$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: 9rw6oFfj+fYb/8BJseeJpKIwAdoF83pOGVHb6AisHL8= Subject key identifier: 7E:DB:C6:C9:0A:25:72:DB:FB:36:37:D6:2D:A2:3D:54:C8:D5:1E:F1 Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 03A9 Signing time: Sun 19 May 2024 02:32:28 +0000 Manifest this update: Sun 19 May 2024 02:32:27 +0000 Manifest next update: Sun 26 May 2024 02:32:27 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: FuXK6fFd+bmX3q4ONKfOUBUaXHe+9jQPup0hOt/H/ko=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: w4/a6LG1KC7azbRrme1vd3NWtzsp5A1pP9leKGvLzZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: May 19 02:32:27 2024 GMT Not After : May 26 02:32:27 2024 GMT Subject: CN=664964bc-2a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:f6:47:3e:61:e3:16:77:61:7d:3c:6d:06: eb:cb:12:6f:b2:23:42:ff:cf:63:63:0a:6e:77:92: 40:2f:0c:67:e3:40:8c:b7:41:6a:f1:24:61:07:1c: ec:20:6a:c3:7f:53:46:c0:ae:e4:41:f8:4a:ac:43: 0e:71:5f:26:60:f7:81:51:39:91:86:b6:3c:9f:0a: 54:85:5e:eb:5e:ce:96:64:2e:2b:99:d7:cc:70:9d: 19:2c:fa:5b:21:a0:67:84:40:87:0c:5e:30:8e:a1: bd:a1:91:b0:75:85:7d:ea:86:6c:04:1e:59:3a:c9: 9c:fb:aa:33:3b:a9:19:d7:d9:f0:bc:c8:52:17:d8: c4:ed:22:97:de:22:d6:10:57:6d:5c:31:68:24:77: 4e:73:e3:ec:18:cf:d3:34:16:47:74:fa:7f:75:60: ac:6d:65:12:ea:50:04:22:1c:17:d7:75:65:57:6c: 7b:bf:55:74:92:26:74:77:12:c2:13:06:61:22:d9: b9:32:2b:e3:84:eb:b3:91:29:07:48:87:60:78:ed: f5:57:91:d0:f6:60:ae:72:78:e8:0a:fd:5a:3c:2d: 75:51:a5:f9:3b:34:e3:e7:d0:58:15:e3:d0:d9:33: a8:37:76:3c:86:e7:07:1a:a0:51:65:0e:e8:0b:91: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DB:C6:C9:0A:25:72:DB:FB:36:37:D6:2D:A2:3D:54:C8:D5:1E:F1 X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6b:ce:9e:6b:4f:59:d1:a1:95:63:55:90:71:39:db:bb:3a: ab:c9:4f:ea:5c:7a:2c:ba:88:4d:f0:08:7f:00:81:38:03:4e: 5e:ae:e9:44:5a:f2:41:5c:46:e2:e1:b9:32:47:ae:f0:34:af: 18:71:36:5f:1d:8b:80:e7:35:b6:ca:33:cd:99:1a:2d:54:be: 4c:92:de:80:74:b1:04:62:b3:cb:8f:b5:0b:89:de:4d:84:31: c2:da:17:d1:30:83:71:03:aa:e6:46:85:b9:87:83:98:83:07: 79:75:c6:eb:27:3c:66:90:9c:b1:c6:51:23:87:06:86:1c:fa: cd:de:e5:4e:e2:5c:98:75:f1:85:43:b4:d5:8d:2b:a7:35:9d: dc:7d:48:cd:4e:34:19:a6:09:8e:0d:bc:c7:30:06:47:51:33: 49:d1:ab:08:d2:d8:32:9b:e2:8b:88:4d:55:4f:b1:b3:48:a6: 26:10:10:2f:ce:e6:77:01:73:1e:df:09:86:7e:d3:33:c5:ea: 44:d3:4b:28:16:bc:f0:f3:e0:7c:4d:5a:16:c4:10:c7:89:7e: e2:d7:54:59:ca:72:5c:66:99:7f:ac:39:99:3a:1a:dc:02:4c: 9b:11:7c:b5:d7:07:64:ee:56:0e:49:3b:93:0d:2f:a3:dc:bf: a5:63:e3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjQwNTE5MDIzMjI3WhcNMjQwNTI2MDIzMjI3WjAYMRYwFAYD VQQDEw02NjQ5NjRiYy0yYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/H2Rz5h4xZ3YX08bQbryxJvsiNC/89jYwpud5JALwxn40CMt0Fq8SRhBxzs IGrDf1NGwK7kQfhKrEMOcV8mYPeBUTmRhrY8nwpUhV7rXs6WZC4rmdfMcJ0ZLPpb IaBnhECHDF4wjqG9oZGwdYV96oZsBB5ZOsmc+6ozO6kZ19nwvMhSF9jE7SKX3iLW EFdtXDFoJHdOc+PsGM/TNBZHdPp/dWCsbWUS6lAEIhwX13VlV2x7v1V0kiZ0dxLC EwZhItm5MivjhOuzkSkHSIdgeO31V5HQ9mCucnjoCv1aPC11UaX5OzTj59BYFePQ 2TOoN3Y8hucHGqBRZQ7oC5F4PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7bxskK JXLb+zY31i2iPVTI1R7xMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAya86ea09Z0aGVY1WQcTnbuzqryU/qXHosuohN8Ah/AIE4A05erulE WvJBXEbi4bkyR67wNK8YcTZfHYuA5zW2yjPNmRotVL5Mkt6AdLEEYrPLj7ULid5N hDHC2hfRMINxA6rmRoW5h4OYgwd5dcbrJzxmkJyxxlEjhwaGHPrN3uVO4lyYdfGF Q7TVjSunNZ3cfUjNTjQZpgmODbzHMAZHUTNJ0asI0tgym+KLiE1VT7GzSKYmEBAv zuZ3AXMe3wmGftMzxepE00soFrzw8+B8TVoWxBDHiX7i11RZynJcZpl/rDmZOhrc AkybEXy11wdk7lYOSTuTDS+j3L+lY+O/ -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org