$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: ohvo/A3LyouCk8Mncl8qo1+Te+MrqRTMZgdWoGVKggc= Subject key identifier: 85:FF:8D:8D:97:4A:16:B9:CD:C1:18:9C:8D:FE:2A:40:96:CE:DA:5E Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0C90 Signing time: Wed 20 Nov 2024 18:04:40 +0000 Manifest this update: Wed 20 Nov 2024 18:04:40 +0000 Manifest next update: Wed 27 Nov 2024 18:04:40 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: yft1chwouegucqdV3ZDEq5Vke8n417OEPYK8t8zEPGY=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: 7sqEC8Li2Wpa2EC0aCoYj3xpQ6F4tY2L8bnpzQlh9hg=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: TkTv3Z7gNpifQ4P5rE0+fJOw+J2G+8lPdPOcWNUUfVw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: t/3xs1tllIZ0lEVRUOVq7qYsLRIvRot539D1245Vi/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Nov 20 18:04:40 2024 GMT Not After : Nov 27 18:04:40 2024 GMT Subject: CN=673e24b8-fee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:d0:2c:16:24:7d:f8:36:f5:ab:d7:bf:29: 18:3c:2e:50:e0:19:6e:97:ba:75:8f:e1:90:9d:90: 0c:cc:3e:f2:79:27:59:27:23:d1:99:3d:47:0e:16: cd:c6:10:94:73:53:1d:71:73:ad:b0:3e:a5:d7:d2: c3:9c:b8:0c:93:dc:49:f8:2f:a3:c1:1c:b5:d4:06: ab:1a:4e:73:80:7a:82:72:39:43:d3:da:af:06:61: be:be:7a:19:61:2a:39:77:0d:05:a2:be:b0:8e:1c: 3f:a9:b3:d2:b5:2c:4f:06:e3:ed:46:90:30:2f:e4: 8e:28:52:2a:de:4c:c2:d8:ea:24:2a:bc:8a:a3:f3: 62:6f:e7:11:7a:8a:ec:e9:cd:88:d1:60:e8:bf:23: 45:45:3a:10:ea:68:d9:fd:88:4e:8d:86:72:26:7e: e0:1f:23:f3:ad:fd:9c:b1:ef:31:64:ba:d5:ba:cd: c9:67:be:3c:e9:b7:14:a1:69:28:03:c4:fc:0b:de: f2:0b:4d:bc:94:5c:a7:c8:a1:09:00:7a:dc:c3:f0: 88:85:6e:34:12:1f:ce:77:12:53:ff:e6:1f:fb:4b: 0f:a9:6e:73:d3:23:34:0d:79:78:6d:e8:a5:e8:88: b0:9a:02:23:c9:cb:cf:fc:98:88:00:b7:d1:29:f0: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FF:8D:8D:97:4A:16:B9:CD:C1:18:9C:8D:FE:2A:40:96:CE:DA:5E X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b4:6d:6f:14:51:3d:22:60:b9:21:e0:91:9b:a4:20:f2:13: 9e:c5:ab:36:2f:08:aa:fc:75:9f:4d:c8:ca:28:bf:fe:97:8e: 55:32:4d:c7:e8:c8:e0:28:0e:11:42:21:a0:38:cb:1d:4b:38: 5f:1a:8c:4a:36:79:3d:71:4e:ef:db:16:ef:26:35:69:db:4e: a6:4a:60:ab:41:a6:08:ee:c6:04:b9:2f:5b:68:76:b8:6a:c7: c6:c7:fd:ea:74:ba:0f:01:71:cd:d0:ae:c4:d2:fe:dd:42:31: 37:e8:20:cb:dc:c3:d9:06:b6:5b:ed:95:35:08:a7:42:75:73: 13:63:7c:f6:3c:66:46:6c:6c:63:a0:6a:2e:6c:5e:f7:8b:b1: 65:6b:dc:c8:ca:e8:3a:f1:ca:18:b8:ea:42:57:f8:a9:34:38: 97:92:58:de:5a:1e:1f:61:6b:85:75:65:ec:9a:65:43:d5:e1: 95:c9:cd:ca:53:f9:a3:ae:5b:8c:fa:76:e3:eb:95:be:a0:b0: e4:61:c8:ec:dd:34:a0:25:01:7c:55:ba:b3:e1:a3:e2:de:df: 1b:7d:0b:31:0a:97:51:bd:d6:0c:d3:9b:42:c3:0c:2f:aa:49: 8e:29:98:78:95:6e:2b:ae:41:27:33:9d:fe:b9:5e:7e:9b:6c: a2:a7:90:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjQxMTIwMTgwNDQwWhcNMjQxMTI3MTgwNDQwWjAYMRYwFAYD VQQDEw02NzNlMjRiOC1mZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFLQLBYkffg29avXvykYPC5Q4Blul7p1j+GQnZAMzD7yeSdZJyPRmT1HDhbN xhCUc1MdcXOtsD6l19LDnLgMk9xJ+C+jwRy11AarGk5zgHqCcjlD09qvBmG+vnoZ YSo5dw0For6wjhw/qbPStSxPBuPtRpAwL+SOKFIq3kzC2OokKryKo/Nib+cReors 6c2I0WDovyNFRToQ6mjZ/YhOjYZyJn7gHyPzrf2cse8xZLrVus3JZ7486bcUoWko A8T8C97yC028lFynyKEJAHrcw/CIhW40Eh/OdxJT/+Yf+0sPqW5z0yM0DXl4beil 6IiwmgIjycvP/JiIALfRKfCcTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX/jY2X Sha5zcEYnI3+KkCWztpeMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNtG1vFFE9ImC5IeCRm6Qg8hOexas2Lwiq/HWfTcjKKL/+l45VMk3H 6MjgKA4RQiGgOMsdSzhfGoxKNnk9cU7v2xbvJjVp206mSmCrQaYI7sYEuS9baHa4 asfGx/3qdLoPAXHN0K7E0v7dQjE36CDL3MPZBrZb7ZU1CKdCdXMTY3z2PGZGbGxj oGoubF73i7Fla9zIyug68coYuOpCV/ipNDiXkljeWh4fYWuFdWXsmmVD1eGVyc3K U/mjrluM+nbj65W+oLDkYcjs3TSgJQF8Vbqz4aPi3t8bfQsxCpdRvdYM05tCwwwv qkmOKZh4lW4rrkEnM53+uV5+m2yip5BX -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:11 2024 by rpki-client on console-ams.rpki-client.org