$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft File: 76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json) Hash identifier: Cd+idW/6r7Btq35DsUgNiHNEo5Hnf+bU+GAzrRwZmiA= Subject key identifier: 1F:21:A5:5F:49:92:3E:A2:A9:3F:69:C3:D6:07:08:15:97:1D:30:20 Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft Manifest number: 0673 Signing time: Mon 06 May 2024 23:34:31 +0000 Manifest this update: Mon 06 May 2024 23:34:31 +0000 Manifest next update: Mon 13 May 2024 23:34:31 +0000 Files and hashes: 1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: xh2sl6avBdPH7dIGTVHxyHScdzJ5ovTCTozjcTK6TeQ=) 2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: 0hhYQv1Dx0IGJd7nJvn9S2TIbOnrfwA1D6BasQDOlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: May 6 23:34:31 2024 GMT Not After : May 13 23:34:31 2024 GMT Subject: CN=66396907-06f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:5d:6f:6e:02:3f:96:22:ec:28:bc:89:b2: e4:c3:2e:de:23:20:39:3f:2a:f2:28:56:83:38:22: 5f:46:0f:e0:9e:d7:15:25:8c:99:66:1d:1a:3f:ee: e8:b6:d3:17:d5:c7:c2:b3:cc:66:ad:60:cb:29:f1: 8e:bb:2b:8d:0a:15:1d:02:90:ab:71:7d:e6:1c:69: 7a:0f:ce:e7:bf:c4:f9:4c:20:80:db:be:3f:18:24: c4:3d:77:c6:d7:77:9a:f3:e7:b2:2a:63:aa:cf:12: 39:94:2d:7e:86:b4:99:f6:e0:65:8e:2d:56:2b:2d: 1b:f2:d3:80:49:66:cb:82:e7:ce:f0:1e:59:6a:c8: 00:42:81:71:04:fe:c7:81:ea:7b:37:c7:4e:08:ed: ea:68:fb:41:d2:54:a3:1e:33:67:76:4a:40:9c:4e: 0f:ed:2e:ad:0a:f7:7c:4a:41:05:66:f3:25:af:d6: 8d:b2:aa:64:1b:18:da:f6:b6:02:b0:5d:82:4c:18: df:81:f0:47:86:95:04:2d:64:52:f6:78:81:55:b3: 9e:01:6f:34:b6:d5:bf:b7:0a:8c:5e:09:61:1c:ce: 33:fa:02:29:9b:dd:a5:3b:30:57:a8:a7:00:34:41: c8:00:86:f8:72:90:f6:c1:a6:7b:8b:9c:f1:2c:96: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:21:A5:5F:49:92:3E:A2:A9:3F:69:C3:D6:07:08:15:97:1D:30:20 X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e3:11:f0:9d:d0:a7:80:ec:6f:5e:47:bc:cc:24:66:e7:9e: 81:e1:b9:dd:f2:80:1f:e5:bc:8b:b1:16:d8:43:c9:5f:1c:9f: 56:48:bc:25:cb:0b:9e:e8:b4:dd:54:f1:ea:cf:63:e4:43:c3: 70:c5:20:a7:c2:1f:72:06:f4:45:19:19:ac:ce:0b:30:3f:5c: 8f:5c:10:b7:05:47:2d:ab:e9:80:de:6b:f1:aa:ad:89:11:cb: fa:b2:30:0d:5d:86:fb:1c:2c:f5:43:8a:4a:3f:9c:c1:ec:79: c7:8f:b7:1c:7f:6b:39:ea:d7:be:4d:cd:23:8a:72:55:43:27: 2a:91:42:95:f1:69:e1:fa:a3:49:ba:a7:77:38:c9:84:70:48: a5:cb:ba:75:f6:85:9c:34:3f:64:30:14:7a:74:85:a1:e8:11: dd:74:a7:fd:e4:29:16:aa:fe:b2:84:6f:0d:83:1d:f9:d4:f3: 63:a9:72:b6:92:01:99:25:71:03:bd:af:39:80:20:09:c9:fb: 61:5c:3d:3c:82:d0:1c:c4:d0:50:ef:73:49:25:cf:3e:4d:a4: 0a:ec:d1:2a:35:d9:14:f9:a0:1d:8a:71:1c:12:d2:90:31:bb: 33:1f:31:93:dc:b1:dd:1b:94:d8:0b:ef:de:60:13:f3:0d:d7: 86:15:76:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjQwNTA2MjMzNDMxWhcNMjQwNTEzMjMzNDMxWjAYMRYwFAYD VQQDEw02NjM5NjkwNy0wNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunxdb24CP5Yi7Ci8ibLkwy7eIyA5PyryKFaDOCJfRg/gntcVJYyZZh0aP+7o ttMX1cfCs8xmrWDLKfGOuyuNChUdApCrcX3mHGl6D87nv8T5TCCA274/GCTEPXfG 13ea8+eyKmOqzxI5lC1+hrSZ9uBlji1WKy0b8tOASWbLgufO8B5ZasgAQoFxBP7H gep7N8dOCO3qaPtB0lSjHjNndkpAnE4P7S6tCvd8SkEFZvMlr9aNsqpkGxja9rYC sF2CTBjfgfBHhpUELWRS9niBVbOeAW80ttW/twqMXglhHM4z+gIpm92lOzBXqKcA NEHIAIb4cpD2waZ7i5zxLJagBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8hpV9J kj6iqT9pw9YHCBWXHTAgMB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZENy83QjQwOUNBMDJGQTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNr M1dleWpWVllBUmRjejNGRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs4xHwndCngOxvXke8zCRm556B4bnd8oAf5byLsRbYQ8lfHJ9WSLwl ywue6LTdVPHqz2PkQ8NwxSCnwh9yBvRFGRmszgswP1yPXBC3BUctq+mA3mvxqq2J Ecv6sjANXYb7HCz1Q4pKP5zB7HnHj7ccf2s56te+Tc0jinJVQycqkUKV8Wnh+qNJ uqd3OMmEcEily7p19oWcND9kMBR6dIWh6BHddKf95CkWqv6yhG8Ngx351PNjqXK2 kgGZJXEDva85gCAJyfthXD08gtAcxNBQ73NJJc8+TaQK7NEqNdkU+aAdinEcEtKQ MbszHzGT3LHdG5TYC+/eYBPzDdeGFXaH -----END CERTIFICATE-----Generated at Tue May 7 00:53:24 2024 by rpki-client on console-ams.rpki-client.org