$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft File: muAi3ZD6yvK8XHN26KhM5QUeiWo.mft (raw, json) Hash identifier: hHhtv4EIzsxBxkneJz1i5sV533YwxZ8hL1xzdvm1oD0= Subject key identifier: B7:92:D6:8A:1F:AC:67:9B:68:AF:E4:37:B9:9A:24:2E:DD:EA:FC:B1 Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft Manifest number: 0680 Signing time: Fri 22 Nov 2024 21:50:47 +0000 Manifest this update: Fri 22 Nov 2024 21:50:47 +0000 Manifest next update: Fri 29 Nov 2024 21:50:46 +0000 Files and hashes: 1: muAi3ZD6yvK8XHN26KhM5QUeiWo.crl (hash: 2XL3GEdixGTXXtwkLJ4nYxXcg714kIGI/AmEqmfHDOU=) 2: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (hash: 1V76BNFXFgS71VyAOD6L3jOI19ixiwlX9hTVN7MA9kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Validity Not Before: Nov 22 21:50:47 2024 GMT Not After : Nov 29 21:50:46 2024 GMT Subject: CN=6740fcb7-0e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:23:62:af:bc:0d:61:6f:35:d5:21:f9:24: 4f:1e:a4:96:f8:ef:a2:8f:ef:d3:24:e7:1c:8a:eb: dc:f7:79:1e:d4:18:c5:1d:84:cd:b5:60:24:fe:ab: 59:48:a8:bc:67:d2:36:7c:0b:d4:93:4a:34:6f:28: 9c:ca:f9:fc:12:8d:86:c5:0a:64:f1:4a:3a:43:ff: 60:ca:a6:18:e0:b9:e9:df:92:32:8f:da:cc:1c:11: 60:de:a9:a0:30:7d:69:62:8e:58:4b:0e:94:40:9b: e5:03:3b:a4:9f:c4:2d:56:7b:30:e7:56:04:31:48: 4f:e5:5a:e0:d7:b2:0b:ba:f2:72:87:5d:18:2f:e2: 0d:47:fc:51:03:83:5a:76:82:0e:54:d5:42:9a:88: 1d:16:66:1b:a5:85:39:bf:5f:5c:7e:ae:03:af:87: ea:30:68:47:af:62:b8:e6:e8:bb:41:17:8f:84:4a: 9f:e4:bb:2f:60:16:a7:01:51:d5:e2:11:bc:94:30: 88:f4:14:70:a0:a3:06:5d:5b:f8:c4:78:d8:24:e2: ae:22:ee:4c:aa:81:ab:77:32:ba:67:fc:fb:69:85: 9d:32:fa:f8:b1:52:b1:07:4e:89:7d:e8:6c:f6:78: 01:20:ac:a2:68:dd:ff:59:d7:09:81:a9:c0:1a:e3: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:D6:8A:1F:AC:67:9B:68:AF:E4:37:B9:9A:24:2E:DD:EA:FC:B1 X509v3 Authority Key Identifier: keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c8:f1:e7:02:48:50:67:b3:f1:b8:cf:d7:18:51:a9:5d:53: d3:d1:bf:29:cd:59:b3:2e:ee:44:b0:3c:4b:e7:8b:f1:ff:57: 7f:9c:2b:a7:a3:9f:2f:30:84:f4:be:58:18:fb:b2:ed:6c:48: 00:c2:27:2e:50:ea:2c:3e:04:6d:c2:97:56:81:dc:8e:12:d5: 1b:5b:82:f2:d1:d0:41:12:3d:6c:77:db:22:89:c5:d2:c0:81: 78:8a:06:14:6c:16:34:ef:24:e6:58:66:b7:16:bd:c8:26:bc: ed:d9:b1:8a:cd:d1:f5:ab:8a:51:a0:00:8b:5c:04:62:f0:88: 54:90:d8:51:77:d3:2a:95:87:f1:22:45:f4:3a:25:eb:aa:50: a7:5d:23:31:d1:3c:53:ee:fa:69:93:54:87:9c:fc:fa:6a:5b: b1:f9:2a:f2:f8:da:23:04:be:5f:52:f7:80:8d:34:e2:ff:87: d3:62:a0:71:c6:f3:c8:d5:10:90:09:64:47:c8:3c:f2:f7:44: 5d:42:11:34:84:e7:fb:5e:d0:f4:96:8f:e5:40:56:5e:07:80: 47:f7:9e:09:12:16:05:03:01:70:13:ed:6a:2c:00:ec:b4:88: d8:1c:23:cd:cd:29:2c:81:2b:4b:66:cd:ce:4f:18:39:16:8c: fb:70:b2:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI3MUMxMTAvBgNVBAUTKDlBRTAyMkREOTBGQUNBRjJCQzVDNzM3NkU4QTg0Q0U1 MDUxRTg5NkEwHhcNMjQxMTIyMjE1MDQ3WhcNMjQxMTI5MjE1MDQ2WjAYMRYwFAYD VQQDEw02NzQwZmNiNy0wZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZEjYq+8DWFvNdUh+SRPHqSW+O+ij+/TJOcciuvc93ke1BjFHYTNtWAk/qtZ SKi8Z9I2fAvUk0o0byicyvn8Eo2GxQpk8Uo6Q/9gyqYY4Lnp35Iyj9rMHBFg3qmg MH1pYo5YSw6UQJvlAzukn8QtVnsw51YEMUhP5Vrg17ILuvJyh10YL+INR/xRA4Na doIOVNVCmogdFmYbpYU5v19cfq4Dr4fqMGhHr2K45ui7QRePhEqf5LsvYBanAVHV 4hG8lDCI9BRwoKMGXVv4xHjYJOKuIu5MqoGrdzK6Z/z7aYWdMvr4sVKxB06Jfehs 9ngBIKyiaN3/WdcJganAGuNlLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeS1oof rGebaK/kN7maJC7d6vyxMB8GA1UdIwQYMBaAFJrgIt2Q+sryvFxzduioTOUFHolq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjcxQy9FREYxM0M2MDUw M0MxMUVCQTJERjMyNUZDNEY5QUUwMi9tdUFpM1pENnl2SzhYSE4yNktoTTVRVWVp V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL211QWkzWkQ2eXZLOFhITjI2S2hNNVFVZWlXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjcxQy9FREYxM0M2MDUwM0MxMUVCQTJERjMyNUZDNEY5QUUwMi9tdUFpM1pENnl2 SzhYSE4yNktoTTVRVWVpV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASyPHnAkhQZ7PxuM/XGFGpXVPT0b8pzVmzLu5EsDxL54vx/1d/nCun o58vMIT0vlgY+7LtbEgAwicuUOosPgRtwpdWgdyOEtUbW4Ly0dBBEj1sd9siicXS wIF4igYUbBY07yTmWGa3Fr3IJrzt2bGKzdH1q4pRoACLXARi8IhUkNhRd9MqlYfx IkX0OiXrqlCnXSMx0TxT7vppk1SHnPz6alux+Sry+NojBL5fUveAjTTi/4fTYqBx xvPI1RCQCWRHyDzy90RdQhE0hOf7XtD0lo/lQFZeB4BH954JEhYFAwFwE+1qLADs tIjYHCPNzSksgStLZs3OTxg5Foz7cLL+ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org