$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft File: 76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json) Hash identifier: vBFTImxN+VmJ73bwyIodh+utuxCBAKScqYkmZQe8hSU= Subject key identifier: 78:CE:F5:0F:B0:5B:56:84:3C:AA:78:C9:76:E1:85:CD:58:61:1F:89 Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft Manifest number: 0678 Signing time: Sat 18 May 2024 23:29:26 +0000 Manifest this update: Sat 18 May 2024 23:29:26 +0000 Manifest next update: Sat 25 May 2024 23:29:26 +0000 Files and hashes: 1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: Z18T0VZNqiW5gzId5UkXhnC2frrITkGtMCKdlizRHIw=) 2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: 0hhYQv1Dx0IGJd7nJvn9S2TIbOnrfwA1D6BasQDOlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: May 18 23:29:26 2024 GMT Not After : May 25 23:29:26 2024 GMT Subject: CN=664939d6-46e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d2:77:1a:f6:9f:8c:0e:bb:fc:1f:f8:96:38: ae:83:90:be:47:5a:ea:bf:16:f4:f3:08:74:84:27: 10:09:10:b8:b7:09:b6:a1:19:be:8e:ff:9b:70:04: 3b:dd:d9:e6:fc:07:54:7e:ca:00:64:95:d6:97:d9: db:96:1e:57:4b:63:25:31:c7:dc:4e:fa:92:25:93: 64:9d:98:55:1d:9d:60:74:bd:60:86:43:6f:e7:79: 5e:a6:fa:1e:82:41:5c:84:6e:77:30:3e:5d:0d:ef: b5:a9:b4:9b:4b:e1:15:57:68:6e:bb:7f:d2:d8:f4: 70:a5:64:65:b2:e7:3d:9c:0b:3d:5c:2a:07:bc:e5: cb:01:01:08:14:f1:fc:76:21:f0:62:53:49:d7:11: 00:6a:c8:bf:75:f0:63:53:8b:e6:e7:97:ef:10:07: 6b:be:15:a8:97:65:71:84:78:db:c6:ea:72:35:ca: 8a:0d:cb:f2:e8:8b:e5:26:30:65:f0:ba:3c:91:22: 67:4e:70:16:70:72:55:27:4c:14:c7:46:f3:27:36: f6:0d:7d:7e:bb:2f:b5:2c:71:89:90:6e:1e:58:e7: fe:66:f0:71:59:2b:11:cd:69:e9:4c:5c:77:4e:e4: 69:5a:d4:f9:0c:63:0d:6f:e4:08:92:d4:d6:50:9d: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CE:F5:0F:B0:5B:56:84:3C:AA:78:C9:76:E1:85:CD:58:61:1F:89 X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a5:36:44:68:af:08:85:b7:9f:f7:af:4b:d8:3a:b9:d3:f0: 7f:44:9b:3d:ad:df:9a:d5:db:dc:0c:d5:79:30:d9:ab:33:6b: 0b:d2:3a:2f:98:4a:0f:ed:d7:b4:7d:4c:eb:11:21:4d:ea:72: 5c:96:8f:a1:56:d7:c1:b7:af:08:f2:44:ee:d6:01:c9:b8:d8: 5e:1b:42:19:31:bc:9e:1c:a0:c7:e9:a7:56:fc:45:66:07:91: 98:ec:9f:f1:ce:7f:92:79:69:11:b6:15:a8:84:41:d4:9e:11: f0:fa:ea:67:12:79:01:9b:5e:6b:2d:f5:1a:10:49:a7:b0:63: 27:63:b0:f3:31:36:70:5c:bf:00:bb:90:6b:d6:6f:67:93:85: fe:43:51:70:ad:d5:c5:79:90:b5:35:b5:17:8a:13:d5:ba:30: 87:ba:ad:da:73:db:25:80:85:7f:1b:f8:e2:96:0d:53:20:0a: 5e:8c:12:72:bc:58:23:8a:17:8d:4e:e8:57:10:60:5d:2d:6e: ab:41:b1:65:c9:c4:66:ad:b1:ed:41:3b:c9:93:fb:bf:c1:7b: 4c:39:ae:35:29:1f:84:be:90:e0:f4:da:94:31:e8:51:74:47: c6:77:5e:f1:15:f8:38:67:f0:f1:2e:82:32:c4:91:a0:9b:40: bf:20:60:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjQwNTE4MjMyOTI2WhcNMjQwNTI1MjMyOTI2WjAYMRYwFAYD VQQDEw02NjQ5MzlkNi00NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59J3GvafjA67/B/4ljiug5C+R1rqvxb08wh0hCcQCRC4twm2oRm+jv+bcAQ7 3dnm/AdUfsoAZJXWl9nblh5XS2MlMcfcTvqSJZNknZhVHZ1gdL1ghkNv53lepvoe gkFchG53MD5dDe+1qbSbS+EVV2huu3/S2PRwpWRlsuc9nAs9XCoHvOXLAQEIFPH8 diHwYlNJ1xEAasi/dfBjU4vm55fvEAdrvhWol2VxhHjbxupyNcqKDcvy6IvlJjBl 8Lo8kSJnTnAWcHJVJ0wUx0bzJzb2DX1+uy+1LHGJkG4eWOf+ZvBxWSsRzWnpTFx3 TuRpWtT5DGMNb+QIktTWUJ3owQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjO9Q+w W1aEPKp4yXbhhc1YYR+JMB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZENy83QjQwOUNBMDJGQTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNr M1dleWpWVllBUmRjejNGRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2pTZEaK8Ihbef969L2Dq50/B/RJs9rd+a1dvcDNV5MNmrM2sL0jov mEoP7de0fUzrESFN6nJclo+hVtfBt68I8kTu1gHJuNheG0IZMbyeHKDH6adW/EVm B5GY7J/xzn+SeWkRthWohEHUnhHw+upnEnkBm15rLfUaEEmnsGMnY7DzMTZwXL8A u5Br1m9nk4X+Q1FwrdXFeZC1NbUXihPVujCHuq3ac9slgIV/G/jilg1TIApejBJy vFgjiheNTuhXEGBdLW6rQbFlycRmrbHtQTvJk/u/wXtMOa41KR+EvpDg9NqUMehR dEfGd17xFfg4Z/DxLoIyxJGgm0C/IGD8 -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org