$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: t9Xm+VTLJEHjjYJjhcJM3SnZglFiZh3i1SS4RXxu01I= Subject key identifier: B1:A2:B1:8F:AB:66:94:C8:66:03:50:B5:8F:14:97:A8:32:DF:05:21 Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 3FD8 Signing time: Fri 22 Nov 2024 15:04:31 +0000 Manifest this update: Fri 22 Nov 2024 15:04:30 +0000 Manifest next update: Fri 29 Nov 2024 15:04:30 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: JiJRrwj/jPVd7hi2TQMnHAtchouhH8W2YbTblItb7DQ=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: Nov 22 15:04:30 2024 GMT Not After : Nov 29 15:04:30 2024 GMT Subject: CN=67409d7e-294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:f1:9e:2a:b3:96:35:78:75:58:a8:0b:db: 58:fb:15:e8:47:77:43:5a:9d:7e:24:c9:f7:b2:03: ce:4d:ca:49:74:f4:0a:61:4c:a7:a4:be:23:a8:f5: c3:ed:2f:f6:bc:4e:64:b9:cb:ad:58:4a:08:a5:3e: d3:d1:c5:d4:8e:fd:ea:b7:db:28:17:1b:04:cb:40: 62:a4:9d:ed:48:b7:6b:39:44:9b:7e:87:d7:53:0c: 7b:98:7e:ea:9d:0f:52:36:7e:a3:18:b4:b8:af:84: c7:8c:91:2e:04:61:b1:36:24:5d:ad:f4:26:83:fd: a4:28:7a:5b:60:8a:59:5c:94:6b:38:c5:6d:e2:a2: 4f:a7:41:aa:3d:c5:cf:fe:21:fe:ee:96:88:88:78: 14:c8:d7:c8:e0:c2:f8:f3:49:68:a5:ff:9e:48:05: 84:86:e9:c5:2f:81:ce:84:cb:c6:1e:84:06:3e:db: dc:2e:27:95:13:69:1a:6f:df:f4:4e:c1:3f:da:71: 5f:2d:6c:c7:84:4e:f7:21:1c:06:e2:73:6f:17:75: 14:0e:70:f4:ca:b2:28:6e:fa:4c:a3:af:73:f1:cb: 8e:50:b4:fc:9a:9a:49:ad:d9:17:fb:ab:ed:c2:40: 96:78:54:0c:a8:5d:d2:f6:d8:f2:b8:31:0d:73:8f: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A2:B1:8F:AB:66:94:C8:66:03:50:B5:8F:14:97:A8:32:DF:05:21 X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:37:8d:52:33:d9:a9:fe:7b:be:7c:ea:8e:a0:bf:86:a9:33: c0:6c:42:14:84:b2:02:5b:31:6c:d9:7b:c8:fd:20:c7:1d:c0: 2f:ca:11:d9:7c:53:70:22:e5:d9:03:e6:71:e2:c7:1e:25:42: 84:84:66:c6:27:eb:cc:67:36:60:d7:5c:6c:dd:5f:e0:37:0c: de:d5:2b:f0:35:ab:ad:ec:84:89:85:7d:46:7c:e9:b0:96:a4: cd:4e:15:5c:3a:2b:1f:84:ac:61:f9:a2:00:a1:93:1c:94:e9: 99:0d:54:0a:ae:8e:15:ec:37:a4:d4:64:8d:0f:42:e1:23:c6: de:26:3d:6a:96:fb:1e:df:e9:d2:73:f8:0e:10:c6:3a:d6:e0: fd:7f:22:da:bf:c5:37:4f:92:d8:df:62:a6:d9:7c:0f:95:dc: 00:b6:1f:76:34:6e:8d:e6:5c:18:c7:21:20:cc:b2:19:fa:07: 14:76:ba:d4:84:c1:e9:c4:b1:ff:f1:b0:09:b5:6d:a9:26:8a: 6e:41:29:7b:ad:73:ab:19:72:cd:ea:94:a4:8d:d0:be:74:c5: 21:ce:86:40:f9:ad:80:4c:85:3f:1a:5d:fd:75:a6:1b:72:6e: fe:41:42:23:be:17:a2:78:3e:c0:bc:a3:9c:90:d4:9d:4d:0d: 87:25:03:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjQxMTIyMTUwNDMwWhcNMjQxMTI5MTUwNDMwWjAYMRYwFAYD VQQDEw02NzQwOWQ3ZS0yOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi3xniqzljV4dVioC9tY+xXoR3dDWp1+JMn3sgPOTcpJdPQKYUynpL4jqPXD 7S/2vE5kucutWEoIpT7T0cXUjv3qt9soFxsEy0BipJ3tSLdrOUSbfofXUwx7mH7q nQ9SNn6jGLS4r4THjJEuBGGxNiRdrfQmg/2kKHpbYIpZXJRrOMVt4qJPp0GqPcXP /iH+7paIiHgUyNfI4ML480lopf+eSAWEhunFL4HOhMvGHoQGPtvcLieVE2kab9/0 TsE/2nFfLWzHhE73IRwG4nNvF3UUDnD0yrIobvpMo69z8cuOULT8mppJrdkX+6vt wkCWeFQMqF3S9tjyuDENc4/UpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGisY+r ZpTIZgNQtY8Ul6gy3wUhMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIN41SM9mp/nu+fOqOoL+GqTPAbEIUhLICWzFs2XvI/SDHHcAvyhHZ fFNwIuXZA+Zx4sceJUKEhGbGJ+vMZzZg11xs3V/gNwze1SvwNaut7ISJhX1GfOmw lqTNThVcOisfhKxh+aIAoZMclOmZDVQKro4V7Dek1GSND0LhI8beJj1qlvse3+nS c/gOEMY61uD9fyLav8U3T5LY32Km2XwPldwAth92NG6N5lwYxyEgzLIZ+gcUdrrU hMHpxLH/8bAJtW2pJopuQSl7rXOrGXLN6pSkjdC+dMUhzoZA+a2ATIU/Gl39daYb cm7+QUIjvheieD7AvKOckNSdTQ2HJQPm -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org