$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json) Hash identifier: nZYWD+tg9y0Z+dbAKWR7uwsH+krqn/dBO274EQXUxdA= Subject key identifier: AC:08:9D:9E:5D:36:A0:01:52:B3:89:41:B7:A3:2E:14:A2:B5:41:9E Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft Manifest number: 14 Signing time: Sat 23 Nov 2024 05:57:48 +0000 Manifest this update: Sat 23 Nov 2024 05:57:47 +0000 Manifest next update: Sat 30 Nov 2024 05:57:47 +0000 Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: xi57TVuN6tv3vG/4praesAGITnD5JsBT7gVOGfzfh1g=) 2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 6wPxK2kdtgMpw3LNHlmnVo9Jz/VjEWx8dJSDP8encJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Validity Not Before: Nov 23 05:57:47 2024 GMT Not After : Nov 30 05:57:47 2024 GMT Subject: CN=67416edc-c2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:27:12:35:e9:a2:8e:4a:c9:88:11:37:b6: 17:fd:74:ab:b8:0b:6d:73:a2:e9:93:85:dc:2d:58: 74:8a:f6:e5:1d:3a:37:de:9c:69:fe:88:ff:20:ca: 44:6c:c4:32:03:ae:0c:b4:80:b3:70:fb:04:09:ba: 83:31:c0:cf:ea:4a:13:06:57:fd:f3:f0:8b:6c:a1: 75:30:c7:d4:55:7f:bd:a4:e5:64:e5:1a:d8:01:7d: d6:6f:c1:93:87:e7:65:51:5d:63:c3:a5:6f:0d:fa: 0e:c2:ea:ac:94:70:46:fe:91:39:1b:9c:0f:97:92: f8:a7:75:76:13:70:f5:3a:70:dd:05:af:34:86:73: db:67:4a:33:22:3e:9f:1a:96:d9:87:be:89:d4:52: 71:c5:44:a6:a0:fe:52:b3:20:99:f8:17:fc:2c:4f: 5b:a1:8b:81:8f:07:63:a7:dd:8e:6e:cd:f7:4b:29: 0e:90:22:96:5b:69:ce:6e:e2:7c:06:93:5f:e8:ee: a7:1a:7b:79:f1:e8:3e:03:95:30:e3:54:fb:be:51: fe:ed:76:30:4c:e0:d4:02:63:f0:24:a9:4a:f5:03: a8:31:de:1f:c2:97:70:f9:2a:39:e3:38:ee:bf:02: df:df:a8:41:9e:0e:f0:3c:b2:49:d7:26:66:bb:aa: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:9D:9E:5D:36:A0:01:52:B3:89:41:B7:A3:2E:14:A2:B5:41:9E X509v3 Authority Key Identifier: keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:dd:d0:62:a1:84:da:53:43:3d:b6:5e:0c:fd:df:de:36:2c: 86:aa:49:c5:e6:27:47:b8:da:ea:a7:b4:f4:d8:ae:68:8f:fa: 80:31:b7:0b:59:82:e4:d0:fb:86:b0:88:7c:e5:14:d0:ce:3d: 69:65:a0:66:ec:3e:45:99:65:3d:05:40:1c:85:fe:d8:1c:93: 3f:9c:5c:06:90:ae:98:c0:0a:6b:69:2e:65:55:bc:75:90:75: d5:d1:b5:13:a8:84:11:aa:84:96:51:fc:20:13:33:4b:56:b3: 68:55:c6:72:b7:c4:ad:26:3a:0c:eb:23:0c:72:52:e0:40:91: 6b:48:cf:95:0f:d0:89:bd:75:83:c6:5f:01:8c:5e:8a:68:34: 75:48:94:f3:d6:92:e0:7f:98:cd:38:80:4c:d5:42:2c:ce:49: 23:9c:e2:ba:be:0a:b1:d2:99:a6:15:c1:b1:5a:e2:86:bd:5f: 2d:41:9e:35:b2:d7:c7:81:90:07:a3:67:77:d8:35:aa:92:52: 46:62:9f:0c:72:82:74:47:df:c6:d9:4c:a1:25:f0:47:26:8d: 5b:59:11:7a:b3:c1:da:50:3e:7d:36:8a:6e:19:d8:3f:fd:0a: 8e:f2:70:81:d5:f4:96:a7:e6:9f:90:a4:b7:56:08:3b:cf:c2: ff:02:d7:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzcyNDExMC8GA1UEBRMoMTk2ODI4QTgyMUY0MTZBQkE5Q0VDQzMxQUE3MUEzMDNG NDIxNDc3ODAeFw0yNDExMjMwNTU3NDdaFw0yNDExMzAwNTU3NDdaMBgxFjAUBgNV BAMTDTY3NDE2ZWRjLWMyZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkoicSNemijkrJiBE3thf9dKu4C21zoumThdwtWHSK9uUdOjfenGn+iP8gykRs xDIDrgy0gLNw+wQJuoMxwM/qShMGV/3z8ItsoXUwx9RVf72k5WTlGtgBfdZvwZOH 52VRXWPDpW8N+g7C6qyUcEb+kTkbnA+XkvindXYTcPU6cN0FrzSGc9tnSjMiPp8a ltmHvonUUnHFRKag/lKzIJn4F/wsT1uhi4GPB2On3Y5uzfdLKQ6QIpZbac5u4nwG k1/o7qcae3nx6D4DlTDjVPu+Uf7tdjBM4NQCY/AkqUr1A6gx3h/Cl3D5KjnjOO6/ At/fqEGeDvA8sknXJma7qnE9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrAidnl02 oAFSs4lBt6MuFKK1QZ4wHwYDVR0jBBgwFoAUGWgoqCH0FqupzswxqnGjA/QhR3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NzI0LzVGOUM2QjkyOTA0 RDExRUZBMTEwMzg2NEM0RjlBRTAyL0dXZ29xQ0gwRnF1cHpzd3hxbkdqQV9RaFIz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1dnb3FDSDBGcXVwenN3eHFuR2pBX1FoUjNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NzI0LzVGOUM2QjkyOTA0RDExRUZBMTEwMzg2NEM0RjlBRTAyL0dXZ29xQ0gwRnF1 cHpzd3hxbkdqQV9RaFIzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPd0GKhhNpTQz22Xgz93942LIaqScXmJ0e42uqntPTYrmiP+oAxtwtZ guTQ+4awiHzlFNDOPWlloGbsPkWZZT0FQByF/tgckz+cXAaQrpjACmtpLmVVvHWQ ddXRtROohBGqhJZR/CATM0tWs2hVxnK3xK0mOgzrIwxyUuBAkWtIz5UP0Im9dYPG XwGMXopoNHVIlPPWkuB/mM04gEzVQizOSSOc4rq+CrHSmaYVwbFa4oa9Xy1BnjWy 18eBkAejZ3fYNaqSUkZinwxygnRH38bZTKEl8EcmjVtZEXqzwdpQPn02im4Z2D/9 Co7ycIHV9Jan5p+QpLdWCDvPwv8C1/E= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org