$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: +16iJyrmx7YVZICjUx/Qk4eMtP1sG5O1MDaNdutSfdE= Subject key identifier: BA:ED:FD:9B:84:00:DC:13:63:17:D5:83:A3:62:01:6F:EC:5E:9F:6C Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 0619 Signing time: Fri 22 Nov 2024 22:08:49 +0000 Manifest this update: Fri 22 Nov 2024 22:08:49 +0000 Manifest next update: Fri 29 Nov 2024 22:08:49 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: ANqih8rYgBZOEotm+nwdZODlrxbA999fHNdcwmVpqKk=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: Fxa9+QyJcCnbRp44gG+Q6H8L6JtGzDRxKl0JIsoaiOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Nov 22 22:08:49 2024 GMT Not After : Nov 29 22:08:49 2024 GMT Subject: CN=674100f1-11f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:85:29:84:79:20:0c:b2:20:ab:f3:99:3e: 21:ae:b4:9a:f9:20:40:e8:0e:fc:92:14:18:7f:7d: aa:31:95:3e:be:2c:4a:fa:d0:d9:65:09:76:f8:3e: 05:e5:9f:5c:14:38:fd:1f:69:b3:b8:13:8a:36:55: 2b:3f:aa:11:66:4a:c1:1e:1f:8a:72:16:02:50:97: 19:63:00:65:8d:92:a0:91:5c:06:6b:78:8e:62:7d: 1c:b6:c0:10:01:a0:29:8a:ad:d8:a7:db:de:b8:67: 2f:76:9f:44:83:23:6e:e9:c7:85:2d:ba:e9:78:e3: b5:5e:1a:f5:bb:ce:8b:60:0b:3f:6d:d3:1a:a3:ae: 72:16:a6:d6:a7:71:70:9a:8a:ea:a1:ce:0d:cc:02: 52:32:4a:97:e0:4e:d2:69:10:d6:fb:bd:d9:7f:ba: 32:5b:b9:87:be:eb:a2:af:24:f7:76:fd:94:36:65: 78:38:db:ce:91:12:dc:8c:c2:f5:76:5d:ae:b1:4d: e3:d1:5d:64:80:89:bb:4b:64:3c:e3:4b:6f:ae:a0: 3f:7d:45:1e:e2:cb:6e:22:3f:5c:85:d4:26:18:7c: 12:22:84:bf:0d:be:37:a9:66:f0:aa:f5:84:d8:bf: f2:60:a1:13:f6:52:12:68:2f:82:2e:15:bd:f2:c8: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:ED:FD:9B:84:00:DC:13:63:17:D5:83:A3:62:01:6F:EC:5E:9F:6C X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:52:0a:28:18:68:5f:2e:33:14:29:5f:3a:11:06:ca:04:22: a2:6e:53:e7:86:2a:fe:e3:f2:2d:e7:56:12:23:91:b7:04:7a: 6b:21:ab:e0:b6:f0:43:81:dd:3c:d1:29:a2:02:c0:63:7f:4b: 98:48:0a:b6:b1:56:d3:e7:9d:fe:14:5d:91:01:e7:27:1a:5b: a0:a8:a9:87:c1:70:39:ba:12:12:44:f3:3e:cb:09:2d:31:7b: c9:43:0e:e0:8d:8a:c7:ed:1f:84:b5:0e:3d:e6:e8:b6:5c:8c: 11:ca:cd:d5:3d:0d:5b:57:23:15:ae:c4:c1:cf:57:1c:a1:84: 7b:65:e3:bb:36:05:4d:c4:99:00:ad:be:d7:1c:c1:f4:3f:0a: e4:f4:37:0b:d3:b4:be:aa:bd:b6:59:77:c9:6a:c3:d9:cd:e3: 1b:5e:b5:c7:34:6e:90:2d:82:c2:c6:67:c4:64:0c:99:95:78: e4:f9:f8:18:85:7f:e1:f0:c8:3c:95:4a:b1:ef:d8:f9:df:fd: e2:08:df:06:47:ce:87:32:a7:66:bd:9f:1f:6b:bb:33:2e:f8: 34:67:50:13:ab:12:11:69:af:72:aa:5e:3a:c5:bc:d2:bc:22: 62:ad:7c:01:c4:a5:53:f3:a6:29:46:44:6a:fe:50:11:e4:eb: e0:81:58:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjQxMTIyMjIwODQ5WhcNMjQxMTI5MjIwODQ5WjAYMRYwFAYD VQQDEw02NzQxMDBmMS0xMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQKFKYR5IAyyIKvzmT4hrrSa+SBA6A78khQYf32qMZU+vixK+tDZZQl2+D4F 5Z9cFDj9H2mzuBOKNlUrP6oRZkrBHh+KchYCUJcZYwBljZKgkVwGa3iOYn0ctsAQ AaApiq3Yp9veuGcvdp9EgyNu6ceFLbrpeOO1Xhr1u86LYAs/bdMao65yFqbWp3Fw morqoc4NzAJSMkqX4E7SaRDW+73Zf7oyW7mHvuuiryT3dv2UNmV4ONvOkRLcjML1 dl2usU3j0V1kgIm7S2Q840tvrqA/fUUe4stuIj9chdQmGHwSIoS/Db43qWbwqvWE 2L/yYKET9lISaC+CLhW98sgW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrt/ZuE ANwTYxfVg6NiAW/sXp9sMB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzUgooGGhfLjMUKV86EQbKBCKiblPnhir+4/It51YSI5G3BHprIavg tvBDgd080SmiAsBjf0uYSAq2sVbT553+FF2RAecnGlugqKmHwXA5uhISRPM+ywkt MXvJQw7gjYrH7R+EtQ495ui2XIwRys3VPQ1bVyMVrsTBz1ccoYR7ZeO7NgVNxJkA rb7XHMH0Pwrk9DcL07S+qr22WXfJasPZzeMbXrXHNG6QLYLCxmfEZAyZlXjk+fgY hX/h8Mg8lUqx79j53/3iCN8GR86HMqdmvZ8fa7szLvg0Z1ATqxIRaa9yql46xbzS vCJirXwBxKVT86YpRkRq/lAR5OvggViL -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org