$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: xnixANwTAmm64V7//VRUMlY91YZHbHtGxs3O1VJK1H4= Subject key identifier: 9E:59:C6:E3:01:A9:4E:1D:ED:96:62:92:FE:2D:D3:1B:3A:0A:40:9B Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: D7 Signing time: Sat 23 Nov 2024 03:44:41 +0000 Manifest this update: Sat 23 Nov 2024 03:44:41 +0000 Manifest next update: Sat 30 Nov 2024 03:44:41 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: cyOfFCfojjzFzkXh0Y96u8fxFdPSztgiZSzM3SBpH1I=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: qDjDjx/58q+LWkw/PFVn1wwvsxzD4HwajEOfZNh5ZU0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: bQFYc9TGCv39aWTUTfzRcDtHtMAg4CgWesOizIV+Kko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Nov 23 03:44:41 2024 GMT Not After : Nov 30 03:44:41 2024 GMT Subject: CN=67414fa9-a272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:d0:63:12:4d:06:fd:20:5b:79:aa:02:2a: 7b:33:06:d4:3b:37:c8:bc:31:b2:32:48:96:ad:f1: dd:c1:b0:3d:4b:eb:00:5d:ad:17:04:aa:2d:37:6c: 4e:29:f3:32:94:4b:06:19:4b:84:38:af:99:05:18: f5:01:5c:de:5f:4e:07:6f:5d:cc:89:73:83:b9:a2: a0:e8:60:71:ba:9e:a8:d7:0a:05:8e:70:8a:73:90: 5c:ec:d4:f3:07:d5:99:6d:dc:3e:55:f7:73:03:0f: 59:4e:6a:53:e7:0d:02:90:1a:4a:23:a0:de:62:5e: 22:df:0c:0e:9a:51:ff:f6:37:d0:fa:9d:33:5f:90: 0b:ff:6f:5b:6d:24:26:ec:9f:87:6e:97:8e:f1:a7: ca:fd:b3:6b:27:a5:7c:a7:fc:d8:b3:e1:c5:5f:f2: 1a:59:d6:2f:8d:f3:c4:c3:d6:ee:6b:c3:8f:c8:b4: 57:2e:e9:81:a1:11:a6:36:a7:2c:e3:3e:8d:72:88: 49:42:b9:f0:86:bc:48:26:50:fc:cd:92:f9:9b:58: 0c:96:34:29:70:1c:73:49:29:c9:db:72:22:f9:21: 3b:42:8d:5d:e0:23:a3:c8:56:b1:b7:a7:a5:46:cd: af:34:79:29:80:90:d1:bf:25:0d:35:b5:ec:0f:d0: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:59:C6:E3:01:A9:4E:1D:ED:96:62:92:FE:2D:D3:1B:3A:0A:40:9B X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0f:d3:65:12:81:cb:22:b7:06:7e:2f:f5:70:f4:09:95:a7: 4c:d9:9d:3a:94:28:06:bc:fc:d7:29:0d:2c:2f:f7:56:f1:33: 2c:69:8d:6f:b5:08:f3:12:f7:cf:2b:c3:9c:3d:06:b0:91:8d: 36:77:b1:91:5b:9f:87:14:f3:d1:8c:e3:65:8b:0f:72:95:2a: d6:80:de:24:e0:08:02:96:69:fc:e1:77:0a:a9:28:22:5b:8d: 7b:99:f3:80:49:c5:4d:87:e5:94:90:0c:d5:ad:6b:e5:1a:89: 4c:94:8c:9b:42:9d:0b:36:03:fc:42:3d:70:3b:75:4e:33:91: 43:ae:f2:f8:64:aa:f8:5a:95:af:8f:67:a3:da:65:d9:f9:a9: 42:3c:29:17:be:ab:56:b3:43:aa:72:4e:15:41:df:22:8c:19: a5:69:ab:ef:bf:81:cc:4a:de:38:ba:fa:59:a4:25:08:43:2f: 7f:a7:e3:4a:f1:42:3a:4e:3b:df:ba:d4:95:73:3e:3a:1d:89: c8:12:d2:0e:ff:48:5f:13:6d:66:ef:7a:d5:7c:ba:e1:8b:e0: e9:33:dd:97:10:51:ad:70:f5:61:63:20:9c:f3:72:4d:97:57: 1d:ac:d9:09:ae:f8:16:09:30:96:75:55:91:f7:95:c3:45:e2: f4:bd:32:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjQxMTIzMDM0NDQxWhcNMjQxMTMwMDM0NDQxWjAYMRYwFAYD VQQDEw02NzQxNGZhOS1hMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd3QYxJNBv0gW3mqAip7MwbUOzfIvDGyMkiWrfHdwbA9S+sAXa0XBKotN2xO KfMylEsGGUuEOK+ZBRj1AVzeX04Hb13MiXODuaKg6GBxup6o1woFjnCKc5Bc7NTz B9WZbdw+VfdzAw9ZTmpT5w0CkBpKI6DeYl4i3wwOmlH/9jfQ+p0zX5AL/29bbSQm 7J+HbpeO8afK/bNrJ6V8p/zYs+HFX/IaWdYvjfPEw9bua8OPyLRXLumBoRGmNqcs 4z6NcohJQrnwhrxIJlD8zZL5m1gMljQpcBxzSSnJ23Ii+SE7Qo1d4COjyFaxt6el Rs2vNHkpgJDRvyUNNbXsD9DhowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5ZxuMB qU4d7ZZikv4t0xs6CkCbMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbD9NlEoHLIrcGfi/1cPQJladM2Z06lCgGvPzXKQ0sL/dW8TMsaY1v tQjzEvfPK8OcPQawkY02d7GRW5+HFPPRjONliw9ylSrWgN4k4AgClmn84XcKqSgi W417mfOAScVNh+WUkAzVrWvlGolMlIybQp0LNgP8Qj1wO3VOM5FDrvL4ZKr4WpWv j2ej2mXZ+alCPCkXvqtWs0Oqck4VQd8ijBmlaavvv4HMSt44uvpZpCUIQy9/p+NK 8UI6TjvfutSVcz46HYnIEtIO/0hfE21m73rVfLrhi+DpM92XEFGtcPVhYyCc83JN l1cdrNkJrvgWCTCWdVWR95XDReL0vTJQ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org