$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: vQHijr7ARbJgzztT0U1BDAPCNWhDIVGiFK0U+8QrRBg= Subject key identifier: 71:AA:DE:10:0B:7E:85:D2:F2:DE:9A:02:4F:A0:02:AE:2B:28:84:E1 Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 18B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 18A7 Signing time: Fri 22 Nov 2024 16:28:09 +0000 Manifest this update: Fri 22 Nov 2024 16:28:09 +0000 Manifest next update: Fri 29 Nov 2024 16:28:09 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: xhY2GBJM8ZDKTENu3UXAwUHkB+aUe9SKByqu3RJZBCE=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: sKS3rMJ6It6/rpeTWZ/r67AylRsKXL//6e7PLZw6fXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6321 (0x18b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: Nov 22 16:28:09 2024 GMT Not After : Nov 29 16:28:09 2024 GMT Subject: CN=6740b119-5eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:d2:94:36:52:c8:64:2b:50:dd:d8:a3:c9: 6f:42:b8:9c:a4:7e:ee:5c:06:09:76:09:50:88:21: 36:e2:ea:40:4c:42:2b:10:e9:bb:f5:17:8c:25:91: 64:88:13:a9:18:f7:b8:22:30:af:27:27:38:e4:a2: 7d:1a:dc:a6:6e:f9:06:27:5e:1f:ba:63:03:1a:b7: 32:e7:8d:34:92:87:fb:b2:ad:88:cf:d0:1c:3e:96: e4:24:96:f1:0a:bc:e8:fd:4b:c3:70:4c:73:47:4d: 0f:07:00:d5:fc:cb:5f:08:58:8a:65:dc:b7:85:5c: da:1f:71:1b:32:27:c7:41:7e:c4:13:3e:bc:3b:71: 95:80:61:77:09:63:07:33:86:cb:05:df:d4:4a:74: d3:b5:de:46:77:fc:6b:e4:00:f7:bd:bf:b5:c1:19: 1a:a2:ab:e5:3c:81:7f:f4:a5:f6:fc:3b:57:68:f4: cb:dc:ff:6f:f4:1a:72:4c:d0:ef:80:20:cb:00:fc: f8:6e:2d:71:71:3b:25:1d:5a:ec:fe:9e:ed:20:17: b9:72:db:cd:96:77:e0:f9:9e:9e:0f:10:7e:44:cc: 2a:9e:5f:f8:c5:76:28:42:ae:78:6c:6a:b2:af:db: cb:17:2a:f7:87:3d:2c:c9:88:d0:3b:8b:94:f7:2e: 3d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:DE:10:0B:7E:85:D2:F2:DE:9A:02:4F:A0:02:AE:2B:28:84:E1 X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:85:1b:4f:45:56:01:46:1a:7a:70:dd:43:92:59:d4:d1:1a: e8:1e:a3:f8:47:74:db:a1:a1:ac:ad:2d:d1:3b:d1:89:de:21: 55:86:62:f4:97:dc:e4:91:b7:16:c7:8f:1c:88:e2:2b:5b:64: f1:44:d5:3b:d4:85:c2:d8:92:f5:ff:e0:c5:3a:23:23:3f:48: b1:26:72:cc:37:3d:c9:70:bb:fc:bf:01:be:32:dc:f5:5c:f7: fd:17:07:9c:40:27:bf:1b:ac:2f:4b:4a:e5:3e:05:36:2e:04: eb:2c:ec:04:16:2f:48:41:02:6c:1c:0a:d8:9b:b2:4d:64:57: 8b:28:db:a5:5c:a5:b1:1e:5e:c1:7e:53:1b:04:8a:f9:d1:74: ea:29:50:ec:2a:8b:6a:7a:90:d0:af:da:46:da:f4:df:24:fa: db:96:bb:ae:73:1d:b9:10:f8:90:2a:22:e4:6f:ec:3d:88:a8: b2:93:17:a8:fc:6d:58:eb:fc:d5:d9:5d:61:bc:e3:45:87:3c: 15:7d:fb:af:b6:4c:94:95:b4:78:a7:63:bb:0e:21:1a:74:ea: 97:90:8d:55:a7:36:a0:cd:e4:ce:68:1f:41:a2:d8:80:6c:06: eb:57:92:8e:13:42:99:ef:57:0f:a2:80:39:a0:e1:25:79:73: e7:11:81:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjQxMTIyMTYyODA5WhcNMjQxMTI5MTYyODA5WjAYMRYwFAYD VQQDEw02NzQwYjExOS01ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy7SlDZSyGQrUN3Yo8lvQricpH7uXAYJdglQiCE24upATEIrEOm79ReMJZFk iBOpGPe4IjCvJyc45KJ9GtymbvkGJ14fumMDGrcy5400kof7sq2Iz9AcPpbkJJbx Crzo/UvDcExzR00PBwDV/MtfCFiKZdy3hVzaH3EbMifHQX7EEz68O3GVgGF3CWMH M4bLBd/USnTTtd5Gd/xr5AD3vb+1wRkaoqvlPIF/9KX2/DtXaPTL3P9v9BpyTNDv gCDLAPz4bi1xcTslHVrs/p7tIBe5ctvNlnfg+Z6eDxB+RMwqnl/4xXYoQq54bGqy r9vLFyr3hz0syYjQO4uU9y49TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGq3hAL foXS8t6aAk+gAq4rKIThMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1hRtPRVYBRhp6cN1DklnU0RroHqP4R3TboaGsrS3RO9GJ3iFVhmL0 l9zkkbcWx48ciOIrW2TxRNU71IXC2JL1/+DFOiMjP0ixJnLMNz3JcLv8vwG+Mtz1 XPf9FwecQCe/G6wvS0rlPgU2LgTrLOwEFi9IQQJsHArYm7JNZFeLKNulXKWxHl7B flMbBIr50XTqKVDsKotqepDQr9pG2vTfJPrblruucx25EPiQKiLkb+w9iKiykxeo /G1Y6/zV2V1hvONFhzwVffuvtkyUlbR4p2O7DiEadOqXkI1VpzagzeTOaB9BotiA bAbrV5KOE0KZ71cPooA5oOEleXPnEYGU -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org