$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft File: 72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json) Hash identifier: sGrG6SfQbZUEZPKkdi6pJvKXyVQ0fOA1K0ltpmWUGRM= Subject key identifier: 52:52:FE:E0:27:C7:61:41:F5:A2:4E:56:3B:A5:26:31:27:2C:E7:BC Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 Certificate issuer: /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft Manifest number: 8B Signing time: Fri 17 May 2024 07:09:00 +0000 Manifest this update: Fri 17 May 2024 07:09:00 +0000 Manifest next update: Fri 24 May 2024 07:09:00 +0000 Files and hashes: 1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: 1NDIwWY5vVHl/9DAhi5WM+0A7XH9YzUWnoUrk0Lkt+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Validity Not Before: May 17 07:09:00 2024 GMT Not After : May 24 07:09:00 2024 GMT Subject: CN=6647028c-4efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:e4:1e:a5:ce:e8:55:9b:57:c8:02:35:03: e5:16:f4:4a:a9:1f:78:21:c8:43:fd:b0:b2:db:52: 3b:15:74:e9:43:e0:fb:f1:67:4b:ff:4c:cf:f3:bf: 68:39:0a:c3:00:15:a3:48:3a:f4:f4:ca:26:16:82: 4a:e7:83:1d:27:92:54:ea:18:70:e2:54:7c:0c:4d: d6:e4:cb:88:fe:3a:0a:24:b9:12:fe:d1:ed:b6:42: d3:a6:f2:68:f3:d4:d7:01:dd:cf:35:1d:4d:2c:ad: 3e:ec:16:ee:14:0c:c3:76:8f:b4:da:6e:74:94:dd: 1f:7e:11:a3:41:86:34:12:ac:1e:4f:45:5a:0e:ff: a9:fc:78:75:d3:b1:9c:a5:7c:5e:f3:01:b4:ef:79: 95:ab:ec:64:40:e9:7e:96:08:f1:00:ea:9b:e4:dd: cd:33:cd:ab:da:b9:8e:a6:e8:14:3e:64:5e:a1:1b: 7e:85:d3:a9:cd:7a:c6:08:75:40:bb:37:c3:b9:85: 50:ab:2e:1d:33:10:b8:13:0e:7c:47:98:4f:fb:8c: 52:9a:f1:ea:6e:1d:ee:74:fd:2c:14:41:dd:34:48: 4f:af:ad:75:d9:6d:99:35:34:62:17:a1:5f:25:f7: ab:0f:07:a6:86:20:e8:c2:5b:9d:47:1e:64:63:75: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:FE:E0:27:C7:61:41:F5:A2:4E:56:3B:A5:26:31:27:2C:E7:BC X509v3 Authority Key Identifier: keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:88:bf:97:c1:52:75:93:88:90:1f:8c:cf:bf:05:3c:ef:5a: ab:d2:58:ce:e8:6b:02:e2:84:76:5f:b1:65:45:a0:b6:dd:79: b6:1d:0e:74:0b:33:6a:69:38:cf:f4:47:6b:88:f6:fc:26:c4: a8:79:3b:d7:2e:75:98:55:3c:82:03:2c:6a:e9:ce:fb:50:f5: 59:36:8a:ef:f2:1c:9b:8b:8c:8e:64:0c:58:9b:50:7f:44:fd: 2e:59:42:dc:dd:92:dc:83:dc:20:c0:64:de:7b:8e:10:73:3d: 79:ea:30:ba:27:5b:ac:38:28:fc:7b:ce:17:f2:82:7d:be:b2: 70:32:7f:1d:05:fa:2c:dd:ab:d3:ab:54:74:74:66:70:61:52: 89:4c:3e:63:fd:49:18:36:f7:fc:c8:4e:55:b3:3c:b9:d6:f0: 67:c4:4c:73:30:e3:3b:3a:32:72:a1:ca:d4:30:5d:78:d8:83: 86:1b:50:2c:2a:d3:76:7d:b5:08:9e:4c:c6:e7:a9:96:36:75: 73:ad:db:1d:43:b3:f0:b6:73:16:6e:09:d4:16:67:f3:16:56: a4:89:b1:0e:ee:1b:66:b5:35:01:fe:d0:b9:6b:b4:35:8f:cd: 79:2f:65:b9:ae:88:fa:2b:26:79:cd:a0:67:fa:ce:64:1d:1c: 20:8d:a4:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QkQxMTAvBgNVBAUTKEVGNjM2REZCMTU5MkYwMjIyMDE2QjAwRkFDQTI3MDM1 NzNGNEQyODIwHhcNMjQwNTE3MDcwOTAwWhcNMjQwNTI0MDcwOTAwWjAYMRYwFAYD VQQDEw02NjQ3MDI4Yy00ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA397kHqXO6FWbV8gCNQPlFvRKqR94IchD/bCy21I7FXTpQ+D78WdL/0zP879o OQrDABWjSDr09MomFoJK54MdJ5JU6hhw4lR8DE3W5MuI/joKJLkS/tHttkLTpvJo 89TXAd3PNR1NLK0+7BbuFAzDdo+02m50lN0ffhGjQYY0EqweT0VaDv+p/Hh107Gc pXxe8wG073mVq+xkQOl+lgjxAOqb5N3NM82r2rmOpugUPmReoRt+hdOpzXrGCHVA uzfDuYVQqy4dMxC4Ew58R5hP+4xSmvHqbh3udP0sFEHdNEhPr6112W2ZNTRiF6Ff JferDwemhiDowludRx5kY3VfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJS/uAn x2FB9aJOVjulJjEnLOe8MB8GA1UdIwQYMBaAFO9jbfsVkvAiIBawD6yicDVz9NKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhCRC8xMTlDQzIyMDQw RkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhDSWdGckFQcktKd05YUDAw b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTnQteFdTOENJZ0ZyQVByS0p3TlhQMDBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhCRC8xMTlDQzIyMDQwRkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhD SWdGckFQcktKd05YUDAwb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUiL+XwVJ1k4iQH4zPvwU871qr0ljO6GsC4oR2X7FlRaC23Xm2HQ50 CzNqaTjP9EdriPb8JsSoeTvXLnWYVTyCAyxq6c77UPVZNorv8hybi4yOZAxYm1B/ RP0uWULc3ZLcg9wgwGTee44Qcz156jC6J1usOCj8e84X8oJ9vrJwMn8dBfos3avT q1R0dGZwYVKJTD5j/UkYNvf8yE5Vszy51vBnxExzMOM7OjJyocrUMF142IOGG1As KtN2fbUInkzG56mWNnVzrdsdQ7PwtnMWbgnUFmfzFlakibEO7htmtTUB/tC5a7Q1 j815L2W5roj6KyZ5zaBn+s5kHRwgjaSQ -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org