$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: gp/zdA3prHQN5C4/LK/7wF1gqP9flQwKq0sFOcCO8Ks= Subject key identifier: 6B:76:F4:C3:3C:09:05:1A:B8:32:F0:B8:4D:4F:73:62:42:31:B5:A2 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 47 Signing time: Sun 19 May 2024 08:01:20 +0000 Manifest this update: Sun 19 May 2024 08:01:19 +0000 Manifest next update: Sun 26 May 2024 08:01:19 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: 9qgyW7WqJfOf03b8cHLn0j2h3RwIeOPzq1+cwdTgwkU=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: oX6yDKyGjQSKL7FAgquC6lBKBFIcxcy0N73rX6AdzUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: May 19 08:01:19 2024 GMT Not After : May 26 08:01:19 2024 GMT Subject: CN=6649b1d0-f82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:c8:61:9a:e4:22:94:3b:a7:1e:1b:d0:29: 54:2e:c3:98:a1:b0:70:bd:5d:c6:2f:31:21:10:08: 6d:40:16:a3:3d:10:aa:cf:b7:52:b0:3a:2e:62:5d: 91:7d:f4:ad:d2:6b:78:e9:c2:38:17:7f:42:e7:f8: 5c:43:bb:28:51:3a:ce:09:62:1e:4c:19:3a:b7:bb: 76:2f:27:50:4e:ab:75:d5:7a:c0:87:45:8a:41:2a: a5:44:dd:1c:b4:d0:35:19:0e:03:38:f2:3e:5b:fc: 2a:da:0e:a3:aa:4f:c9:6c:d2:84:da:ed:0a:48:46: 82:cc:a6:f0:38:88:3f:2b:8d:bf:2c:ac:a9:45:34: 82:c1:08:5c:9d:49:2a:e7:31:e7:21:69:4a:ec:c4: af:d4:74:31:4e:2f:16:6c:75:16:57:c5:7a:a4:9f: f5:22:a5:2b:e4:6b:30:5c:23:8f:02:19:4c:13:23: d3:6a:1e:6f:7d:4e:df:ae:a6:b8:0b:a8:9b:7d:ef: af:b7:43:c1:c0:4a:96:1d:fd:61:4b:cd:ce:53:fd: d5:57:86:80:0a:a5:1a:7c:aa:74:99:68:1c:21:00: 6e:07:35:4e:2f:a1:47:bb:b2:76:bc:6c:57:e7:58: b8:ba:e2:74:9a:00:5f:0b:a1:31:89:cf:97:12:8e: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:76:F4:C3:3C:09:05:1A:B8:32:F0:B8:4D:4F:73:62:42:31:B5:A2 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c6:a3:41:69:bb:a6:7e:ba:cc:94:98:d2:31:48:47:32:eb: 3c:16:27:b4:23:dd:08:ff:42:31:6c:9a:c1:5b:f9:25:ac:14: 18:56:7d:4d:19:c8:01:71:3a:aa:9a:14:4c:71:06:d8:37:f1: f5:f7:fa:c7:41:6d:75:a9:57:2c:f5:9c:b4:8a:0b:50:35:d5: 89:9b:0b:cd:a8:29:2e:0a:73:56:d7:e3:a9:80:8e:34:69:3b: 63:82:77:cd:02:3f:ef:5f:ea:e0:ae:3c:81:7f:20:67:dc:49: e2:54:b7:c0:58:0d:fb:15:e3:30:bf:8c:1c:b2:5d:72:07:8f: 09:cf:a3:86:94:6e:b6:8e:27:c9:a7:85:9a:00:8f:e7:30:27: 64:35:5c:f2:78:08:10:53:e8:68:20:1e:e8:bc:8a:71:ea:0a: 76:bd:4c:33:09:77:af:c3:05:52:e3:84:b6:79:69:61:1a:d0: 18:20:6c:19:80:ee:91:1a:de:f9:7c:1e:e1:71:f3:7a:5d:63: 13:cc:6c:f5:8a:95:df:4a:cf:cf:c5:e7:87:ed:35:de:4a:a4: f2:d5:60:92:31:7f:5b:19:26:c7:a9:49:08:e7:f4:ba:d9:bb: 09:67:52:22:0a:45:d5:9a:9d:2a:b8:74:0e:ea:b4:f2:5f:8a: 37:fc:4e:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkUzNzExMC8GA1UEBRMoMzNCRUYxNjRBRUQzRkQxM0Q2OUFFQjUxRTVBMENDRjM5 OUY5NDE0NDAeFw0yNDA1MTkwODAxMTlaFw0yNDA1MjYwODAxMTlaMBgxFjAUBgNV BAMTDTY2NDliMWQwLWY4MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCstchhmuQilDunHhvQKVQuw5ihsHC9XcYvMSEQCG1AFqM9EKrPt1KwOi5iXZF9 9K3Sa3jpwjgXf0Ln+FxDuyhROs4JYh5MGTq3u3YvJ1BOq3XVesCHRYpBKqVE3Ry0 0DUZDgM48j5b/CraDqOqT8ls0oTa7QpIRoLMpvA4iD8rjb8srKlFNILBCFydSSrn MechaUrsxK/UdDFOLxZsdRZXxXqkn/UipSvkazBcI48CGUwTI9NqHm99Tt+uprgL qJt976+3Q8HASpYd/WFLzc5T/dVXhoAKpRp8qnSZaBwhAG4HNU4voUe7sna8bFfn WLi64nSaAF8LoTGJz5cSjn1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa3b0wzwJ BRq4MvC4TU9zYkIxtaIwHwYDVR0jBBgwFoAUM77xZK7T/RPWmutR5aDM85n5QUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRTM3LzRBQzY5Mzg4QUEz RDExRUU5QjgzOTYzMkM0RjlBRTAyL003N3haSzdUX1JQV211dFI1YURNODVuNVFV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTc3eFpLN1RfUlBXbXV0UjVhRE04NW41UVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RTM3LzRBQzY5Mzg4QUEzRDExRUU5QjgzOTYzMkM0RjlBRTAyL003N3haSzdUX1JQ V211dFI1YURNODVuNVFVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzGo0Fpu6Z+usyUmNIxSEcy6zwWJ7Qj3Qj/QjFsmsFb+SWsFBhWfU0Z yAFxOqqaFExxBtg38fX3+sdBbXWpVyz1nLSKC1A11YmbC82oKS4Kc1bX46mAjjRp O2OCd80CP+9f6uCuPIF/IGfcSeJUt8BYDfsV4zC/jByyXXIHjwnPo4aUbraOJ8mn hZoAj+cwJ2Q1XPJ4CBBT6GggHui8inHqCna9TDMJd6/DBVLjhLZ5aWEa0BggbBmA 7pEa3vl8HuFx83pdYxPMbPWKld9Kz8/F54ftNd5KpPLVYJIxf1sZJsepSQjn9LrZ uwlnUiIKRdWanSq4dA7qtPJfijf8TmA= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org