$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: RZzzOSx4I/TDTkMvk7tandCiHe239rUUyw5qPspcUvQ= Subject key identifier: 33:F7:C5:53:25:C4:C8:78:C6:65:D0:3F:D9:75:55:54:8F:99:25:68 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: 13 Signing time: Fri 27 Dec 2024 06:08:35 +0000 Manifest this update: Fri 27 Dec 2024 06:08:34 +0000 Manifest next update: Fri 03 Jan 2025 06:08:34 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: P7EVMnsK5/zZ+w9MCawpI03y9EZEGAtPZwJUeoP9pco=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: ykJZ1vokWQVQModznO57DFIfns9B6rl6axv/cLKTInk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Dec 27 06:08:34 2024 GMT Not After : Jan 3 06:08:34 2025 GMT Subject: CN=676e4463-bcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:32:a7:f6:ab:46:a9:e3:bc:46:cd:1e:99: 17:d0:11:e5:d2:80:1c:27:5b:56:e0:b6:6d:d8:b5: eb:83:e8:b2:1b:59:5a:fa:32:55:38:76:7d:d7:b6: e7:d3:b5:35:f7:ba:bb:29:4b:e3:d1:ab:aa:96:8b: 59:ba:8a:37:17:d5:71:43:f7:da:96:18:c0:7e:1a: 3d:d8:35:03:99:78:11:33:0a:26:5f:d2:41:c0:9d: a2:4a:e6:9f:fa:77:f8:5d:0f:85:d0:7e:8c:e8:a9: f7:e3:e2:87:16:28:3c:ee:a0:52:dc:aa:d3:2a:26: de:33:67:0e:69:75:ac:78:d2:5a:2d:c1:e6:d1:54: d5:d2:a6:c4:4a:d6:97:b2:1e:9c:02:8a:63:15:58: 99:ae:66:f6:b9:bf:8d:a9:41:dd:c9:3e:48:47:12: ad:55:9e:f3:7b:76:7d:08:d7:64:4f:a3:27:b9:0f: b9:d0:c0:90:8c:bc:45:b2:5d:c8:80:dc:89:0a:89: 8d:a0:6f:0f:ce:5d:a5:12:2c:9c:94:12:07:6c:71: a4:c7:15:d4:dd:0b:9d:f0:5e:15:e0:8d:58:22:7a: a4:8d:cf:76:c4:ef:d9:98:95:f8:f0:ca:24:a2:05: 25:8f:3c:08:97:69:13:be:da:7f:f4:a6:0b:f4:b6: 93:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:C5:53:25:C4:C8:78:C6:65:D0:3F:D9:75:55:54:8F:99:25:68 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:7c:64:58:00:b8:b5:8f:1c:a0:d0:38:29:35:60:89:44:c3: f0:b0:d8:f0:2f:4f:58:d8:3f:33:5f:1c:ec:54:44:9d:f4:d6: 36:69:4f:73:3d:be:b6:2b:b3:ae:5a:94:ac:8e:72:75:23:b6: d5:21:24:33:41:cf:41:51:d0:fb:70:f4:a7:e4:85:50:03:42: c0:e4:5d:54:81:0d:4b:7e:91:7c:c7:c4:69:4f:f4:65:79:9f: c0:f9:13:59:56:20:4f:fc:28:f7:cd:1e:79:0a:b6:41:ce:f2: 23:c4:53:18:76:b5:90:9f:cf:9d:fa:22:6d:89:77:47:dd:70: 47:45:d6:a2:1b:d4:0e:10:09:4a:e3:5d:2f:29:69:38:14:39: a2:f1:80:12:e4:fb:15:28:13:47:dd:5b:4f:30:f1:76:c1:cb: c4:34:ea:95:01:d0:fb:fd:a9:08:60:33:2d:43:85:3f:c2:c4: a8:05:5e:90:6a:e6:6b:dd:f1:c7:e4:b2:bf:cd:eb:f6:51:60: 89:5d:c9:bc:a6:c8:3a:5f:0b:ea:81:41:b2:8a:fb:cf:47:4f: 5b:a1:2f:da:5e:3f:e6:85:73:72:40:6f:7e:76:2b:59:ea:11: 15:85:2a:1f:cc:99:c0:62:8e:61:76:85:41:7f:63:60:fb:04: 31:3d:7d:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUIzNzExMC8GA1UEBRMoOEE4MEZFOEEwRDIzQkMzMEM2NjRBNzdBQTA4RUQ5MEUx OUI1OTFEQzAeFw0yNDEyMjcwNjA4MzRaFw0yNTAxMDMwNjA4MzRaMBgxFjAUBgNV BAMTDTY3NmU0NDYzLWJjZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7njKn9qtGqeO8Rs0emRfQEeXSgBwnW1bgtm3YteuD6LIbWVr6MlU4dn3XtufT tTX3urspS+PRq6qWi1m6ijcX1XFD99qWGMB+Gj3YNQOZeBEzCiZf0kHAnaJK5p/6 d/hdD4XQfozoqffj4ocWKDzuoFLcqtMqJt4zZw5pdax40lotwebRVNXSpsRK1pey HpwCimMVWJmuZva5v42pQd3JPkhHEq1VnvN7dn0I12RPoye5D7nQwJCMvEWyXciA 3IkKiY2gbw/OXaUSLJyUEgdscaTHFdTdC53wXhXgjVgieqSNz3bE79mYlfjwyiSi BSWPPAiXaRO+2n/0pgv0tpP7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM/fFUyXE yHjGZdA/2XVVVI+ZJWgwHwYDVR0jBBgwFoAUioD+ig0jvDDGZKd6oI7ZDhm1kdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQjM3LzUzMkEyRTBBQUJC QzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaW9ELWlnMGp2RERHWktkNm9JN1pEaG0xa2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QjM3LzUzMkEyRTBBQUJCQzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRE R1pLZDZvSTdaRGhtMWtkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKh8ZFgAuLWPHKDQOCk1YIlEw/Cw2PAvT1jYPzNfHOxURJ301jZpT3M9 vrYrs65alKyOcnUjttUhJDNBz0FR0Ptw9KfkhVADQsDkXVSBDUt+kXzHxGlP9GV5 n8D5E1lWIE/8KPfNHnkKtkHO8iPEUxh2tZCfz536Im2Jd0fdcEdF1qIb1A4QCUrj XS8paTgUOaLxgBLk+xUoE0fdW08w8XbBy8Q06pUB0Pv9qQhgMy1DhT/CxKgFXpBq 5mvd8cfksr/N6/ZRYIldybymyDpfC+qBQbKK+89HT1uhL9peP+aFc3JAb352K1nq ERWFKh/MmcBijmF2hUF/Y2D7BDE9fYY= -----END CERTIFICATE-----Generated at Fri Dec 27 07:43:23 2024 by rpki-client on console-ams.rpki-client.org