$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: j88yBCsLu9mwudH3NVeLdZySM0QGPprAZIG06ExYBTk= Subject key identifier: 36:2B:EF:0D:66:CD:BB:27:69:E9:02:DF:E2:FA:71:5E:FC:7C:22:5C Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 0409 Signing time: Fri 22 Nov 2024 23:59:23 +0000 Manifest this update: Fri 22 Nov 2024 23:59:22 +0000 Manifest next update: Fri 29 Nov 2024 23:59:21 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: IrAM70Zmjp6Rcs/KaZeytiX+CDFt5SEOiPmnNUCHzpo=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: w4/a6LG1KC7azbRrme1vd3NWtzsp5A1pP9leKGvLzZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: Nov 22 23:59:22 2024 GMT Not After : Nov 29 23:59:21 2024 GMT Subject: CN=67411ada-21d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:b2:f7:46:5b:96:f5:16:ad:f2:52:84:af: 35:0e:7c:f1:e3:75:9a:b7:4a:36:36:c9:fc:bd:6b: 4a:20:0f:16:c5:ac:af:2e:af:d4:d1:fc:85:2b:9b: b8:55:e4:b4:5e:6e:ef:64:9c:95:7c:91:39:19:21: 2c:b2:25:c2:b9:13:eb:f3:b2:29:10:bb:41:54:ab: 1b:d0:bb:01:8b:70:78:ef:15:94:75:ad:ce:d0:88: d7:b3:8a:03:22:2f:0c:57:34:c0:3a:73:24:2c:44: cc:1f:4a:e0:3f:e1:db:b4:f3:2d:a1:48:c4:f5:d3: a5:31:a8:4e:9e:3e:47:dc:8a:c7:5c:86:a8:1c:20: fd:9d:e5:6e:10:b8:f1:dc:32:62:80:46:87:6d:4c: ca:43:69:41:7a:bf:6b:f5:94:23:e2:cf:78:78:8d: 31:d1:f0:ef:1a:51:7e:a1:e7:02:1a:7b:3c:cb:ad: 1b:e1:26:2a:08:bd:6d:4a:fd:05:bf:fd:55:a8:c5: 75:26:2e:1c:23:6e:6a:77:22:c4:31:91:eb:72:75: a1:e4:c2:43:bc:02:e0:0d:29:f7:2d:5f:41:68:78: 40:6a:f5:2a:24:47:56:d0:b0:05:13:7a:ce:85:68: 64:2d:f6:51:58:f1:7b:43:7a:7c:30:f3:3f:cf:60: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2B:EF:0D:66:CD:BB:27:69:E9:02:DF:E2:FA:71:5E:FC:7C:22:5C X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2d:c2:e4:4f:58:e0:11:66:0b:2f:8e:2c:33:0f:d2:f2:c1: 65:e8:83:db:05:71:35:b1:2a:b2:30:b0:79:36:85:51:14:12: ba:26:6a:08:7a:af:2b:d2:0a:62:1b:29:1e:97:37:ff:09:4b: 87:ff:eb:eb:9d:3e:cb:33:c8:6a:68:f4:9f:3c:02:5b:20:84: 4e:cd:cc:81:90:ec:11:64:04:ec:bf:b9:80:f7:00:59:10:d1: e5:46:6a:2a:ed:2f:e8:9c:be:16:b4:ee:0f:02:4c:51:fe:36: b4:11:77:60:0f:85:5f:4a:3d:93:d9:ee:a9:4d:3b:56:8b:0d: f3:fb:86:f9:8a:a0:a8:43:b5:3c:30:16:ee:c7:d6:f6:d0:14: 5a:12:22:2e:eb:17:1f:1b:72:d6:11:b4:33:23:77:2e:3e:2e: e3:cc:6a:52:d3:89:08:d5:74:3a:57:2b:2e:5b:ed:e5:e6:aa: 1a:57:2f:0b:92:8b:18:56:22:47:cd:92:d5:42:96:ac:68:55: b8:5d:8f:a1:75:68:eb:d1:02:78:7a:93:57:91:c7:5c:0b:5a: 1d:88:6e:b7:ac:cf:0c:d1:49:f7:39:9d:5e:b3:f0:0d:40:7d: dd:1a:c8:55:15:9a:1e:10:eb:f1:82:ed:59:ce:9f:dd:4c:5a: 54:f7:cc:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjQxMTIyMjM1OTIyWhcNMjQxMTI5MjM1OTIxWjAYMRYwFAYD VQQDEw02NzQxMWFkYS0yMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qiy90ZblvUWrfJShK81Dnzx43Wat0o2Nsn8vWtKIA8WxayvLq/U0fyFK5u4 VeS0Xm7vZJyVfJE5GSEssiXCuRPr87IpELtBVKsb0LsBi3B47xWUda3O0IjXs4oD Ii8MVzTAOnMkLETMH0rgP+HbtPMtoUjE9dOlMahOnj5H3IrHXIaoHCD9neVuELjx 3DJigEaHbUzKQ2lBer9r9ZQj4s94eI0x0fDvGlF+oecCGns8y60b4SYqCL1tSv0F v/1VqMV1Ji4cI25qdyLEMZHrcnWh5MJDvALgDSn3LV9BaHhAavUqJEdW0LAFE3rO hWhkLfZRWPF7Q3p8MPM/z2CJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYr7w1m zbsnaekC3+L6cV78fCJcMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1LcLkT1jgEWYLL44sMw/S8sFl6IPbBXE1sSqyMLB5NoVRFBK6JmoI eq8r0gpiGykelzf/CUuH/+vrnT7LM8hqaPSfPAJbIIROzcyBkOwRZATsv7mA9wBZ ENHlRmoq7S/onL4WtO4PAkxR/ja0EXdgD4VfSj2T2e6pTTtWiw3z+4b5iqCoQ7U8 MBbux9b20BRaEiIu6xcfG3LWEbQzI3cuPi7jzGpS04kI1XQ6VysuW+3l5qoaVy8L kosYViJHzZLVQpasaFW4XY+hdWjr0QJ4epNXkcdcC1odiG63rM8M0Un3OZ1es/AN QH3dGshVFZoeEOvxgu1Zzp/dTFpU98yT -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org