$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: 2tCLfuCVaO/xtdv+99DJ6jUvosnSCtMZWqIn6uKkOUY= Subject key identifier: 4C:A4:E6:5A:CA:A6:55:F6:3A:B9:44:DF:A2:B0:DD:8C:53:CB:2D:98 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 026A Signing time: Tue 07 May 2024 03:47:08 +0000 Manifest this update: Tue 07 May 2024 03:47:07 +0000 Manifest next update: Tue 14 May 2024 03:47:07 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: oxJJNaRS2VTQ92Hbywo01R7seRLF/8wKFIw66yJSb+o=) 2: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: 1tW/9m8K6hKwaVLborofF/7fcb8cDIytF76cEXSJGeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: May 7 03:47:07 2024 GMT Not After : May 14 03:47:07 2024 GMT Subject: CN=6639a43c-fbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:54:c1:ce:29:f1:b2:44:42:d5:48:f9:60: 19:bb:68:33:a4:66:28:bc:dd:fb:97:dc:be:04:e0: e0:4f:4e:04:c8:d9:f7:b9:a9:98:9e:e8:a8:4f:05: f4:5c:fd:41:a9:23:b9:f7:52:b2:7e:07:34:c3:0e: 07:37:45:ba:12:f2:cd:f2:b6:59:ba:20:1a:cd:51: 12:74:14:22:21:cf:cf:fa:bd:f4:e6:f6:67:c8:48: da:20:e7:fc:f9:07:3b:f1:c1:af:f4:6c:b0:35:1e: 29:c9:07:e1:97:a6:7e:8a:22:38:a6:e5:0f:c2:25: ff:62:ce:31:5e:5e:76:8e:14:68:c0:c9:0f:61:de: f6:92:23:33:b8:8f:7e:02:15:8e:7e:6a:46:3c:c1: fe:90:04:44:5f:f3:37:cd:6e:1d:37:b1:84:c5:7f: 07:35:aa:53:3a:4f:96:99:2f:ea:9b:43:60:92:03: 51:3b:67:32:8c:7d:71:ae:fc:1c:63:44:1a:00:26: 9b:e7:73:7d:3f:ec:06:7a:3d:a3:93:8e:f4:a1:7d: 91:16:76:36:2e:ac:b6:aa:ba:76:ae:ad:b9:e4:11: 9e:5b:ca:d4:67:c5:2f:66:3c:d8:6e:32:95:9c:67: d0:1d:d2:54:4c:10:99:cc:e7:fc:05:d3:b4:e5:2e: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A4:E6:5A:CA:A6:55:F6:3A:B9:44:DF:A2:B0:DD:8C:53:CB:2D:98 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:91:3f:8c:a6:13:6f:20:cb:ad:41:fb:1c:6d:65:8e:a2:db: c1:3b:1f:3f:7b:2e:0e:49:a2:3a:9c:c6:bc:21:c1:db:f5:8f: 14:03:e1:50:86:e5:ee:3b:51:fb:d7:6a:67:8c:b4:cf:12:bb: 36:c6:3b:b2:39:a9:8a:8b:df:e2:37:83:3d:1d:fe:2c:f7:94: 39:6b:b8:ea:d9:2c:80:95:27:c9:fd:b2:29:36:4b:4d:3a:d8: 45:c0:80:57:4e:31:c0:a3:8b:20:1c:9e:6a:e1:9c:76:2f:70: 21:1b:1e:7f:ca:69:70:90:73:c2:e4:37:30:76:a8:5c:64:4f: 9f:b1:a8:a0:00:4d:75:ae:41:7e:35:45:e7:6f:cf:8f:67:40: 00:9c:0b:7f:3c:a5:21:cf:89:9d:fc:99:b0:99:37:e0:4f:fe: 1f:54:50:5e:0a:61:85:6b:7c:0a:e2:a7:b3:af:85:91:17:36: 14:59:d8:bb:85:e6:4b:8c:9c:ac:9f:10:df:5d:b2:99:ba:fc: 5c:6c:f4:38:f9:aa:d4:ed:2f:0e:a0:ab:1c:a7:e4:07:05:ce: 5c:68:ff:1b:0e:c3:f8:8b:8a:be:9d:42:b7:e8:99:0c:d8:3d: 39:71:ea:73:b4:d6:76:66:5b:4c:d5:49:27:f8:09:bc:f1:3d: 78:f5:97:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjQwNTA3MDM0NzA3WhcNMjQwNTE0MDM0NzA3WjAYMRYwFAYD VQQDEw02NjM5YTQzYy1mYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4ZUwc4p8bJEQtVI+WAZu2gzpGYovN37l9y+BODgT04EyNn3uamYnuioTwX0 XP1BqSO591Kyfgc0ww4HN0W6EvLN8rZZuiAazVESdBQiIc/P+r305vZnyEjaIOf8 +Qc78cGv9GywNR4pyQfhl6Z+iiI4puUPwiX/Ys4xXl52jhRowMkPYd72kiMzuI9+ AhWOfmpGPMH+kAREX/M3zW4dN7GExX8HNapTOk+WmS/qm0NgkgNRO2cyjH1xrvwc Y0QaACab53N9P+wGej2jk470oX2RFnY2Lqy2qrp2rq255BGeW8rUZ8UvZjzYbjKV nGfQHdJUTBCZzOf8BdO05S7lhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyk5lrK plX2OrlE36Kw3YxTyy2YMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqkT+MphNvIMutQfscbWWOotvBOx8/ey4OSaI6nMa8IcHb9Y8UA+FQ huXuO1H712pnjLTPErs2xjuyOamKi9/iN4M9Hf4s95Q5a7jq2SyAlSfJ/bIpNktN OthFwIBXTjHAo4sgHJ5q4Zx2L3AhGx5/ymlwkHPC5DcwdqhcZE+fsaigAE11rkF+ NUXnb8+PZ0AAnAt/PKUhz4md/JmwmTfgT/4fVFBeCmGFa3wK4qezr4WRFzYUWdi7 heZLjJysnxDfXbKZuvxcbPQ4+arU7S8OoKscp+QHBc5caP8bDsP4i4q+nUK36JkM 2D05cepztNZ2ZltM1Ukn+Am88T149Zf+ -----END CERTIFICATE-----Generated at Tue May 7 04:35:42 2024 by rpki-client on console-ams.rpki-client.org