$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: /z2vthTTD03Vrr8GIJ5dC4wME+QPMyQP6eLvjHX7kWU= Subject key identifier: 6D:6E:04:42:6B:8B:F9:32:B1:BD:45:F2:8C:51:35:0E:C6:6C:A8:2E Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 0249 Signing time: Sat 23 Nov 2024 01:19:04 +0000 Manifest this update: Sat 23 Nov 2024 01:19:04 +0000 Manifest next update: Sat 30 Nov 2024 01:19:04 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: /m6KDfCeXjtyBy9SiiSecs2TY4p3/j72fQDIWsKkCDw=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: vfdbKyJ3mviRT1GnKxYZo1xv2FhpXFvdbF0/IM2Mc1w=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Nov 23 01:19:04 2024 GMT Not After : Nov 30 01:19:04 2024 GMT Subject: CN=67412d88-204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2a:ba:ef:8b:d2:ac:4f:47:66:ce:0b:47:20: a8:73:19:15:5c:17:ed:13:96:06:e4:3d:0e:9d:8b: cd:ef:0d:2d:2d:03:b4:73:68:83:d9:bc:00:3e:d5: d6:89:32:6a:7c:e0:96:b4:77:ec:46:31:cc:c3:28: 9d:39:0b:c4:1a:c3:81:33:ad:93:f2:c8:69:db:de: 49:cb:b2:a6:11:c3:2b:89:f2:1d:65:37:41:66:7c: c8:2e:3c:61:e5:c3:90:07:5c:5b:48:b3:83:fa:a5: c1:8e:7a:40:d4:7b:d0:45:98:b4:d9:09:9c:07:bf: 73:15:99:07:93:32:a3:ba:7a:b7:92:f6:09:12:30: cb:4a:8f:57:83:06:a2:ff:78:33:7d:46:34:42:60: e7:4d:96:e2:b3:5d:bb:8b:3e:bb:2a:85:5a:02:48: 1b:d0:5c:3e:89:d6:a3:76:32:8a:6d:9f:f4:45:ce: ca:48:70:7d:e1:0e:68:24:bb:94:f3:ae:3a:f9:1e: e4:17:a5:2c:8f:15:22:84:e7:c1:6c:50:85:79:74: b3:de:b8:5c:70:13:47:20:bc:a2:2c:8c:6d:e8:b4: 04:70:24:d3:6f:7c:d3:1d:37:77:f2:8d:34:4f:f1: ee:b7:80:82:9e:96:be:fa:19:75:04:9b:20:5e:c8: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6E:04:42:6B:8B:F9:32:B1:BD:45:F2:8C:51:35:0E:C6:6C:A8:2E X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:84:1a:d4:f3:14:0f:18:fa:76:36:4a:dd:dc:c2:24:1b: 12:18:e8:25:09:60:47:5b:a1:cb:dc:9e:0a:07:41:19:23:ba: 8e:d8:97:d6:bd:7b:cd:7e:39:31:2a:a8:3c:75:97:f8:17:37: bb:00:62:ff:cf:b2:f1:89:c2:54:a1:ca:9d:bf:69:18:cc:ee: 7f:7d:10:6c:31:3e:13:81:96:37:3f:85:f0:c3:2e:08:a8:86: da:bc:a7:f7:37:48:2b:bb:06:d5:af:3e:c2:f7:57:19:36:a3: 6d:20:3b:1b:94:bc:d8:94:4e:2e:8f:66:0e:c0:ab:45:f2:32: e6:3f:cb:4f:d1:37:a2:a2:89:4a:b4:cd:06:37:09:96:17:e6: e3:03:89:d4:d1:f9:a5:b7:74:60:42:22:cb:46:ce:fd:04:eb: be:19:55:be:12:90:0b:a5:98:cb:af:31:f0:22:28:e5:d9:d0: b0:b0:9f:dc:d0:f1:3d:40:5f:68:77:d8:03:77:e8:31:61:e1: a5:66:9d:6a:60:ee:4b:3e:79:be:b6:71:b9:de:b9:d3:44:f9: 11:6e:53:3f:53:70:79:74:8a:f1:39:fd:48:cc:49:2c:7b:89: 84:7f:d9:8d:82:9f:f6:6d:2f:36:7f:fd:d3:75:7a:e6:e7:45: 3f:01:04:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjQxMTIzMDExOTA0WhcNMjQxMTMwMDExOTA0WjAYMRYwFAYD VQQDEw02NzQxMmQ4OC0yMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iq674vSrE9HZs4LRyCocxkVXBftE5YG5D0OnYvN7w0tLQO0c2iD2bwAPtXW iTJqfOCWtHfsRjHMwyidOQvEGsOBM62T8shp295Jy7KmEcMrifIdZTdBZnzILjxh 5cOQB1xbSLOD+qXBjnpA1HvQRZi02QmcB79zFZkHkzKjunq3kvYJEjDLSo9Xgwai /3gzfUY0QmDnTZbis127iz67KoVaAkgb0Fw+idajdjKKbZ/0Rc7KSHB94Q5oJLuU 8646+R7kF6UsjxUihOfBbFCFeXSz3rhccBNHILyiLIxt6LQEcCTTb3zTHTd38o00 T/Hut4CCnpa++hl1BJsgXsijEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1uBEJr i/kysb1F8oxRNQ7GbKguMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsj4Qa1PMUDxj6djZK3dzCJBsSGOglCWBHW6HL3J4KB0EZI7qO2JfW vXvNfjkxKqg8dZf4Fze7AGL/z7LxicJUocqdv2kYzO5/fRBsMT4TgZY3P4Xwwy4I qIbavKf3N0gruwbVrz7C91cZNqNtIDsblLzYlE4uj2YOwKtF8jLmP8tP0TeioolK tM0GNwmWF+bjA4nU0fmlt3RgQiLLRs79BOu+GVW+EpALpZjLrzHwIijl2dCwsJ/c 0PE9QF9od9gDd+gxYeGlZp1qYO5LPnm+tnG53rnTRPkRblM/U3B5dIrxOf1IzEks e4mEf9mNgp/2bS82f/3TdXrm50U/AQRc -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org