$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: UNbxkNOT88IKBFLfQFi07swhx3tqfSGgTAmmp4xtmaY= Subject key identifier: D3:90:EE:A4:96:8A:03:46:CA:44:6F:6B:B6:5E:42:FB:24:FB:24:76 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 110A Signing time: Wed 20 Nov 2024 17:15:08 +0000 Manifest this update: Wed 20 Nov 2024 17:15:07 +0000 Manifest next update: Wed 27 Nov 2024 17:15:07 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: Ti/5x5eN22/gKXAM2spI0q4+kfLrzVpGJveuzHGNkX8=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: eq/Jdt+R7/hZ4YW911X1nuNYUDsfy1mJ/nRJ7y06DWU=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: AKBOJFiK0CGzPrk1VjRavIF25nDnN6CV5txK6KFEoQM=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: mTC+0v+tu7i1qyU8oj/k9Utbi2nUrKBfJp5EbQJr3jw=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: z4Zna+X57y726pmGPGMeS7qfbOq2Xmw5XRAkrcvpEs8=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: HiYjj0p3JXRse1uC7XLEGyug0M30GyJfvcEMlo7b1CI=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: Tc4kPNK+2PBhLQIxN1GXPm3IRuhcOCLKA9GmTtF5VIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4406 (0x1136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Nov 20 17:15:07 2024 GMT Not After : Nov 27 17:15:07 2024 GMT Subject: CN=673e191b-6afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:c5:c7:5a:58:1f:9d:bc:f6:70:4a:42:d4: c7:a3:ca:be:e9:50:34:df:81:ac:fb:0d:1e:6e:82: 10:75:5a:52:fb:b8:da:79:c4:01:97:bc:05:1b:92: f1:b6:81:bf:5a:9e:ee:53:df:52:fe:76:d1:3a:29: f1:ea:fc:5f:f3:53:4e:75:1f:b8:85:92:21:ed:24: 47:38:e5:71:99:4f:fa:b5:5e:6c:cf:1d:3b:5b:e8: 4a:fb:de:f9:ea:72:77:7a:31:61:32:22:0f:03:30: 4f:be:2e:70:db:7f:d8:56:6f:c5:b4:8b:fd:71:96: 01:09:20:5c:57:25:31:d8:60:80:e2:08:ef:1f:36: 48:30:bf:da:f6:a4:45:80:b2:51:47:a6:57:54:90: 64:48:a6:d8:8f:be:97:05:e6:1f:11:5b:06:0e:8a: 61:ee:41:98:21:f7:2d:8e:96:25:26:e7:29:56:0b: d1:72:bf:55:e8:88:fb:12:ee:ea:3d:1f:cc:f3:30: 54:cd:16:bb:a9:17:82:e2:e9:f4:a8:0e:01:91:b2: 25:05:5a:3c:64:4c:f1:8c:f5:b2:66:50:b5:c9:8d: 2d:b4:29:d9:6f:20:13:eb:62:21:9e:4b:69:fc:a6: c2:55:a6:78:ad:4a:9e:f2:32:1e:07:3c:7d:97:ba: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:EE:A4:96:8A:03:46:CA:44:6F:6B:B6:5E:42:FB:24:FB:24:76 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a9:ba:0d:51:ec:af:5e:b2:35:2e:c1:fd:3b:99:d9:cd:ea: ea:57:73:18:d5:d5:25:c4:06:06:cf:04:ac:97:c0:7e:29:09: af:d6:f0:fb:d3:f4:91:8b:6d:4a:fb:4f:97:e8:25:ed:9c:92: 0a:17:55:6d:81:72:4e:e6:dd:1f:d7:72:e9:2e:24:aa:34:40: 58:b1:fb:d4:94:81:bc:0c:31:a5:d5:c6:c7:9b:70:76:89:fc: 66:df:65:e1:27:36:07:1a:3c:5f:6f:1e:5e:52:8f:42:d7:12: 63:3f:cd:a3:5b:45:93:28:d5:22:09:71:50:2c:61:45:a4:57: c6:9d:fb:25:81:61:97:7d:05:a4:7d:a0:6e:dc:5f:70:4f:ec: d8:41:81:f8:fe:90:73:1e:46:24:92:c2:d0:24:44:e6:1c:05: 26:b7:31:59:a0:b8:71:13:a6:2a:a7:08:63:d2:17:37:49:c7: 71:9f:7c:33:1d:ce:47:2c:71:0a:10:74:28:15:79:51:66:a6: d5:6f:82:36:89:81:b8:42:83:7f:b0:c6:6f:6e:27:f5:80:1b: 3a:b9:31:91:37:63:dc:f7:65:42:5a:b8:c8:4d:99:b4:8c:77: 9e:d3:a4:f2:67:63:16:01:13:91:1f:f7:4a:0b:29:1b:ec:7a: 82:ec:d1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjQxMTIwMTcxNTA3WhcNMjQxMTI3MTcxNTA3WjAYMRYwFAYD VQQDEw02NzNlMTkxYi02YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR3Fx1pYH5289nBKQtTHo8q+6VA034Gs+w0eboIQdVpS+7jaecQBl7wFG5Lx toG/Wp7uU99S/nbROinx6vxf81NOdR+4hZIh7SRHOOVxmU/6tV5szx07W+hK+975 6nJ3ejFhMiIPAzBPvi5w23/YVm/FtIv9cZYBCSBcVyUx2GCA4gjvHzZIML/a9qRF gLJRR6ZXVJBkSKbYj76XBeYfEVsGDoph7kGYIfctjpYlJucpVgvRcr9V6Ij7Eu7q PR/M8zBUzRa7qReC4un0qA4BkbIlBVo8ZEzxjPWyZlC1yY0ttCnZbyAT62Ihnktp /KbCVaZ4rUqe8jIeBzx9l7qZHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOQ7qSW igNGykRva7ZeQvsk+yR2MB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2qboNUeyvXrI1LsH9O5nZzerqV3MY1dUlxAYGzwSsl8B+KQmv1vD7 0/SRi21K+0+X6CXtnJIKF1VtgXJO5t0f13LpLiSqNEBYsfvUlIG8DDGl1cbHm3B2 ifxm32XhJzYHGjxfbx5eUo9C1xJjP82jW0WTKNUiCXFQLGFFpFfGnfslgWGXfQWk faBu3F9wT+zYQYH4/pBzHkYkksLQJETmHAUmtzFZoLhxE6Yqpwhj0hc3Scdxn3wz Hc5HLHEKEHQoFXlRZqbVb4I2iYG4QoN/sMZvbif1gBs6uTGRN2Pc92VCWrjITZm0 jHee06TyZ2MWARORH/dKCykb7HqC7NEN -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:43 2024 by rpki-client on console-fra.rpki-client.org