$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: 4JbPbOM0EaY0JTub/X97DvbMO5RS93G4cjlDHyL7qe0= Subject key identifier: 19:CC:AC:88:D6:C1:62:09:49:AC:92:26:19:0A:9A:D1:3F:47:32:07 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 04CF Signing time: Sun 19 May 2024 01:22:44 +0000 Manifest this update: Sun 19 May 2024 01:22:43 +0000 Manifest next update: Sun 26 May 2024 01:22:43 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: 32DePzyNGxkUHDdTsgYeMloMcUC6ln972eKJeR1r3BU=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: xL2eKYZ3O5laJu39JEaImdBnLTDPOEEdXQr86L3tJS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: May 19 01:22:43 2024 GMT Not After : May 26 01:22:43 2024 GMT Subject: CN=66495463-0375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:11:21:62:a2:18:03:97:51:66:d1:9d:2b: 9d:ef:a3:45:b8:ee:69:87:3a:45:9b:6c:e8:a6:d0: c5:bd:ad:4d:57:7c:6c:cb:fe:30:0a:ea:54:ca:3e: 55:46:39:e5:4b:2b:6b:8f:a5:9a:40:be:82:bc:89: 3d:3c:12:a0:4c:c5:9f:a3:d2:fd:95:49:92:c2:76: 3a:26:87:dc:49:14:7f:97:80:62:00:4d:a4:30:45: 15:13:d6:19:8c:5e:11:8d:b4:96:1a:db:53:dc:fd: 7f:8b:7c:24:58:02:1c:98:c2:69:40:1a:b1:ac:2a: 45:b9:5c:e1:00:ea:ef:72:12:fc:bc:d3:d5:f0:9c: e4:33:49:11:ca:20:16:d6:c5:5e:7f:7e:b2:fa:19: e1:5b:53:bf:ef:40:08:08:dc:7e:42:28:a3:b1:1e: f6:e5:95:ae:50:8b:9f:46:53:55:68:cc:18:f0:da: 9d:f6:a7:40:51:fa:c3:fc:f4:78:a0:ee:24:d9:8c: f4:41:03:5f:7e:6f:f3:a9:f3:d2:e3:6e:63:a5:d0: a8:b6:ff:b9:91:d3:00:23:40:fc:e3:57:8d:b1:b4: 2b:4b:a2:48:e1:56:f8:fe:3f:28:ec:8e:48:51:dc: 82:66:47:74:47:d5:25:11:34:13:8a:65:22:b6:bd: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CC:AC:88:D6:C1:62:09:49:AC:92:26:19:0A:9A:D1:3F:47:32:07 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:76:ee:3f:05:a3:39:36:a2:62:79:71:a5:0e:3e:ab:c0:5b: 74:f7:07:cc:1b:25:d0:00:be:ea:59:10:ac:14:4d:33:c3:00: 0f:1e:80:cd:79:49:9c:89:e0:9d:a7:24:bb:6b:e9:0f:c5:cb: 51:2c:c8:87:0d:f7:6b:9b:cf:d8:fc:cd:d3:3d:6d:26:90:73: 58:ed:27:01:0f:17:59:39:bc:6c:07:be:2d:f5:4c:45:db:c1: 2d:57:6c:23:01:1e:7e:10:bc:45:b9:c8:b9:f2:48:27:c6:cf: 51:97:f8:61:85:e7:12:6e:c9:68:ee:ec:ea:a0:a3:cf:ba:b8: 3b:3f:c3:15:d4:b9:f8:9a:da:4d:53:fc:33:01:cd:80:44:3b: 5e:1d:e0:2e:7d:1a:ae:ed:43:0e:64:ec:c6:23:08:0a:c5:f0: 5c:6c:f9:a0:12:9c:fa:83:b5:55:25:e0:36:f1:2e:6d:90:8d: 92:ef:58:0f:0e:92:32:47:65:df:30:bc:84:13:59:7f:5a:4b: 78:44:ba:a0:d0:22:ae:e9:9c:0e:eb:ea:a8:97:ec:71:89:73: d0:ce:c2:80:6e:85:76:40:34:9c:42:04:ef:37:67:0e:f8:83: b3:92:c9:47:fc:38:e9:3b:e2:b5:37:ed:80:99:b4:bb:b8:89: 3a:2d:58:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjQwNTE5MDEyMjQzWhcNMjQwNTI2MDEyMjQzWjAYMRYwFAYD VQQDEw02NjQ5NTQ2My0wMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtScRIWKiGAOXUWbRnSud76NFuO5phzpFm2zoptDFva1NV3xsy/4wCupUyj5V RjnlSytrj6WaQL6CvIk9PBKgTMWfo9L9lUmSwnY6JofcSRR/l4BiAE2kMEUVE9YZ jF4RjbSWGttT3P1/i3wkWAIcmMJpQBqxrCpFuVzhAOrvchL8vNPV8JzkM0kRyiAW 1sVef36y+hnhW1O/70AICNx+QiijsR725ZWuUIufRlNVaMwY8Nqd9qdAUfrD/PR4 oO4k2Yz0QQNffm/zqfPS425jpdCotv+5kdMAI0D841eNsbQrS6JI4Vb4/j8o7I5I UdyCZkd0R9UlETQTimUitr3xBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnMrIjW wWIJSaySJhkKmtE/RzIHMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4du4/BaM5NqJieXGlDj6rwFt09wfMGyXQAL7qWRCsFE0zwwAPHoDN eUmcieCdpyS7a+kPxctRLMiHDfdrm8/Y/M3TPW0mkHNY7ScBDxdZObxsB74t9UxF 28EtV2wjAR5+ELxFuci58kgnxs9Rl/hhhecSbslo7uzqoKPPurg7P8MV1Ln4mtpN U/wzAc2ARDteHeAufRqu7UMOZOzGIwgKxfBcbPmgEpz6g7VVJeA28S5tkI2S71gP DpIyR2XfMLyEE1l/Wkt4RLqg0CKu6ZwO6+qol+xxiXPQzsKAboV2QDScQgTvN2cO +IOzkslH/DjpO+K1N+2AmbS7uIk6LVhF -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org