$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: fW2SFCL7iBMfvrbE5IsIma5+Sr/69EbJ1aZAlDjwDps= Subject key identifier: F2:89:71:BC:0C:76:2B:96:6B:E9:20:85:A4:BB:34:CD:70:E6:E6:86 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 0600 Signing time: Fri 22 Nov 2024 22:18:54 +0000 Manifest this update: Fri 22 Nov 2024 22:18:53 +0000 Manifest next update: Fri 29 Nov 2024 22:18:53 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: dSf+rrpb7E4IiaVY2cXjlk6yopHghKt8EfOSEu9w83c=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: gCEgPezqeHJOUfLbqrO/hd2fxgGI7Zl4e741pIVAPGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: Nov 22 22:18:53 2024 GMT Not After : Nov 29 22:18:53 2024 GMT Subject: CN=6741034d-938b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:ff:86:bf:0c:c4:cb:22:f0:bd:d0:c6:98: f4:02:ae:2e:f0:e0:40:2d:ba:ae:32:21:8e:72:eb: cb:f5:bd:c5:64:4d:22:35:af:87:be:10:f5:bf:3b: 10:3e:6a:0f:a2:42:09:1c:a1:21:ef:f5:ee:6e:9f: 17:87:bf:5c:22:b3:0c:29:4c:fd:77:46:35:c1:c7: 28:2d:eb:45:13:3e:dc:a2:60:6f:24:6a:8f:aa:2d: a3:ff:86:1b:c8:c3:88:25:fd:64:fd:9e:ec:90:2f: bd:37:d3:33:62:73:cb:df:55:ac:93:dd:41:22:ab: 5a:46:1b:c3:3c:ea:8c:9d:d7:ab:c0:ab:28:aa:e1: 4c:da:1c:50:4b:cf:98:6a:86:23:d5:90:0f:ea:2f: dd:90:cd:0c:e2:77:18:62:4f:d1:48:63:5d:f2:00: 65:0d:5d:33:35:ac:1a:ee:e9:b6:9c:3f:d7:a6:a5: 7b:fc:49:ca:75:da:a8:94:1c:87:6a:8b:1e:dd:2a: aa:da:99:88:2e:6d:fa:cd:de:b2:d1:fa:59:6c:4a: c0:9d:ee:9b:76:3f:90:17:65:e5:46:40:be:1e:6d: 30:f1:6e:9e:f7:51:92:b1:aa:b9:88:90:15:3f:24: b8:4c:48:81:84:4c:a2:ad:7f:eb:66:ed:71:22:a1: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:89:71:BC:0C:76:2B:96:6B:E9:20:85:A4:BB:34:CD:70:E6:E6:86 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:10:91:67:ac:95:7b:1f:fd:3d:f3:98:64:c1:0a:e1:02:41: 7c:07:e5:3b:08:21:7d:25:7b:92:b5:e8:05:fc:28:84:01:98: 5b:2b:18:96:e2:2b:63:36:f9:18:f2:86:80:3f:73:43:6c:9b: ae:5d:a1:f3:9e:25:6d:af:3e:fc:54:6c:83:b3:0b:3a:ba:9b: ae:35:67:f3:c0:aa:e5:ce:c5:3b:29:e9:3c:1a:0d:d8:52:94: a0:a5:d2:e8:aa:68:d2:cd:fc:c4:dc:8c:0c:b8:69:58:8e:67: 3e:41:cd:d1:f0:fa:a9:94:ec:4b:dd:b5:9b:f4:e9:d6:de:24: d5:9a:52:72:cd:40:35:23:49:61:cf:d4:b4:d2:09:ae:9f:42: 8f:29:44:ff:51:9e:43:3e:a8:e1:11:e3:72:09:21:05:6e:de: 31:5a:53:9c:3e:7b:58:b8:89:dc:ec:bc:5e:81:a1:39:e5:3a: 95:cf:99:17:63:9d:84:fa:e5:f0:fe:13:68:40:e0:df:87:17: d8:e6:47:3b:78:45:71:07:9b:a9:e8:27:40:5c:4e:b9:a9:53: c2:13:e8:e4:d1:60:8d:a2:2d:3d:f0:66:17:a3:f8:2e:2f:50: 9f:c0:d2:87:1f:f3:59:6c:7b:1a:e3:9e:f4:6d:a5:ab:8c:6f: 84:e0:1d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjQxMTIyMjIxODUzWhcNMjQxMTI5MjIxODUzWjAYMRYwFAYD VQQDEw02NzQxMDM0ZC05MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjD/hr8MxMsi8L3Qxpj0Aq4u8OBALbquMiGOcuvL9b3FZE0iNa+HvhD1vzsQ PmoPokIJHKEh7/Xubp8Xh79cIrMMKUz9d0Y1wccoLetFEz7comBvJGqPqi2j/4Yb yMOIJf1k/Z7skC+9N9MzYnPL31Wsk91BIqtaRhvDPOqMnderwKsoquFM2hxQS8+Y aoYj1ZAP6i/dkM0M4ncYYk/RSGNd8gBlDV0zNawa7um2nD/XpqV7/EnKddqolByH aose3Sqq2pmILm36zd6y0fpZbErAne6bdj+QF2XlRkC+Hm0w8W6e91GSsaq5iJAV PyS4TEiBhEyirX/rZu1xIqGVoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKJcbwM diuWa+kghaS7NM1w5uaGMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFEJFnrJV7H/0985hkwQrhAkF8B+U7CCF9JXuStegF/CiEAZhbKxiW 4itjNvkY8oaAP3NDbJuuXaHzniVtrz78VGyDsws6upuuNWfzwKrlzsU7Kek8Gg3Y UpSgpdLoqmjSzfzE3IwMuGlYjmc+Qc3R8PqplOxL3bWb9OnW3iTVmlJyzUA1I0lh z9S00gmun0KPKUT/UZ5DPqjhEeNyCSEFbt4xWlOcPntYuInc7LxegaE55TqVz5kX Y52E+uXw/hNoQODfhxfY5kc7eEVxB5up6CdAXE65qVPCE+jk0WCNoi098GYXo/gu L1CfwNKHH/NZbHsa4570baWrjG+E4B2R -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org