$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: gsmfhzWhdvs/FF3AxdnsLPkncFs/iA74IDNtDoDkiy8= Subject key identifier: EB:84:67:E9:F5:6D:BA:1B:53:1E:5E:41:B5:71:1E:4A:86:E2:19:F7 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 10F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 10E6 Signing time: Fri 22 Nov 2024 17:18:02 +0000 Manifest this update: Fri 22 Nov 2024 17:18:01 +0000 Manifest next update: Fri 29 Nov 2024 17:18:01 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: UiMoSHVw0hzmcAQJqvIFuTWp/GQz1H6ULKOPnSQKWhE=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: i6cJunhUx1IUyrSi+spBz4Du5zWwhOZp61t1jw1sa98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4336 (0x10f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Nov 22 17:18:01 2024 GMT Not After : Nov 29 17:18:01 2024 GMT Subject: CN=6740bcc9-3265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:f7:d0:e4:1e:e3:bb:50:24:a0:c7:7c:ac: 7a:c9:0f:3f:e7:3b:34:d8:33:59:06:19:c8:bf:bc: 92:6c:44:36:57:c8:1c:07:25:f1:52:39:af:cd:5e: e6:f9:eb:6f:28:21:30:33:83:ea:59:b2:9d:95:4f: d5:19:ea:9d:cd:7b:b6:96:45:ea:4e:e2:8f:94:b1: 2a:15:d8:91:49:74:ca:4d:4c:61:43:95:27:66:44: b8:4c:cb:64:3c:85:ed:dc:ea:ba:0c:7d:f4:55:c7: 15:e2:29:4b:3a:26:bd:a0:6f:75:bd:84:82:50:72: 63:34:a4:7d:58:97:6a:ef:5d:6f:32:9b:44:bf:39: 61:29:19:13:e8:80:4f:79:e5:3c:f7:0a:21:5e:65: 98:e0:9c:29:28:f2:0d:d9:cb:61:3d:1f:69:bb:d8: e8:80:ec:55:1f:e3:d3:01:18:40:ab:5e:50:84:40: 33:90:c6:c0:ec:22:1c:0a:79:5f:34:f1:45:a3:d1: b7:c1:92:57:ef:80:1f:54:34:77:14:71:0c:d4:21: be:74:42:58:27:3e:df:05:f6:2d:10:19:fb:f3:4e: 45:d6:b2:01:7e:a9:d8:56:86:7c:fd:ac:ff:88:7f: b7:23:f0:79:6b:78:0f:2f:b5:c2:71:eb:0c:62:ff: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:84:67:E9:F5:6D:BA:1B:53:1E:5E:41:B5:71:1E:4A:86:E2:19:F7 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:86:9a:af:67:65:0d:a1:2a:67:b2:87:f9:55:7f:dc:28:df: 1a:ea:10:af:6b:36:6a:84:15:db:81:86:ff:e3:6f:41:81:bc: f8:72:51:40:b6:98:69:33:9b:4e:e0:e3:95:71:a5:b3:09:46: 04:5a:46:27:e4:d6:44:52:c0:63:f7:0a:69:e4:bb:a1:9d:a5: 10:a7:c1:bc:14:2e:e2:db:a9:c7:5d:de:37:f2:33:49:13:d2: 3c:ca:80:92:12:c2:e7:46:7c:da:1e:89:9a:3b:3b:19:fc:a3: 22:75:27:76:9c:4a:7a:85:13:82:fd:b7:e7:64:ef:58:d6:ec: cb:56:17:35:5a:21:09:ff:94:33:27:d2:3e:ff:a3:b0:e4:41: e8:67:16:47:df:2e:3b:2e:23:c7:a2:88:43:8a:c6:01:33:ba: 9d:28:43:4b:a4:39:77:df:f5:ce:84:2c:ca:19:4e:7c:bc:24: cd:8b:7a:27:9a:c8:92:b3:7a:7c:f2:b6:e9:a8:28:51:48:17: 25:78:7c:2d:a1:f8:3f:7d:23:17:8a:1a:f5:17:11:0d:d2:4f: 3f:cc:c0:0d:72:d0:b9:ad:20:0f:33:14:ef:30:f8:ee:3e:f6: f3:72:92:4a:56:ba:be:e8:bb:5d:6e:76:53:44:66:01:f8:eb: 86:f3:fa:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjQxMTIyMTcxODAxWhcNMjQxMTI5MTcxODAxWjAYMRYwFAYD VQQDEw02NzQwYmNjOS0zMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4730OQe47tQJKDHfKx6yQ8/5zs02DNZBhnIv7ySbEQ2V8gcByXxUjmvzV7m +etvKCEwM4PqWbKdlU/VGeqdzXu2lkXqTuKPlLEqFdiRSXTKTUxhQ5UnZkS4TMtk PIXt3Oq6DH30VccV4ilLOia9oG91vYSCUHJjNKR9WJdq711vMptEvzlhKRkT6IBP eeU89wohXmWY4JwpKPIN2cthPR9pu9jogOxVH+PTARhAq15QhEAzkMbA7CIcCnlf NPFFo9G3wZJX74AfVDR3FHEM1CG+dEJYJz7fBfYtEBn7805F1rIBfqnYVoZ8/az/ iH+3I/B5a3gPL7XCcesMYv9d4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuEZ+n1 bbobUx5eQbVxHkqG4hn3MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5hpqvZ2UNoSpnsof5VX/cKN8a6hCvazZqhBXbgYb/429Bgbz4clFA tphpM5tO4OOVcaWzCUYEWkYn5NZEUsBj9wpp5LuhnaUQp8G8FC7i26nHXd438jNJ E9I8yoCSEsLnRnzaHomaOzsZ/KMidSd2nEp6hROC/bfnZO9Y1uzLVhc1WiEJ/5Qz J9I+/6Ow5EHoZxZH3y47LiPHoohDisYBM7qdKENLpDl33/XOhCzKGU58vCTNi3on msiSs3p88rbpqChRSBcleHwtofg/fSMXihr1FxEN0k8/zMANctC5rSAPMxTvMPju PvbzcpJKVrq+6LtdbnZTRGYB+OuG8/rE -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org