$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: 7VsuWOjGROkpyMFQNoLyPa5Nicn3L7eEFZ0Pr+UZZYM= Subject key identifier: CE:6D:D2:56:1A:5A:37:A3:20:2E:A6:CA:8F:34:61:64:98:34:1C:53 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 46 Signing time: Fri 17 May 2024 08:07:25 +0000 Manifest this update: Fri 17 May 2024 08:07:25 +0000 Manifest next update: Fri 24 May 2024 08:07:25 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: CTJeAL0DUzua/65pdA5TrrhCFYu1GzzPPN1bcNt3xko=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: oX6yDKyGjQSKL7FAgquC6lBKBFIcxcy0N73rX6AdzUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: May 17 08:07:25 2024 GMT Not After : May 24 08:07:25 2024 GMT Subject: CN=6647103d-6a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:0f:88:2d:d5:a0:cf:07:01:11:31:32:11: 42:05:30:12:82:f5:54:8f:41:db:9a:a1:15:02:d3: 1a:3e:55:82:97:4a:e3:81:ef:ad:8d:ed:0d:75:8b: dd:2e:76:15:aa:bb:bc:30:fd:4a:b6:d4:b3:64:cc: 9b:ba:1b:7f:57:f0:2e:e6:fb:2a:f2:bc:25:4a:6b: 1c:c7:11:67:f9:74:01:d4:b9:85:48:62:41:3d:21: 0e:29:92:04:22:29:46:00:d1:23:22:4f:72:4b:e4: 39:7e:a1:ef:06:89:10:c4:6c:9b:07:3c:c1:77:cf: d0:e7:1f:ee:46:29:e3:06:4c:35:8e:c6:66:62:12: 9e:5c:37:68:4d:c6:05:a5:06:7d:bc:bc:2a:65:4d: 45:54:10:5b:ac:41:16:26:48:2d:58:df:19:fb:f4: b3:b9:e9:f5:c6:e9:c4:d9:82:3b:77:04:eb:e5:7a: ec:f4:7e:9c:28:64:f8:0a:94:17:ea:57:da:ec:6b: 28:a3:5f:8d:e6:8a:de:1e:4d:b7:93:f4:76:29:77: 20:4c:c4:1b:0a:7b:e5:39:ba:6a:82:68:ed:7b:bf: ac:3b:6e:7f:d3:90:54:7d:12:6b:30:75:45:f6:b1: 80:d1:1d:ee:03:2a:12:d0:21:3d:d8:fa:b7:63:63: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6D:D2:56:1A:5A:37:A3:20:2E:A6:CA:8F:34:61:64:98:34:1C:53 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:93:18:58:bd:9b:0a:45:a5:bf:e5:82:c0:1e:27:97:29:ee: 50:1d:07:6b:3d:6a:35:5a:07:dc:31:4e:6c:b5:34:e2:7c:ec: 2b:62:c6:94:21:6b:39:5a:9b:cd:57:6d:e4:f0:0f:2f:e2:33: 6b:50:da:79:06:30:8c:3e:75:87:9a:1a:0b:e5:ba:5c:d3:b3: bc:50:f4:d7:c4:a8:cd:61:77:85:56:b2:c4:a8:91:33:83:60: ac:2d:46:78:75:b3:30:26:59:d9:24:45:9f:99:e7:0d:db:c6: 84:8a:73:f5:3c:72:ce:62:dc:fb:e5:99:c9:50:e1:3f:02:e5: 75:0a:9f:5d:04:ea:ba:dd:5c:0f:f4:66:70:6c:f7:c7:55:14: fd:4e:0d:e0:79:cc:d4:4b:a3:cb:a0:49:bd:17:b4:ba:07:bd: 6f:62:92:a2:ba:23:6c:e0:26:5a:c9:d0:92:e3:86:a3:4b:ab: 08:5b:47:09:1f:1e:ae:4a:14:9d:91:84:f2:b4:e6:dd:40:0a: 03:13:ee:ea:b7:9c:aa:e7:9b:cf:c9:f2:5a:05:46:e9:d9:e6: a3:6e:8e:63:b5:e6:85:1d:72:22:9e:05:8f:a2:3f:a6:58:a6: de:11:2d:be:86:90:12:a3:32:08:40:2b:4f:48:86:ff:85:62: 85:b5:56:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkUzNzExMC8GA1UEBRMoMzNCRUYxNjRBRUQzRkQxM0Q2OUFFQjUxRTVBMENDRjM5 OUY5NDE0NDAeFw0yNDA1MTcwODA3MjVaFw0yNDA1MjQwODA3MjVaMBgxFjAUBgNV BAMTDTY2NDcxMDNkLTZhODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfMw+ILdWgzwcBETEyEUIFMBKC9VSPQduaoRUC0xo+VYKXSuOB762N7Q11i90u dhWqu7ww/Uq21LNkzJu6G39X8C7m+yryvCVKaxzHEWf5dAHUuYVIYkE9IQ4pkgQi KUYA0SMiT3JL5Dl+oe8GiRDEbJsHPMF3z9DnH+5GKeMGTDWOxmZiEp5cN2hNxgWl Bn28vCplTUVUEFusQRYmSC1Y3xn79LO56fXG6cTZgjt3BOvleuz0fpwoZPgKlBfq V9rsayijX43mit4eTbeT9HYpdyBMxBsKe+U5umqCaO17v6w7bn/TkFR9EmswdUX2 sYDRHe4DKhLQIT3Y+rdjY/4FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzm3SVhpa N6MgLqbKjzRhZJg0HFMwHwYDVR0jBBgwFoAUM77xZK7T/RPWmutR5aDM85n5QUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRTM3LzRBQzY5Mzg4QUEz RDExRUU5QjgzOTYzMkM0RjlBRTAyL003N3haSzdUX1JQV211dFI1YURNODVuNVFV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTc3eFpLN1RfUlBXbXV0UjVhRE04NW41UVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RTM3LzRBQzY5Mzg4QUEzRDExRUU5QjgzOTYzMkM0RjlBRTAyL003N3haSzdUX1JQ V211dFI1YURNODVuNVFVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE2TGFi9mwpFpb/lgsAeJ5cp7lAdB2s9ajVaB9wxTmy1NOJ87CtixpQh azlam81XbeTwDy/iM2tQ2nkGMIw+dYeaGgvlulzTs7xQ9NfEqM1hd4VWssSokTOD YKwtRnh1szAmWdkkRZ+Z5w3bxoSKc/U8cs5i3PvlmclQ4T8C5XUKn10E6rrdXA/0 ZnBs98dVFP1ODeB5zNRLo8ugSb0XtLoHvW9ikqK6I2zgJlrJ0JLjhqNLqwhbRwkf Hq5KFJ2RhPK05t1ACgMT7uq3nKrnm8/J8loFRunZ5qNujmO15oUdciKeBY+iP6ZY pt4RLb6GkBKjMghAK09Ihv+FYoW1VmE= -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org