$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: SKqHyMfsawjiXyr76IA8EXPlcNtg05xxg85qt13ouOo= Subject key identifier: 5D:58:EA:B8:79:3A:57:54:6E:87:84:12:44:36:81:AB:AA:23:B2:62 Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0B4B Signing time: Sat 04 May 2024 19:51:17 +0000 Manifest this update: Sat 04 May 2024 19:51:17 +0000 Manifest next update: Sat 11 May 2024 19:51:17 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: 79mu+BVkmh2K66+Cv3tdp2i+0N04EPNupKtN5eky0I0=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: EltOV2YFk2w1vL1Vxok5dRCf+Lh1EfB3t1H6bsxq3iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: May 4 19:51:17 2024 GMT Not After : May 11 19:51:17 2024 GMT Subject: CN=663691b5-16a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:5c:8f:59:9a:2b:d3:ea:06:c6:a3:10:2a: 6d:36:6f:fa:77:df:b9:d9:9d:0b:3f:ca:50:91:47: c2:aa:fc:c4:ab:4e:19:22:6b:a2:c4:48:59:e8:8a: 7c:60:96:09:bc:a6:3f:6d:7d:e9:eb:48:5f:e0:3d: 98:a3:60:9d:2f:60:5e:2f:7a:f5:ed:39:f1:ac:3f: 52:c8:c8:07:62:b3:30:ae:15:49:75:98:30:1c:5f: 1c:48:d4:07:33:4a:23:b5:0d:a2:ce:83:98:cc:6e: 73:10:a9:06:14:85:9e:cb:f5:f9:0b:28:9e:ef:84: 04:97:3b:68:3a:19:e9:29:b2:14:04:6f:a9:e6:33: 62:03:de:4d:26:3f:66:69:94:fb:25:bf:79:3c:be: a4:eb:a3:e1:83:26:4d:14:cb:80:d8:54:bd:46:88: 0d:ec:d7:f0:9a:e9:16:22:a5:41:31:53:96:07:1d: ec:63:73:3d:f2:a6:c3:b0:23:04:6a:0e:52:c4:9d: d0:49:04:7f:bc:36:23:92:1c:61:a4:7d:7c:6c:35: be:69:f5:83:26:76:54:52:8a:a0:e2:6c:bb:83:e8: cf:7b:00:e9:79:be:06:5d:76:0b:90:8f:9b:9c:3f: c0:77:db:94:db:8d:f4:09:c0:29:b4:de:d3:11:9e: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:EA:B8:79:3A:57:54:6E:87:84:12:44:36:81:AB:AA:23:B2:62 X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:00:13:d4:b2:f9:c1:5f:ea:b5:8c:9d:8c:cf:e3:8d:fe:ba: 96:43:65:2c:f4:21:c3:6c:d7:88:01:b9:f2:b4:b5:e2:fa:77: e7:a8:44:f5:db:e3:7b:42:b5:85:ed:0c:07:08:e9:ed:e9:96: a1:5c:48:bc:09:50:a0:a4:51:24:59:9c:ac:35:b0:98:7c:9b: 60:7f:a7:be:47:95:ce:f8:56:d9:64:97:a9:45:19:3d:a0:84: 51:d1:89:ac:06:10:ec:a8:f4:cb:1a:89:d1:53:7d:a1:59:42: a5:b6:34:3a:b2:bc:b0:fc:ff:84:ec:49:80:88:2e:d3:10:c0: 65:ff:58:c8:18:c2:45:d7:cf:38:fd:be:9e:4e:37:36:93:bd: dc:94:69:9e:cd:94:6e:cd:9d:8f:41:05:53:0c:9f:74:7b:15: 66:49:1e:96:31:d5:3b:a7:f9:55:a5:f0:26:f8:83:4c:38:76: 47:46:df:95:90:6f:18:8a:77:64:16:31:2c:54:2d:bb:23:6d: da:d6:64:78:2e:f2:c2:bf:4a:05:4d:d4:72:49:19:a7:0f:ea: 47:2e:7c:78:42:6e:6f:1c:a2:11:43:05:7c:eb:49:e3:0d:8e: 8a:e0:7d:3d:b9:f0:b9:89:38:56:ec:7e:a6:90:7e:76:49:17: 10:f1:38:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjQwNTA0MTk1MTE3WhcNMjQwNTExMTk1MTE3WjAYMRYwFAYD VQQDEw02NjM2OTFiNS0xNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYhcj1maK9PqBsajECptNm/6d9+52Z0LP8pQkUfCqvzEq04ZImuixEhZ6Ip8 YJYJvKY/bX3p60hf4D2Yo2CdL2BeL3r17TnxrD9SyMgHYrMwrhVJdZgwHF8cSNQH M0ojtQ2izoOYzG5zEKkGFIWey/X5Cyie74QElztoOhnpKbIUBG+p5jNiA95NJj9m aZT7Jb95PL6k66PhgyZNFMuA2FS9RogN7NfwmukWIqVBMVOWBx3sY3M98qbDsCME ag5SxJ3QSQR/vDYjkhxhpH18bDW+afWDJnZUUoqg4my7g+jPewDpeb4GXXYLkI+b nD/Ad9uU2430CcAptN7TEZ6MtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1Y6rh5 OldUboeEEkQ2gauqI7JiMB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDABPUsvnBX+q1jJ2Mz+ON/rqWQ2Us9CHDbNeIAbnytLXi+nfnqET1 2+N7QrWF7QwHCOnt6ZahXEi8CVCgpFEkWZysNbCYfJtgf6e+R5XO+FbZZJepRRk9 oIRR0YmsBhDsqPTLGonRU32hWUKltjQ6sryw/P+E7EmAiC7TEMBl/1jIGMJF1884 /b6eTjc2k73clGmezZRuzZ2PQQVTDJ90exVmSR6WMdU7p/lVpfAm+INMOHZHRt+V kG8YindkFjEsVC27I23a1mR4LvLCv0oFTdRySRmnD+pHLnx4Qm5vHKIRQwV860nj DY6K4H09ufC5iThW7H6mkH52SRcQ8Tjd -----END CERTIFICATE-----Generated at Sat May 4 21:19:32 2024 by rpki-client on console-ams.rpki-client.org