$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: DGHDcM7SjnpCxfMeczodcUrX9Mh5CJoc59dSQLtwBe4= Subject key identifier: C4:B6:E8:17:DA:40:93:D9:70:90:9F:B5:55:16:86:6B:F3:34:8D:18 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 77 Signing time: Wed 15 May 2024 07:24:15 +0000 Manifest this update: Wed 15 May 2024 07:24:14 +0000 Manifest next update: Wed 22 May 2024 07:24:14 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: G5DTYCDCQzSWxl8CBvnGYbHfeXxJ4Z4bI0/LGtc0U6g=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: v4kYJFNGl2Wr0wg+DiuqDzB5DKzhN07773+uv/HMHPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: May 15 07:24:14 2024 GMT Not After : May 22 07:24:14 2024 GMT Subject: CN=6644631e-d661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:b1:a1:e9:fc:a0:60:2b:31:67:bc:8d:3f: 91:7c:d5:8f:e0:2b:75:36:35:7a:5c:4e:1d:d9:36: e6:cc:62:93:14:bf:23:17:34:ec:1f:c2:a9:a9:0d: 7a:2b:e7:5d:79:3b:c8:ee:09:e2:a6:ce:72:76:6c: 2c:09:09:55:cd:74:f3:fb:01:0b:d8:8c:b7:c7:3b: 33:61:23:ff:9e:18:52:a2:25:f8:b7:ea:03:ed:35: 02:6a:e7:3f:da:d8:06:4b:c5:e2:4e:ae:f8:d9:e8: c3:be:d6:c0:5e:4e:3f:9f:ea:6e:fd:10:3e:07:93: 23:51:af:70:1a:f6:1b:74:7a:51:ac:50:c4:3f:d4: 61:b3:9f:19:41:29:25:57:c5:6d:38:19:7c:e8:fe: c7:df:c6:52:e6:c5:9e:62:8f:c0:05:7c:ac:a1:dc: 02:78:d8:6f:a2:0a:a9:94:a5:d1:fd:c5:e5:d3:7f: 80:8e:b8:7f:86:32:19:b1:b2:96:ec:a9:71:14:8e: 77:74:d0:cc:59:20:43:a1:dd:84:ed:e2:68:b9:0a: 4e:73:bf:30:1b:45:91:ac:73:26:e3:7b:24:9b:1f: 0f:07:2e:a2:e6:03:59:26:cc:ab:95:ff:d4:65:2b: 04:03:7e:1a:83:90:cb:1c:b8:fe:6e:98:6f:98:ee: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:E8:17:DA:40:93:D9:70:90:9F:B5:55:16:86:6B:F3:34:8D:18 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:26:ee:f9:b4:7a:f1:fa:9e:94:ac:72:f0:37:28:c6:5a:73: f4:18:13:b3:c1:4d:0c:9b:9c:99:85:1f:e8:b3:10:81:ae:73: b4:9f:ec:b5:2e:3e:5f:bc:ae:55:41:40:ee:0a:5b:62:c0:71: fd:65:9e:59:e8:ba:a4:a8:6a:28:8e:7e:5d:41:b1:ec:47:5c: f7:ff:76:35:70:e0:9e:cb:3e:ba:f7:15:a0:21:e4:85:08:83: 8e:30:1f:a7:b9:09:32:b1:bd:89:56:37:a4:da:bb:07:bc:5f: 06:ea:ef:82:98:30:c4:27:99:72:10:76:84:f7:ed:2b:18:04: ea:de:42:d7:a5:a4:3b:1d:e3:09:61:c8:b8:33:0d:4d:de:c3: 1b:0a:f0:9f:ea:f8:9c:87:3a:e4:b8:ca:48:d4:9b:4a:33:a1: ad:4f:81:58:ea:09:a7:b5:a0:97:cf:2d:84:e2:c7:14:33:d7: a2:7b:70:3c:a0:a8:32:a2:4a:31:9e:26:ac:a9:eb:98:ae:e2: 47:fe:85:bd:8c:99:56:46:d9:92:17:6b:0f:2d:cf:1c:08:7d: 90:fd:a9:93:76:de:35:58:89:7e:56:d5:ba:67:91:46:61:7e: 80:00:64:6f:32:e4:89:c3:4c:cb:db:b5:cc:14:12:8c:88:09: 14:0c:3f:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDkyQTExMC8GA1UEBRMoMzc5QjkxQzkzMEUwQTJBRjhCODIyQUQ5QTk1OUJBREY1 RERENjA5RjAeFw0yNDA1MTUwNzI0MTRaFw0yNDA1MjIwNzI0MTRaMBgxFjAUBgNV BAMTDTY2NDQ2MzFlLWQ2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwNbGh6fygYCsxZ7yNP5F81Y/gK3U2NXpcTh3ZNubMYpMUvyMXNOwfwqmpDXor 5115O8juCeKmznJ2bCwJCVXNdPP7AQvYjLfHOzNhI/+eGFKiJfi36gPtNQJq5z/a 2AZLxeJOrvjZ6MO+1sBeTj+f6m79ED4HkyNRr3Aa9ht0elGsUMQ/1GGznxlBKSVX xW04GXzo/sffxlLmxZ5ij8AFfKyh3AJ42G+iCqmUpdH9xeXTf4COuH+GMhmxspbs qXEUjnd00MxZIEOh3YTt4mi5Ck5zvzAbRZGscybjeySbHw8HLqLmA1kmzKuV/9Rl KwQDfhqDkMscuP5umG+Y7oMpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxLboF9pA k9lwkJ+1VRaGa/M0jRgwHwYDVR0jBBgwFoAUN5uRyTDgoq+LgirZqVm6313dYJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEOTJBLzNDRTU3N0RBNUI1 NDExRUU4MDg2RjQzMkM0RjlBRTAyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjV1UnlURGdvcS1MZ2lyWnFWbTYzMTNkWUo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE OTJBLzNDRTU3N0RBNUI1NDExRUU4MDg2RjQzMkM0RjlBRTAyL041dVJ5VERnb3Et TGdpclpxVm02MzEzZFlKOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEIm7vm0evH6npSscvA3KMZac/QYE7PBTQybnJmFH+izEIGuc7Sf7LUu Pl+8rlVBQO4KW2LAcf1lnlnouqSoaiiOfl1BsexHXPf/djVw4J7LPrr3FaAh5IUI g44wH6e5CTKxvYlWN6Tauwe8Xwbq74KYMMQnmXIQdoT37SsYBOreQtelpDsd4wlh yLgzDU3ewxsK8J/q+JyHOuS4ykjUm0ozoa1PgVjqCae1oJfPLYTixxQz16J7cDyg qDKiSjGeJqyp65iu4kf+hb2MmVZG2ZIXaw8tzxwIfZD9qZN23jVYiX5W1bpnkUZh foAAZG8y5InDTMvbtcwUEoyICRQMPx8= -----END CERTIFICATE-----Generated at Wed May 15 09:28:13 2024 by rpki-client on console-fra.rpki-client.org