$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: uAgtxkMG7OI1QCrxP8OQN1aEkIIoHKNjfv0N1rC/TTY= Subject key identifier: 44:C3:26:3D:3C:03:BF:C5:75:43:E1:9C:18:4E:44:72:98:8B:B5:E3 Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 014E Signing time: Sat 23 Nov 2024 02:44:40 +0000 Manifest this update: Sat 23 Nov 2024 02:44:39 +0000 Manifest next update: Sat 30 Nov 2024 02:44:39 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: l7gr0Dgvp/IKrRExrow6W9kwBtCtyjRUtfgwZs6qyJw=) 2: 471D214809DD11EFAF5F611EC4F9AE02.roa (hash: NuXlYp6HBu4b8bcXEpIyB4yko9brj7g5R8b/IXH6ZJQ=) 3: 1E2DF1DE5CCD11EF80B55A71C4F9AE02.roa (hash: Vx9CKwW38xSqzrMCQYt2Ce0lmPo6uotFsV92mi3qiaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Nov 23 02:44:39 2024 GMT Not After : Nov 30 02:44:39 2024 GMT Subject: CN=67414197-7b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:38:84:54:41:02:6e:89:12:70:3a:87:bc: 63:79:23:3d:36:b9:c6:db:42:77:b6:b7:12:00:1b: d8:34:fc:1d:3a:b2:e0:af:47:d4:4b:e6:62:67:7d: 97:5b:ab:c8:22:58:6a:31:6d:8c:11:31:be:e7:e4: bc:42:ce:ad:54:39:ad:40:99:e9:48:c1:10:f8:21: 1b:d2:aa:d9:9c:eb:81:26:aa:cd:e1:86:a6:68:94: bb:14:84:18:c3:99:8a:51:8a:5e:7d:db:02:f6:8b: 68:f2:20:00:af:32:15:2c:49:45:a0:ff:b3:4a:f5: d4:47:60:c3:86:76:ff:2e:3e:9e:81:6e:c8:72:cc: 21:2c:99:1b:ed:61:19:e3:1a:c9:21:ab:bf:dd:18: bb:f9:cb:f4:85:d4:67:07:8c:44:b3:95:22:02:70: f1:b8:da:5e:a7:20:b8:f1:62:7b:b2:c6:aa:7b:8f: d8:f9:b4:31:89:88:15:42:44:8a:55:73:64:28:28: 66:ee:f3:00:c6:88:66:fc:72:a1:a2:ca:cc:7a:b0: b8:dc:62:f5:79:18:bc:4f:6a:a0:4b:12:ae:ef:a0: 82:70:c3:64:21:ed:f6:ed:b8:a8:15:df:1e:75:76: fb:04:5d:25:96:92:83:f3:48:9d:a6:03:1e:97:f9: b4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C3:26:3D:3C:03:BF:C5:75:43:E1:9C:18:4E:44:72:98:8B:B5:E3 X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:45:6a:13:2f:b8:f6:44:05:4f:09:b2:d7:dd:16:14:2f:9b: 52:cc:b8:31:59:c2:16:01:61:6b:87:e0:c6:53:17:fe:e2:25: da:71:2d:aa:13:0b:6b:a9:a0:e9:1d:9c:04:98:95:fa:ad:2a: 11:11:0c:49:84:5f:dd:2e:a6:15:ce:fd:60:7d:c7:93:63:b8: ed:5b:b0:a3:60:e0:a9:2f:c2:ee:f6:6d:5a:60:c0:87:11:50: 79:15:ae:62:c7:71:36:1a:74:66:a2:b2:e0:87:a7:b7:cd:f3: 5a:e5:9d:c2:71:ee:de:6f:20:f8:2a:77:dc:85:26:ae:bb:7b: 83:3c:90:7d:5c:e0:e2:43:18:d0:f9:de:ea:31:aa:14:57:dc: ad:d8:fe:5f:ba:1a:e7:5c:de:f3:d2:ec:6a:c9:87:62:95:17: 7f:8b:d3:eb:be:67:30:60:e1:41:21:73:3b:b1:28:8e:68:83: 5c:8f:0b:fb:63:b6:20:1c:6e:53:c2:84:a8:d7:37:11:7f:a2: a3:21:a1:85:2b:97:f2:2d:71:de:2e:30:6d:6d:b5:dd:df:56: eb:1c:f8:ba:d5:bd:0f:7a:bc:75:cc:97:75:b9:ff:7d:1a:62: 8a:76:6b:46:67:4a:02:9f:16:b6:97:0b:5b:ef:86:2c:bb:8b: c1:8d:34:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjQxMTIzMDI0NDM5WhcNMjQxMTMwMDI0NDM5WjAYMRYwFAYD VQQDEw02NzQxNDE5Ny03YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlE4hFRBAm6JEnA6h7xjeSM9NrnG20J3trcSABvYNPwdOrLgr0fUS+ZiZ32X W6vIIlhqMW2METG+5+S8Qs6tVDmtQJnpSMEQ+CEb0qrZnOuBJqrN4YamaJS7FIQY w5mKUYpefdsC9oto8iAArzIVLElFoP+zSvXUR2DDhnb/Lj6egW7IcswhLJkb7WEZ 4xrJIau/3Ri7+cv0hdRnB4xEs5UiAnDxuNpepyC48WJ7ssaqe4/Y+bQxiYgVQkSK VXNkKChm7vMAxohm/HKhosrMerC43GL1eRi8T2qgSxKu76CCcMNkIe327bioFd8e dXb7BF0llpKD80idpgMel/m0WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETDJj08 A7/FdUPhnBhORHKYi7XjMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbRWoTL7j2RAVPCbLX3RYUL5tSzLgxWcIWAWFrh+DGUxf+4iXacS2q EwtrqaDpHZwEmJX6rSoREQxJhF/dLqYVzv1gfceTY7jtW7CjYOCpL8Lu9m1aYMCH EVB5Fa5ix3E2GnRmorLgh6e3zfNa5Z3Cce7ebyD4KnfchSauu3uDPJB9XODiQxjQ +d7qMaoUV9yt2P5fuhrnXN7z0uxqyYdilRd/i9PrvmcwYOFBIXM7sSiOaINcjwv7 Y7YgHG5TwoSo1zcRf6KjIaGFK5fyLXHeLjBtbbXd31brHPi61b0Perx1zJd1uf99 GmKKdmtGZ0oCnxa2lwtb74Ysu4vBjTQ3 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org