$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: 3v1tev3eeRXmNuTkZ31iFApXzFMV/zIdKNLkxSncnlk= Subject key identifier: 23:87:16:F4:7F:17:D0:78:F3:F6:8C:7D:9D:F3:80:0D:55:43:EB:C0 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 059A Signing time: Sun 05 May 2024 00:34:08 +0000 Manifest this update: Sun 05 May 2024 00:34:07 +0000 Manifest next update: Sun 12 May 2024 00:34:07 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: GlR6iY3GfGxfants4Viwzn4ToZv8M/tM3nfhWb4m+QM=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: gCEgPezqeHJOUfLbqrO/hd2fxgGI7Zl4e741pIVAPGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: May 5 00:34:07 2024 GMT Not After : May 12 00:34:07 2024 GMT Subject: CN=6636d3ff-a72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:00:4b:d4:6a:c3:41:83:4b:d5:a4:bb:da: 31:a2:52:54:a2:74:16:f0:dd:91:0f:6d:71:22:d3: 5f:48:6c:41:06:a8:3f:b7:ab:c5:4a:57:20:62:5d: 4f:ba:27:a1:87:a8:3c:29:e7:2c:c1:d7:df:f1:0a: d3:51:eb:a9:c5:1e:0d:e1:a8:fe:9a:a4:02:a9:59: 51:b8:15:ee:7d:76:c9:b4:ef:83:64:1a:e3:3a:a7: 96:db:b5:b5:3e:e5:a6:bf:03:6f:09:64:db:ad:db: 96:9e:d4:a5:46:82:61:df:0a:ff:43:ac:03:cc:9e: 05:ca:7c:7d:e1:4e:1a:65:1c:42:14:94:29:2a:78: 16:14:0e:17:3e:f1:5f:54:5f:cd:6a:1b:7c:52:c1: a0:8b:48:30:e3:a5:53:c7:08:df:4e:55:51:27:91: 28:27:b8:a6:8d:b2:ea:a2:85:5d:0e:14:49:13:94: da:cc:f7:a6:8e:17:75:ce:8f:e1:b7:fe:9b:01:f2: cf:71:a2:c8:23:da:da:5d:27:1f:a4:e3:6f:86:8e: a1:77:47:10:09:b9:2d:7a:94:94:a1:4c:df:d9:23: 25:2f:82:6c:46:41:0b:51:96:84:a0:91:f8:8f:60: a4:b3:eb:b2:6f:6c:df:c8:2b:5d:31:2d:c6:7b:ea: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:87:16:F4:7F:17:D0:78:F3:F6:8C:7D:9D:F3:80:0D:55:43:EB:C0 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b3:88:92:2c:dd:59:c7:d6:44:bf:3c:91:51:61:04:24:96: f3:ea:ea:fc:1b:96:b8:33:17:4c:27:75:7f:ea:bb:1a:25:ee: aa:94:0d:e9:3c:f7:68:91:6b:b2:1e:ae:ef:9c:1b:e4:91:df: 20:d4:4e:4d:89:25:cf:4b:c4:0f:34:87:7e:c2:bc:fa:50:48: f2:2a:c3:0d:1b:e8:c4:08:1d:b3:51:c6:05:41:45:cb:16:4c: 7d:a9:40:13:de:5a:37:f6:62:83:c5:d4:dd:9a:ff:69:37:0f: 1e:e2:26:fa:c5:a9:29:6c:fd:ed:61:12:3f:12:db:1c:2a:79: 77:6c:68:2f:2e:15:76:37:dc:22:06:43:ad:9e:3e:96:65:f0: 75:e8:c2:6f:8b:e0:72:80:83:05:30:56:f3:ad:c0:ac:16:82: a9:aa:71:c2:4c:d4:0c:57:8c:67:db:3c:6f:db:ac:7d:9f:11: 9b:1d:10:c8:17:10:5f:ea:25:56:45:17:da:97:22:25:47:cd: 8b:d4:de:b9:b9:87:89:8a:b2:6e:42:88:11:53:26:5c:b9:8f: 12:27:02:30:8b:9f:8a:d1:c5:9c:41:fd:d0:66:e0:fb:6a:08: b3:33:f0:44:12:cc:93:5b:6a:d6:4a:b8:c8:9c:da:25:12:ae: 52:c4:01:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjQwNTA1MDAzNDA3WhcNMjQwNTEyMDAzNDA3WjAYMRYwFAYD VQQDEw02NjM2ZDNmZi1hNzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4MAS9Rqw0GDS9Wku9oxolJUonQW8N2RD21xItNfSGxBBqg/t6vFSlcgYl1P uiehh6g8Kecswdff8QrTUeupxR4N4aj+mqQCqVlRuBXufXbJtO+DZBrjOqeW27W1 PuWmvwNvCWTbrduWntSlRoJh3wr/Q6wDzJ4Fynx94U4aZRxCFJQpKngWFA4XPvFf VF/Naht8UsGgi0gw46VTxwjfTlVRJ5EoJ7imjbLqooVdDhRJE5TazPemjhd1zo/h t/6bAfLPcaLII9raXScfpONvho6hd0cQCbktepSUoUzf2SMlL4JsRkELUZaEoJH4 j2Cks+uyb2zfyCtdMS3Ge+qiNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOHFvR/ F9B48/aMfZ3zgA1VQ+vAMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5s4iSLN1Zx9ZEvzyRUWEEJJbz6ur8G5a4MxdMJ3V/6rsaJe6qlA3p PPdokWuyHq7vnBvkkd8g1E5NiSXPS8QPNId+wrz6UEjyKsMNG+jECB2zUcYFQUXL Fkx9qUAT3lo39mKDxdTdmv9pNw8e4ib6xakpbP3tYRI/EtscKnl3bGgvLhV2N9wi BkOtnj6WZfB16MJvi+BygIMFMFbzrcCsFoKpqnHCTNQMV4xn2zxv26x9nxGbHRDI FxBf6iVWRRfalyIlR82L1N65uYeJirJuQogRUyZcuY8SJwIwi5+K0cWcQf3QZuD7 agizM/BEEsyTW2rWSrjInNolEq5SxAGV -----END CERTIFICATE-----Generated at Sun May 5 01:13:18 2024 by rpki-client on console-ams.rpki-client.org