$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: 71Oeps9874m6weCQ/yBOTkVsfdu91bvfoi+OZqoFmw8= Subject key identifier: F5:E3:1F:64:69:E1:DD:F0:75:56:52:A8:8C:2F:22:64:AE:CA:8C:D4 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 4E Signing time: Wed 15 May 2024 08:03:31 +0000 Manifest this update: Wed 15 May 2024 08:03:30 +0000 Manifest next update: Wed 22 May 2024 08:03:30 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: I9AUi8vDD6rQocFsQbWoB5OFw2ggl2QDbrvDFTXuBdM=) 2: 4DE56C729CFC11EEAB12747CC4F9AE02.roa (hash: Vnp7tnBGhQi7Q7pEvr8xwxQ1a8qwZP0wggJu157FyhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: May 15 08:03:30 2024 GMT Not After : May 22 08:03:30 2024 GMT Subject: CN=66446c52-0c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:34:b3:ed:55:7d:db:b5:28:9f:46:66:ab: bd:21:45:a6:5c:66:e6:4d:36:bd:b9:c2:13:eb:d2: 77:e0:70:00:c3:6c:b9:a5:1c:b3:0f:b8:29:18:0c: 45:34:30:50:29:20:99:c4:13:62:e2:e9:81:66:b2: a0:29:58:a4:4f:62:99:9c:02:ea:29:23:cc:ae:f8: 73:b7:92:ce:6d:f9:a9:42:a5:2a:56:f6:22:b5:73: 1f:cd:f5:8c:b4:80:8d:6f:c6:01:44:9c:a7:0d:28: 53:a4:5b:fc:1a:df:0b:9b:dd:2e:24:9f:19:ea:43: d7:85:7a:d8:99:31:a4:ef:92:16:34:df:2f:3a:6f: 93:00:eb:8c:77:51:e4:47:1d:da:17:d9:a7:ba:a1: 09:f0:95:a8:52:10:33:d5:b0:25:01:b1:16:f5:a5: 5a:33:8b:a7:cc:9c:2b:15:04:31:f4:0d:c1:9e:72: 16:d9:cd:76:9d:6a:f5:06:81:32:ac:bc:e5:a4:1a: c4:6a:d3:3f:dd:8a:34:3f:8e:dd:21:f5:29:ea:93: ee:b5:2f:24:49:22:96:42:fa:7b:4c:2d:07:94:7f: 52:ac:c6:8c:b1:73:be:0e:57:d3:60:10:54:ac:88: 1a:be:4b:08:d7:7d:c0:c4:61:00:8b:06:29:63:b5: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E3:1F:64:69:E1:DD:F0:75:56:52:A8:8C:2F:22:64:AE:CA:8C:D4 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a6:77:b4:6e:3a:42:42:b7:b0:f6:f4:79:6c:c8:22:9f:0f: 5b:c1:c3:4f:59:8c:0b:45:89:c3:f7:aa:a0:9d:02:7e:00:01: bb:63:05:40:53:ad:bb:7c:fa:09:2d:a3:00:9e:b7:17:72:42: d3:e3:17:0e:18:b1:46:9d:d9:75:ee:37:c4:0c:d0:9b:b1:78: 26:67:4c:f5:bb:0b:f2:da:e7:60:b4:0f:51:b8:c8:c2:71:29: 0c:3c:a3:5e:02:19:a5:fd:0f:49:23:a1:9e:35:71:36:c9:4e: d1:ec:df:5a:96:36:66:c6:6a:3b:3d:63:6f:da:0c:fb:ca:0a: fd:91:c3:a9:87:d5:6d:c1:92:60:3b:62:e9:82:1a:be:d7:16: d0:b2:35:24:b1:78:b7:59:0b:57:ce:20:9d:99:3d:21:9d:e7: dc:03:bd:a2:32:95:91:b5:44:35:5c:e0:cd:3e:db:1a:2c:ef: e9:24:b1:47:45:14:46:6b:92:c9:33:4b:f0:d7:7b:7c:2c:e9: 97:a8:10:b4:0e:19:2d:89:c8:46:48:7f:c6:59:2a:ef:4a:37: 23:95:1c:53:5a:ba:a1:cb:da:26:c4:e8:35:54:2f:e3:35:5d: 35:a9:5d:f0:fc:a8:0f:e1:9b:e5:0f:dc:c4:60:da:62:e9:1d: 15:de:ba:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzRCRjExMC8GA1UEBRMoNzNCREIyQTAyQkNCRUMzQzkwMDBGNjVGNzA1Qzk2RTgw ODBFOTczMDAeFw0yNDA1MTUwODAzMzBaFw0yNDA1MjIwODAzMzBaMBgxFjAUBgNV BAMTDTY2NDQ2YzUyLTBjNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqaTSz7VV927Uon0Zmq70hRaZcZuZNNr25whPr0nfgcADDbLmlHLMPuCkYDEU0 MFApIJnEE2Li6YFmsqApWKRPYpmcAuopI8yu+HO3ks5t+alCpSpW9iK1cx/N9Yy0 gI1vxgFEnKcNKFOkW/wa3wub3S4knxnqQ9eFetiZMaTvkhY03y86b5MA64x3UeRH HdoX2ae6oQnwlahSEDPVsCUBsRb1pVozi6fMnCsVBDH0DcGechbZzXadavUGgTKs vOWkGsRq0z/dijQ/jt0h9Snqk+61LyRJIpZC+ntMLQeUf1Ksxoyxc74OV9NgEFSs iBq+SwjXfcDEYQCLBiljtRcvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9eMfZGnh 3fB1VlKojC8iZK7KjNQwHwYDVR0jBBgwFoAUc72yoCvL7DyQAPZfcFyW6AgOlzAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNEJGLzRGMDMzRDg0OUNG NTExRUU5RTRDMzMxRkM0RjlBRTAyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzcyeW9Ddkw3RHlRQVBaZmNGeVc2QWdPbHpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NEJGLzRGMDMzRDg0OUNGNTExRUU5RTRDMzMxRkM0RjlBRTAyL2M3MnlvQ3ZMN0R5 UUFQWmZjRnlXNkFnT2x6QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGumd7RuOkJCt7D29HlsyCKfD1vBw09ZjAtFicP3qqCdAn4AAbtjBUBT rbt8+gktowCetxdyQtPjFw4YsUad2XXuN8QM0JuxeCZnTPW7C/La52C0D1G4yMJx KQw8o14CGaX9D0kjoZ41cTbJTtHs31qWNmbGajs9Y2/aDPvKCv2Rw6mH1W3BkmA7 YumCGr7XFtCyNSSxeLdZC1fOIJ2ZPSGd59wDvaIylZG1RDVc4M0+2xos7+kksUdF FEZrkskzS/DXe3ws6ZeoELQOGS2JyEZIf8ZZKu9KNyOVHFNauqHL2ibE6DVUL+M1 XTWpXfD8qA/hm+UP3MRg2mLpHRXeuos= -----END CERTIFICATE-----Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org