$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: +9KxQHnn6kOud8FIu1qGWh1aBmSpRMiB6UhEDE0tFyQ= Subject key identifier: 4B:31:CF:FC:6F:16:98:41:08:5D:3C:56:8E:F7:20:29:E7:88:82:9A Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 030A Signing time: Sat 23 Nov 2024 01:13:25 +0000 Manifest this update: Sat 23 Nov 2024 01:13:25 +0000 Manifest next update: Sat 30 Nov 2024 01:13:25 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: FWWbiiVCj3WwoQD8voYRYH7T7P5hp7dYXufRPmGDi/4=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: tIDiP3hNqVNzA0IqRbP/SuZVvzepUKW2qtpK5KHsOYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Nov 23 01:13:25 2024 GMT Not After : Nov 30 01:13:25 2024 GMT Subject: CN=67412c35-4f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:11:bc:38:10:d6:0c:b8:0e:57:fc:93:f1: f0:bd:dd:aa:7a:27:c1:fa:f6:3c:7a:ce:36:86:11: 5c:b0:da:33:96:e3:62:58:72:ba:69:99:a8:9e:b8: 78:b9:94:49:bd:74:3b:98:96:23:19:b1:d2:62:33: 3d:5d:2b:24:7f:e9:08:57:1a:8b:51:d6:a2:a3:2f: 0b:98:21:3d:e1:da:e1:97:29:ac:b3:b0:72:55:c9: dd:81:00:8f:3f:e5:c5:37:4e:f1:ed:b5:99:ff:51: 12:7f:53:83:a2:95:5b:0c:7d:21:1a:59:03:9b:1f: 0d:e6:1e:e0:ff:f0:94:19:22:fb:f1:8a:1e:18:34: 3f:77:de:0b:1a:c6:39:2c:a4:11:ad:9e:8c:8a:e3: 52:f9:6f:c3:26:74:50:2a:b9:b5:c2:93:cd:9d:bc: b4:db:53:a2:59:cb:36:c2:4a:c4:b6:58:45:ec:58: 76:ce:a3:4d:1f:e1:5b:8d:c3:49:13:47:0b:77:07: a1:98:b2:7f:e8:6e:8e:8c:58:6c:b1:d5:2f:fd:4a: 05:e9:35:19:49:eb:f8:e2:61:85:d1:7a:c1:38:8b: 3c:e3:cd:ae:c7:b5:89:a7:ee:49:84:d2:fb:7a:7c: 39:3e:20:48:50:a1:54:0c:1a:e9:cf:d7:75:f2:13: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:CF:FC:6F:16:98:41:08:5D:3C:56:8E:F7:20:29:E7:88:82:9A X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f8:54:aa:76:d4:61:3b:9b:f2:e8:a8:d5:d1:4a:5c:92:8f: 06:f6:4a:50:d8:4e:38:8c:d8:bd:e9:2e:b1:57:07:c4:b4:37: d7:9c:15:08:0c:a5:f0:5d:cc:d4:ea:3f:2f:dc:d3:27:bd:44: 6b:5c:dd:ce:d7:58:b2:34:42:47:76:32:5b:b2:f1:f8:28:7f: 8d:b6:ab:61:ec:49:36:e4:a9:2a:0e:08:c4:c9:ae:27:5f:1d: 60:63:96:4b:9e:0d:ee:c2:c8:53:57:9f:e5:a8:8f:b4:55:fb: 49:41:42:7d:14:ce:a2:df:c8:d0:85:28:72:c9:51:17:90:28: d9:ca:85:a3:0c:1f:de:67:9d:03:88:da:4c:6b:50:b4:f3:9c: 1a:d6:eb:7e:3b:ad:42:fb:43:e9:b7:f4:1c:8b:a2:5b:c9:d7: 29:5a:d5:6f:81:f9:06:34:d9:3c:d7:41:a9:6b:3f:af:64:8b: 82:27:fa:13:e7:b3:32:8f:50:dd:69:c6:ed:d5:54:7e:e6:e6: 20:64:be:f8:35:9e:49:bf:8d:81:24:fa:7e:2c:c1:09:64:35: 57:eb:41:6a:44:d8:bd:8c:ad:a0:fe:dc:ce:29:43:b5:77:37: 28:c3:d6:25:4c:a7:c0:96:a1:56:df:ef:c6:ff:a6:59:da:59: 4d:a6:73:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjQxMTIzMDExMzI1WhcNMjQxMTMwMDExMzI1WjAYMRYwFAYD VQQDEw02NzQxMmMzNS00ZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq8RvDgQ1gy4Dlf8k/Hwvd2qeifB+vY8es42hhFcsNozluNiWHK6aZmonrh4 uZRJvXQ7mJYjGbHSYjM9XSskf+kIVxqLUdaioy8LmCE94drhlymss7ByVcndgQCP P+XFN07x7bWZ/1ESf1ODopVbDH0hGlkDmx8N5h7g//CUGSL78YoeGDQ/d94LGsY5 LKQRrZ6MiuNS+W/DJnRQKrm1wpPNnby021OiWcs2wkrEtlhF7Fh2zqNNH+FbjcNJ E0cLdwehmLJ/6G6OjFhssdUv/UoF6TUZSev44mGF0XrBOIs8482ux7WJp+5JhNL7 enw5PiBIUKFUDBrpz9d18hOAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsxz/xv FphBCF08Vo73ICnniIKaMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1+FSqdtRhO5vy6KjV0Upcko8G9kpQ2E44jNi96S6xVwfEtDfXnBUI DKXwXczU6j8v3NMnvURrXN3O11iyNEJHdjJbsvH4KH+Ntqth7Ek25KkqDgjEya4n Xx1gY5ZLng3uwshTV5/lqI+0VftJQUJ9FM6i38jQhShyyVEXkCjZyoWjDB/eZ50D iNpMa1C085wa1ut+O61C+0Ppt/Qci6JbydcpWtVvgfkGNNk810Gpaz+vZIuCJ/oT 57Myj1Ddacbt1VR+5uYgZL74NZ5Jv42BJPp+LMEJZDVX60FqRNi9jK2g/tzOKUO1 dzcow9YlTKfAlqFW3+/G/6ZZ2llNpnP1 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org