a:63:ef:fb:6a:44: 44:40:3c:84:d9:f9:e6:fa:d7:6a:e2:f6:78:f6:cb:ea:df:fd: b4:7a:7d:fc:5d:b0:56:78:06:8c:41:e6:e3:ff:13:8c:c2:e4: f7:f4:e7:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjQwNTA1MDIyNTU0WhcNMjQwNTEyMDIyNTU0WjAYMRYwFAYD VQQDEw02NjM2ZWUzMi0xZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaw0LR2eZGxC/l7rp6kk8AMY0GUGI6MuPMuJJy5ioIq2+sUREhb3aM2uteDn g+zZiO/+z/UQcRMpv5sWVcVBAcH9ZkbniAANmq0NYYywJ8MYzlQRFpMHYn7OQeWK 4KLgluStkWtR++yV7vaAoNu+wRO4Vw7MzVJMEjXGNrn6RwJ8AkXu8nohFPGGGPAu ze8cQKuZqXHKEe9QXPd7nQnYZgA8kKXYWFZebKqeTM6tuOxeXmuVyXeMzfT9EIzQ N+tTcThAqoy0/8DzFNIcCVoEzDaWqyc2MK20D9tOXdSLvCSgeD0VnKznGmDDi7Sf RJ6Ji0xiUQrs4T10beb48OKSrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWdQKdZ Rqrbqtwzs+5M6Ynrj/4VMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVgImDc3bUrS4nYov9wyY/dWjkjCIjTbjdPJDi9KoAOUCs1IpJiQig 1k/udnWHxIZMi49UtmM2SMTT3rgJnv6JfP5boW15qCczrhxxyLfBiBTKQusSvfu/ 6mBQf7B095jtpanYC/rEawRSA5YJChCAt5SavsgmtQJerjCKKfWfAtxZn2gBSA5g UMXgqmP/gh5TwgYgjMJ9jdC+3fjuUNHx671iTcHRYZhj5db6MqC9W6F8CSe+NA3L xJOkdmUJF5kviYA2Vj/AgCp9YkhgG70ri3uaY+/7akREQDyE2fnm+tdq4vZ49svq 3/20en38XbBWeAaMQebj/xOMwuT39Ocx -----END CERTIFICATE-----Generated at Sun May 5 03:47:48 2024 by rpki-client on console-fra.rpki-client.org