$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: ZLreE7ay/zAz+aAcmr2YNh33rI2Z2E3lFzyudclzRUk= Subject key identifier: ED:9C:F2:CD:7C:52:C6:9E:FB:A3:86:19:E1:5F:D8:E7:9A:6F:51:70 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: AF Signing time: Sat 23 Nov 2024 04:09:58 +0000 Manifest this update: Sat 23 Nov 2024 04:09:57 +0000 Manifest next update: Sat 30 Nov 2024 04:09:57 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: xMdyRqtkEmHX3E8xdhpGghwoNe9qBA+0RuOzezAS3FI=) 2: 4DE56C729CFC11EEAB12747CC4F9AE02.roa (hash: Vnp7tnBGhQi7Q7pEvr8xwxQ1a8qwZP0wggJu157FyhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Nov 23 04:09:57 2024 GMT Not After : Nov 30 04:09:57 2024 GMT Subject: CN=67415596-c410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f7:cd:28:8f:55:b5:25:fc:2f:5d:77:08:e6: 6a:30:ec:18:3d:58:29:d9:0a:34:8d:91:1c:ca:86: 08:89:60:66:0f:7e:e6:11:c7:88:8b:f5:e2:0b:ad: 97:6f:97:17:dc:e7:da:54:50:a1:1a:0c:a5:c2:82: 73:d4:4c:62:41:4a:33:38:aa:91:f9:42:89:28:29: 6c:5c:f9:bc:5e:25:3c:37:09:3c:c5:a1:28:11:14: 43:e3:1c:13:70:55:01:c8:2f:90:93:1e:72:3d:cf: 74:e0:38:88:49:df:d4:e7:0e:f2:8e:cc:f1:cd:ab: f8:b8:87:45:9e:3b:71:bb:f8:cb:5b:00:e1:2d:64: fb:89:e8:a7:0b:ba:aa:d3:68:30:10:3a:5d:62:ef: ab:a5:a1:0b:dc:71:40:11:fc:c0:dc:08:ff:98:85: bf:c2:cf:b6:dd:cf:07:29:fd:0e:23:f0:a3:69:68: 6e:0a:28:b7:0a:dc:28:5b:f5:29:31:12:76:20:54: 3c:47:f4:93:b8:4d:34:c0:a1:de:60:d7:1b:4a:d9: 06:19:c2:4a:f4:73:2f:42:d0:a3:87:cc:fb:5a:4f: 30:d6:b2:70:5d:99:b0:11:7c:17:1a:73:fe:76:40: 58:1a:6e:b0:e0:19:f2:32:55:16:97:68:6b:f2:d8: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9C:F2:CD:7C:52:C6:9E:FB:A3:86:19:E1:5F:D8:E7:9A:6F:51:70 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e2:2a:6c:52:2a:73:c4:bd:a2:e5:6d:47:27:7f:84:1a:6d: c9:ad:5e:d4:a8:03:de:16:65:b1:ef:f7:e5:f8:7a:41:02:16: 88:b2:ba:27:56:ca:08:5e:2a:2e:2d:16:cd:5c:b8:00:f2:18: 3d:1b:79:41:71:5b:6e:ce:d9:93:a9:c1:b9:aa:4e:46:50:69: 69:71:19:79:2b:41:ca:56:4d:0c:a7:79:44:fc:7d:35:51:71: fa:d4:3d:e6:a1:8e:fa:ec:a8:28:36:ff:4f:3c:ab:78:ac:86: 5c:f3:d6:cb:99:e8:f5:85:f2:9d:36:79:e8:41:f3:32:bc:51: 12:f7:a6:6e:cc:81:a5:05:c3:49:16:57:a9:ee:94:57:1e:c2: df:8d:48:d4:fa:66:f2:f0:ea:4b:15:7f:a2:a2:55:16:7a:b0: 36:3b:9f:f9:6e:f4:c4:dd:b8:dc:f8:8b:05:0a:98:00:4e:84: a7:d5:ae:87:43:aa:d3:1d:38:0f:4b:f6:da:f1:34:d1:4f:64: 06:36:24:23:76:4b:59:b9:0c:55:65:78:87:16:3f:97:f1:4a: 72:93:93:f6:e0:4e:03:6b:06:31:70:1f:d4:c5:23:6e:da:6c: c3:e3:2c:20:fa:b6:b2:2e:56:fc:5c:04:f6:50:b0:11:85:7a: a7:64:85:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjQxMTIzMDQwOTU3WhcNMjQxMTMwMDQwOTU3WjAYMRYwFAYD VQQDEw02NzQxNTU5Ni1jNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ffNKI9VtSX8L113COZqMOwYPVgp2Qo0jZEcyoYIiWBmD37mEceIi/XiC62X b5cX3OfaVFChGgylwoJz1ExiQUozOKqR+UKJKClsXPm8XiU8Nwk8xaEoERRD4xwT cFUByC+Qkx5yPc904DiISd/U5w7yjszxzav4uIdFnjtxu/jLWwDhLWT7ieinC7qq 02gwEDpdYu+rpaEL3HFAEfzA3Aj/mIW/ws+23c8HKf0OI/CjaWhuCii3CtwoW/Up MRJ2IFQ8R/STuE00wKHeYNcbStkGGcJK9HMvQtCjh8z7Wk8w1rJwXZmwEXwXGnP+ dkBYGm6w4BnyMlUWl2hr8tggLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2c8s18 Usae+6OGGeFf2Oeab1FwMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw4ipsUipzxL2i5W1HJ3+EGm3JrV7UqAPeFmWx7/fl+HpBAhaIsron VsoIXiouLRbNXLgA8hg9G3lBcVtuztmTqcG5qk5GUGlpcRl5K0HKVk0Mp3lE/H01 UXH61D3moY767KgoNv9PPKt4rIZc89bLmej1hfKdNnnoQfMyvFES96ZuzIGlBcNJ Flep7pRXHsLfjUjU+mby8OpLFX+iolUWerA2O5/5bvTE3bjc+IsFCpgAToSn1a6H Q6rTHTgPS/ba8TTRT2QGNiQjdktZuQxVZXiHFj+X8Upyk5P24E4DawYxcB/UxSNu 2mzD4ywg+rayLlb8XAT2ULARhXqnZIUY -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org