$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: 9nUaTsIXiAlWJSyfks0MUp07T41D7PWr9fSAr/CdxQs= Subject key identifier: D8:01:F5:3B:54:F5:F9:34:81:13:5F:47:F5:66:EA:38:EE:E3:52:BF Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 0D Signing time: Wed 23 Oct 2024 06:44:54 +0000 Manifest this update: Wed 23 Oct 2024 06:44:54 +0000 Manifest next update: Wed 30 Oct 2024 06:44:54 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: fKCffpytSxyItMLl2vYE5L+yOm9hA4tXYSCXl7DvOSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Oct 23 06:44:54 2024 GMT Not After : Oct 30 06:44:54 2024 GMT Subject: CN=67189b66-9f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:ee:9f:d9:5d:62:0f:ad:b4:8b:2e:0c:2f: da:a3:97:35:f5:51:77:d5:68:e5:eb:3b:53:e6:08: c3:ff:c0:ee:45:f5:a0:47:37:8d:c5:2a:eb:83:2d: 15:93:50:fd:ea:e7:7e:40:2c:90:e3:7e:bd:5a:70: b0:89:4e:d7:72:53:09:09:42:86:e2:10:e9:17:48: e5:d4:5d:5f:56:6e:53:1d:e4:56:e7:72:2a:6b:4c: d8:41:39:b7:05:ce:1b:08:de:b5:78:58:3e:5b:bf: 4e:98:4b:e3:51:4f:b8:b7:9d:ac:50:93:da:5e:87: ac:62:0e:b2:51:0f:17:54:db:9f:b9:ae:90:fb:93: 13:3c:ab:7a:0e:35:a9:5a:72:ec:0c:86:3d:c8:78: 3f:fc:f4:ff:13:1d:88:46:5b:2c:ef:b2:d4:9e:58: c4:07:e4:e1:31:74:1a:ef:91:e9:6f:83:a8:33:e3: c3:29:56:7e:ca:f2:94:42:18:bb:fd:00:d6:ce:98: 6f:6f:2a:3a:fb:66:02:2c:af:9c:bf:90:3d:25:e3: 43:d9:86:d9:81:06:f1:ac:e5:f2:02:90:5c:c3:82: 0a:82:0b:cc:69:98:e0:cf:1d:dd:4e:58:7a:28:fe: 00:eb:e8:b1:8a:2b:b4:6a:f0:36:73:82:cd:64:71: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:F5:3B:54:F5:F9:34:81:13:5F:47:F5:66:EA:38:EE:E3:52:BF X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9e:50:e9:34:89:17:21:3d:65:41:37:7e:cb:d0:d2:1d:34: e0:a7:d6:2e:37:44:20:a1:d5:6a:18:a6:3b:1c:ce:35:87:2a: e0:b0:42:f8:67:4d:71:5d:5a:a2:fc:5b:ff:1e:69:71:85:87: a3:50:7f:bc:24:f5:a4:a5:90:9b:40:66:0e:db:44:34:99:a3: 32:ce:2e:40:92:c7:dd:a2:38:43:3f:9e:a7:61:f2:c8:5a:00: 89:ab:42:0b:b5:b8:f5:eb:8f:be:b9:ad:29:cc:c1:5f:84:ba: 18:b5:7d:64:96:2d:54:d7:99:0a:ff:ba:93:a5:d9:46:05:a3: d9:b8:4e:88:9a:24:08:49:2b:8f:0a:ac:d5:41:22:32:38:12: 1b:08:87:ff:f9:61:60:6a:9a:d0:1f:3b:59:95:bf:01:44:80: 9c:b4:e4:d7:99:99:d7:90:1f:53:06:f0:e8:de:93:b1:d8:a3: 59:5b:f5:8c:39:20:4e:24:6e:41:67:7a:a2:96:3f:af:23:9c: 83:a1:5b:73:f5:28:97:90:1c:ca:ab:a6:2f:76:93:0a:00:cd: 28:b7:3f:f8:ce:50:b7:4c:b3:f4:fe:0a:fa:0c:a5:4f:1e:ad: d9:5c:b4:b4:f3:1f:81:38:24:24:2a:15:2f:ce:a9:a1:9b:cb: 21:02:26:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoREM2QTIzNzRDNTE0RThDRjRBQzc2NEEwRjNDODQ2RjA5 QjMzRDI4MjAeFw0yNDEwMjMwNjQ0NTRaFw0yNDEwMzAwNjQ0NTRaMBgxFjAUBgNV BAMTDTY3MTg5YjY2LTlmNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN1O6f2V1iD620iy4ML9qjlzX1UXfVaOXrO1PmCMP/wO5F9aBHN43FKuuDLRWT UP3q535ALJDjfr1acLCJTtdyUwkJQobiEOkXSOXUXV9WblMd5FbnciprTNhBObcF zhsI3rV4WD5bv06YS+NRT7i3naxQk9peh6xiDrJRDxdU25+5rpD7kxM8q3oONala cuwMhj3IeD/89P8THYhGWyzvstSeWMQH5OExdBrvkelvg6gz48MpVn7K8pRCGLv9 ANbOmG9vKjr7ZgIsr5y/kD0l40PZhtmBBvGs5fICkFzDggqCC8xpmODPHd1OWHoo /gDr6LGKK7Rq8DZzgs1kcZOrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2AH1O1T1 +TSBE19H9WbqOO7jUr8wHwYDVR0jBBgwFoAU3GojdMUU6M9Kx2Sg88hG8Jsz0oIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzY0MjNCRTA2N0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0dvamRNVVU2TTlLeDJTZzg4aEc4SnN6MG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzY0MjNCRTA2N0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05 S3gyU2c4OGhHOEpzejBvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6eUOk0iRchPWVBN37L0NIdNOCn1i43RCCh1WoYpjsczjWHKuCwQvhn TXFdWqL8W/8eaXGFh6NQf7wk9aSlkJtAZg7bRDSZozLOLkCSx92iOEM/nqdh8sha AImrQgu1uPXrj765rSnMwV+Euhi1fWSWLVTXmQr/upOl2UYFo9m4ToiaJAhJK48K rNVBIjI4EhsIh//5YWBqmtAfO1mVvwFEgJy05NeZmdeQH1MG8Ojek7HYo1lb9Yw5 IE4kbkFneqKWP68jnIOhW3P1KJeQHMqrpi92kwoAzSi3P/jOULdMs/T+CvoMpU8e rdlctLTzH4E4JCQqFS/OqaGbyyECJoc= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:56 2024 by rpki-client on console-ams.rpki-client.org