$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: 5s/YjQ07dPggyoBophPi8LAtrlzf1H4gZPmS5+Qk6c4= Subject key identifier: A2:AC:08:E3:B1:2D:EC:7B:94:3D:25:5E:2F:29:3D:96:6D:B9:E9:DA Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 1226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 1205 Signing time: Wed 20 Nov 2024 17:06:44 +0000 Manifest this update: Wed 20 Nov 2024 17:06:44 +0000 Manifest next update: Wed 27 Nov 2024 17:06:44 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: e7xssEmEiaVQjk9qbX81cPEeDxuCB1c7m88juti0MhA=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: CA19srqh0Q6qSkpS5f1WI4ZLZ8befQ3b095HOMVpe8Q=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: RyCNpZPyi/g+YauzqBs7rDG8vGnkFGaOzI70T5pPGJQ=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: CyPCkB+xF7/7LV5tDeHmCsATVCTbsm9N+YA32mChPrU=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: ulDXXytzKLhDZDPUF/WwhWO/+4HtH6mgUrwehHRDvEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4646 (0x1226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Nov 20 17:06:44 2024 GMT Not After : Nov 27 17:06:44 2024 GMT Subject: CN=673e1724-6c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:ce:e4:61:7b:e8:9e:ac:56:7d:e9:1b:3b: f9:0d:f4:24:0d:f4:00:e1:52:cf:62:36:1e:54:56: 6d:30:58:09:f1:ac:2f:6b:64:7c:15:e1:75:b3:27: be:97:45:95:25:2d:10:24:4f:e0:93:31:16:34:a4: 6f:4a:37:24:e3:40:f6:cb:0f:ba:03:ab:58:c5:63: 38:45:8d:1b:09:cd:4d:3f:39:02:26:8c:42:02:b5: 17:4e:c5:98:d5:30:9e:12:a5:3c:fb:cf:5e:fb:95: 0c:c2:9f:74:03:30:5c:e2:be:61:81:1d:de:76:68: fb:75:56:df:ef:c6:a4:d6:f5:0e:72:f7:7a:f1:ca: 7e:ed:fa:91:cb:db:fc:2c:44:e2:10:1f:e0:b0:b1: 9d:44:10:0f:48:7b:cc:e9:e9:97:43:0b:f5:60:28: 6b:85:27:cc:b6:c4:f1:01:5c:cb:4b:7e:e0:4e:b3: c8:4a:fb:c6:f4:97:ce:c3:c1:c1:42:b2:1d:cc:54: db:97:19:e2:f6:0f:18:05:e6:61:4b:07:67:91:b3: 27:28:fe:d5:ae:02:91:18:cd:3e:1d:97:9a:b1:da: 04:bf:98:5b:de:da:e5:46:bf:73:ff:df:60:15:4e: 75:75:fb:ac:1c:07:54:a5:61:a2:41:53:fd:39:5c: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AC:08:E3:B1:2D:EC:7B:94:3D:25:5E:2F:29:3D:96:6D:B9:E9:DA X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:38:bb:4b:1d:e1:e6:0c:48:ba:e1:c5:32:ce:79:b5:57:d2: 67:ae:e7:9c:fb:2a:f7:18:c1:cb:8e:25:4d:bf:24:09:28:fb: da:24:6a:31:38:97:a0:75:da:5a:6e:ee:7d:96:04:3e:d3:35: 6c:a7:da:6f:65:da:f5:99:8d:82:75:16:84:5f:13:64:eb:b3: 28:9c:92:24:08:9f:14:4a:da:ad:f4:fe:0d:29:3f:c5:70:5e: db:9a:51:cb:1c:6a:53:7a:04:31:ba:16:45:b4:bc:98:0b:53: ae:0f:27:ce:9f:56:10:83:ee:5b:a9:f2:66:27:4c:93:a4:2c: ee:ae:33:0a:24:95:74:76:aa:46:39:f4:08:a1:8d:fb:ce:84: c2:d5:70:2a:ca:8f:95:7e:2d:b9:2e:a7:38:bf:40:17:03:76: 56:b5:7c:0d:a3:a9:20:9e:58:54:ce:dd:22:9e:e3:4f:51:f7: c9:3b:f0:54:1e:7d:24:c0:5d:19:86:14:83:92:97:96:2b:5c: 57:6a:ac:6c:75:62:89:56:da:53:7d:9d:b5:9f:82:e5:c6:9b: 8f:de:a2:bd:84:51:de:f7:dc:0d:f0:14:a1:5b:4f:5a:52:25: 3d:57:62:79:9d:1a:98:48:38:a9:1b:c4:0e:d3:89:2e:2d:f8: ef:8d:73:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjQxMTIwMTcwNjQ0WhcNMjQxMTI3MTcwNjQ0WjAYMRYwFAYD VQQDEw02NzNlMTcyNC02YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK3O5GF76J6sVn3pGzv5DfQkDfQA4VLPYjYeVFZtMFgJ8awva2R8FeF1sye+ l0WVJS0QJE/gkzEWNKRvSjck40D2yw+6A6tYxWM4RY0bCc1NPzkCJoxCArUXTsWY 1TCeEqU8+89e+5UMwp90AzBc4r5hgR3edmj7dVbf78ak1vUOcvd68cp+7fqRy9v8 LETiEB/gsLGdRBAPSHvM6emXQwv1YChrhSfMtsTxAVzLS37gTrPISvvG9JfOw8HB QrIdzFTblxni9g8YBeZhSwdnkbMnKP7VrgKRGM0+HZeasdoEv5hb3trlRr9z/99g FU51dfusHAdUpWGiQVP9OVxgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKsCOOx Lex7lD0lXi8pPZZtuenaMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/OLtLHeHmDEi64cUyznm1V9Jnruec+yr3GMHLjiVNvyQJKPvaJGox OJegddpabu59lgQ+0zVsp9pvZdr1mY2CdRaEXxNk67MonJIkCJ8UStqt9P4NKT/F cF7bmlHLHGpTegQxuhZFtLyYC1OuDyfOn1YQg+5bqfJmJ0yTpCzurjMKJJV0dqpG OfQIoY37zoTC1XAqyo+Vfi25Lqc4v0AXA3ZWtXwNo6kgnlhUzt0inuNPUffJO/BU Hn0kwF0ZhhSDkpeWK1xXaqxsdWKJVtpTfZ21n4LlxpuP3qK9hFHe99wN8BShW09a UiU9V2J5nRqYSDipG8QO04kuLfjvjXNE -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:04 2024 by rpki-client on console-fra.rpki-client.org