$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: SsW72raGi0nW+ucHu121/80mV92Dw0P9a94+kjZgRsU= Subject key identifier: 4D:C3:89:97:E5:57:96:CD:46:D5:77:E3:1C:1A:97:CF:43:FC:43:53 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 11BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 119E Signing time: Mon 06 May 2024 17:51:16 +0000 Manifest this update: Mon 06 May 2024 17:51:15 +0000 Manifest next update: Mon 13 May 2024 17:51:15 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: JFPRlB8ZwBZkuoNls/Z+7+4Erwn6FkQrbiPDzmemop0=) 2: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: RCSVNIFzc0MxQU2nRucYD4IwsTnamrdTeNXUkUDA6tE=) 3: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: CvHjodYxCU1lkipyPCpjKYmxopoHgKt+OYSOb3KYdj0=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: JnF5+7NsmUg1WH1IMV33GUBJe1CH0KdvlE0jmWBmNQE=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: dftwsSCca9aY9qauOgyqtvwerpP1A/WuCLeHieNK1lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4539 (0x11bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: May 6 17:51:15 2024 GMT Not After : May 13 17:51:15 2024 GMT Subject: CN=66391893-42b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:ef:7b:29:51:f8:cd:c6:a3:be:f9:8e:d0: 8d:af:0f:55:a4:0e:47:e3:e5:4f:b4:1c:b7:f6:24: 2c:f6:f6:31:fe:80:f6:b4:6e:e6:3f:45:77:d9:a1: 72:f2:73:34:a5:d1:40:56:6b:fe:4d:93:49:f5:77: ef:f0:ae:5a:2c:62:dc:16:d6:c4:ed:83:b9:1f:1f: 8a:f2:56:8b:74:0b:16:04:58:b0:38:da:f4:5e:9a: 56:c9:3a:e1:72:95:81:a9:2d:9d:ab:b8:79:25:6e: 87:82:70:95:76:12:1e:9d:63:f0:ac:d5:e2:77:2d: be:d1:7b:3d:68:92:34:39:09:68:17:f4:21:29:de: 67:80:a3:9f:f8:88:81:18:a3:79:36:5b:f9:e1:47: 2f:d2:01:85:57:17:f3:e2:fd:dc:59:f6:0c:b8:b6: e3:52:67:6d:26:2b:06:c6:52:ed:8e:02:ae:63:e8: a1:84:8b:36:04:5c:6d:6a:c2:5b:ee:a2:62:63:6f: ba:c3:ff:08:b9:06:eb:c3:e8:29:fd:a0:fc:13:ef: 22:30:41:a9:a3:5a:61:b3:e8:19:35:90:58:78:fc: f2:7c:85:ae:70:fc:5f:b4:69:36:61:84:dc:c7:9b: f8:99:3d:19:74:b7:bd:2f:a0:89:0e:70:84:33:89: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C3:89:97:E5:57:96:CD:46:D5:77:E3:1C:1A:97:CF:43:FC:43:53 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:00:f4:90:51:64:6f:80:5e:ba:06:4b:d6:dd:1c:80:38:3d: 05:45:fa:c8:0f:c7:d6:d2:f6:f6:9d:e1:b3:91:a8:bf:9d:bd: 5d:24:b3:b6:67:f7:e7:86:0b:1c:5e:ee:45:3e:25:cb:99:b6: 9e:9f:9e:51:4b:a1:30:3d:cf:8f:89:e2:6b:b4:9d:13:7e:20: 1d:29:ab:ab:ef:b9:0c:35:0a:45:b2:b6:6c:de:cf:80:6c:a1: 59:8a:df:fe:5c:7a:c3:bc:18:79:5c:e0:25:8a:2a:a1:25:74: d4:c5:91:8e:4b:4d:ea:a9:97:a0:bb:a3:42:7f:e8:63:c0:0f: 08:67:c2:a6:bc:5a:7f:11:13:be:5e:31:4b:e2:74:cd:fb:3c: 09:41:61:ff:f8:34:18:32:2f:1c:50:7b:9f:b3:db:de:dc:08: 9e:a0:83:09:fa:b4:82:e9:df:35:65:8b:ce:6d:fb:81:cf:77: aa:b6:e7:68:56:8a:44:d9:b0:e8:17:b3:01:d5:0d:70:3c:73: a3:ea:65:9d:ef:e8:0e:37:0d:c6:f8:e1:37:94:fa:1a:f4:e7: 1f:c5:f8:39:9a:87:59:57:e4:08:76:59:a5:5a:5e:d1:8d:10: 87:45:d0:5d:e8:d4:20:27:b4:0a:93:b4:7b:1e:db:78:33:66: 11:bb:90:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjQwNTA2MTc1MTE1WhcNMjQwNTEzMTc1MTE1WjAYMRYwFAYD VQQDEw02NjM5MTg5My00MmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8zveylR+M3Go775jtCNrw9VpA5H4+VPtBy39iQs9vYx/oD2tG7mP0V32aFy 8nM0pdFAVmv+TZNJ9Xfv8K5aLGLcFtbE7YO5Hx+K8laLdAsWBFiwONr0XppWyTrh cpWBqS2dq7h5JW6HgnCVdhIenWPwrNXidy2+0Xs9aJI0OQloF/QhKd5ngKOf+IiB GKN5Nlv54Ucv0gGFVxfz4v3cWfYMuLbjUmdtJisGxlLtjgKuY+ihhIs2BFxtasJb 7qJiY2+6w/8IuQbrw+gp/aD8E+8iMEGpo1phs+gZNZBYePzyfIWucPxftGk2YYTc x5v4mT0ZdLe9L6CJDnCEM4nLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3DiZfl V5bNRtV34xwal89D/ENTMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHAPSQUWRvgF66BkvW3RyAOD0FRfrID8fW0vb2neGzkai/nb1dJLO2 Z/fnhgscXu5FPiXLmbaen55RS6EwPc+PieJrtJ0TfiAdKaur77kMNQpFsrZs3s+A bKFZit/+XHrDvBh5XOAliiqhJXTUxZGOS03qqZegu6NCf+hjwA8IZ8KmvFp/ERO+ XjFL4nTN+zwJQWH/+DQYMi8cUHufs9ve3AieoIMJ+rSC6d81ZYvObfuBz3eqtudo VopE2bDoF7MB1Q1wPHOj6mWd7+gONw3G+OE3lPoa9Ocfxfg5modZV+QIdlmlWl7R jRCHRdBd6NQgJ7QKk7R7Htt4M2YRu5BB -----END CERTIFICATE-----Generated at Mon May 6 20:19:43 2024 by rpki-client on console-ams.rpki-client.org