$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: LIFicb4GtiLfSdyTWhj5mhCOIOyFCn2yo8obHeFGK5E= Subject key identifier: BA:3E:CE:98:F7:5C:85:EB:11:D6:36:11:8F:59:F1:72:C5:BD:F7:74 Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 03A2 Signing time: Fri 03 May 2024 02:39:41 +0000 Manifest this update: Fri 03 May 2024 02:39:40 +0000 Manifest next update: Fri 10 May 2024 02:39:40 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: Bob46Zid/KXGyPmWGKQ/xyDmtc/6f/jdsj9V4Ffa0zs=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: w4/a6LG1KC7azbRrme1vd3NWtzsp5A1pP9leKGvLzZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: May 3 02:39:40 2024 GMT Not After : May 10 02:39:40 2024 GMT Subject: CN=66344e6d-5b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:22:0b:8e:08:bb:e0:75:7e:ea:be:94:6b: 55:2b:6e:56:4b:b9:ec:0b:0e:70:a1:bf:ec:74:8e: de:d1:28:c0:42:70:67:2c:4c:d6:cd:73:94:2b:33: 0a:25:ae:eb:e0:a0:2e:ac:71:d2:7d:4f:4c:64:29: b6:0d:98:dd:a9:1c:9f:4b:ff:34:fc:0b:49:79:20: b9:18:6a:c8:06:53:a2:f0:72:ad:68:4b:81:a6:65: c0:94:8c:27:ca:6e:32:7a:16:78:17:3a:99:18:5f: 1c:d9:67:e4:52:65:e2:fb:2a:2b:fc:df:e1:76:52: 3e:da:0d:28:92:d4:a3:b2:1a:10:90:71:27:0b:e7: 67:e3:ec:ea:5c:c8:2d:a3:20:8c:f1:79:6f:d3:3a: 2d:2e:ca:63:a6:45:72:1c:c5:62:9f:75:d1:1e:df: ad:09:59:9c:4d:bc:61:e3:af:94:de:8c:5e:9a:9a: 91:aa:56:dd:d0:1d:83:06:2a:11:14:ef:f4:f3:18: a2:81:69:b6:3c:94:41:61:2d:6d:af:43:ac:76:25: d8:8c:63:6d:62:c8:8a:f9:1b:18:37:28:cd:71:07: 2c:0f:4c:3d:ea:7c:66:b8:ad:29:3b:48:76:4a:80: 36:85:f4:1c:ed:45:64:73:2b:af:60:87:68:8a:82: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:CE:98:F7:5C:85:EB:11:D6:36:11:8F:59:F1:72:C5:BD:F7:74 X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:98:33:15:f2:ab:98:36:2c:22:81:ba:7e:97:96:5c:31:d9: 9d:fe:8b:ab:04:0c:b0:17:07:7a:3f:f1:5b:72:10:95:32:28: 4a:45:b7:45:fe:aa:b7:93:bd:8b:05:56:79:1a:30:25:93:4a: e1:a6:9b:68:00:49:26:51:9a:5a:65:ec:b6:ef:e0:dc:a9:17: 80:a2:7f:60:a9:d3:a2:64:cd:1c:9e:a5:cd:29:fe:20:6f:e6: 0f:16:d4:10:4b:57:56:bd:5d:d9:9a:10:dc:c2:ec:c7:a3:22: d7:0d:af:0a:52:a2:b4:fd:e2:fa:50:33:4d:84:63:34:a6:b6: 76:58:f5:0a:bd:a4:29:cb:2d:aa:12:0f:72:fc:51:df:e1:9a: 77:eb:a1:42:9d:46:d6:86:4a:3f:b7:10:bc:44:6c:a3:14:9e: 1f:7a:7f:42:93:4f:92:bf:88:b0:82:94:1d:47:86:f1:72:97: 47:cb:2d:34:b1:ed:d1:e3:bd:dd:b8:08:2f:32:8a:50:f2:23: 47:4b:22:a0:68:95:9e:02:49:dc:67:22:45:31:de:ea:09:54: 58:4b:13:09:4f:1f:05:68:89:ee:48:a5:ec:16:13:6d:5c:1c: 28:b5:04:da:68:08:d2:6b:9a:6c:0c:15:b5:d8:30:09:93:05: e0:ea:b9:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjQwNTAzMDIzOTQwWhcNMjQwNTEwMDIzOTQwWjAYMRYwFAYD VQQDEw02NjM0NGU2ZC01YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzE0iC44Iu+B1fuq+lGtVK25WS7nsCw5wob/sdI7e0SjAQnBnLEzWzXOUKzMK Ja7r4KAurHHSfU9MZCm2DZjdqRyfS/80/AtJeSC5GGrIBlOi8HKtaEuBpmXAlIwn ym4yehZ4FzqZGF8c2WfkUmXi+yor/N/hdlI+2g0oktSjshoQkHEnC+dn4+zqXMgt oyCM8Xlv0zotLspjpkVyHMVin3XRHt+tCVmcTbxh46+U3oxempqRqlbd0B2DBioR FO/08xiigWm2PJRBYS1tr0OsdiXYjGNtYsiK+RsYNyjNcQcsD0w96nxmuK0pO0h2 SoA2hfQc7UVkcyuvYIdoioJ5RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo+zpj3 XIXrEdY2EY9Z8XLFvfd0MB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKmDMV8quYNiwigbp+l5ZcMdmd/ourBAywFwd6P/FbchCVMihKRbdF /qq3k72LBVZ5GjAlk0rhpptoAEkmUZpaZey27+DcqReAon9gqdOiZM0cnqXNKf4g b+YPFtQQS1dWvV3ZmhDcwuzHoyLXDa8KUqK0/eL6UDNNhGM0prZ2WPUKvaQpyy2q Eg9y/FHf4Zp366FCnUbWhko/txC8RGyjFJ4fen9Ck0+Sv4iwgpQdR4bxcpdHyy00 se3R473duAgvMopQ8iNHSyKgaJWeAkncZyJFMd7qCVRYSxMJTx8FaInuSKXsFhNt XBwotQTaaAjSa5psDBW12DAJkwXg6rmB -----END CERTIFICATE-----Generated at Fri May 3 04:36:48 2024 by rpki-client on console-ams.rpki-client.org