$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json) Hash identifier: rVdq6hcPbnHld6NZn8fExAyrF8TVv47m41QuaAx2ZaM= Subject key identifier: FA:49:5B:7F:60:5E:E2:80:56:FF:D5:EF:38:F9:46:C3:EE:81:1C:BE Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft Manifest number: 0216 Signing time: Sat 23 Nov 2024 01:31:35 +0000 Manifest this update: Sat 23 Nov 2024 01:31:35 +0000 Manifest next update: Sat 30 Nov 2024 01:31:35 +0000 Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: csHTeqo/tdxdHrVQFnfNFvRkW5ICgOmXJ6YqjT2grQc=) 2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: H7gFBfSKuVP6R/OmKqYC78WBb2LAqvaWDA0cY1eM3ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Validity Not Before: Nov 23 01:31:35 2024 GMT Not After : Nov 30 01:31:35 2024 GMT Subject: CN=67413077-5085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:b3:25:f8:b8:ca:06:c5:d6:3b:c0:17:8d: f0:fc:77:33:d3:db:a7:f5:bc:29:34:f2:a2:04:4f: 07:cc:e1:61:cd:74:6a:86:6a:ef:db:8f:f4:22:54: 16:6f:d6:62:4e:94:b9:1c:6f:d1:a7:f0:2a:e3:8d: 97:3c:2f:f4:2f:de:99:8a:2f:82:4b:15:9e:7c:e4: da:2c:c5:95:5a:06:e1:7d:a0:2a:04:6b:70:df:a0: 2e:1a:70:f6:5b:36:ea:06:d2:fd:75:e2:7f:9d:cf: c2:a1:2a:d0:c1:08:8b:8f:c4:14:03:38:1d:73:73: 77:c8:74:fe:55:89:2d:33:b7:32:f8:bc:c1:fd:57: 25:d1:91:58:2f:f2:c9:e4:4c:bb:9d:5c:ea:e1:79: 1f:04:3d:57:c7:26:a2:76:6e:6c:db:56:87:66:75: cf:34:27:a9:4c:8e:a1:4f:1d:3c:de:76:56:45:6a: 52:c8:6a:00:16:32:65:7b:46:15:b1:32:a7:ad:cc: f7:b7:1d:9f:58:75:5d:a2:2c:5e:0f:68:1d:68:7f: e6:23:97:74:69:eb:da:ac:5b:42:b5:9e:c7:be:ec: 0d:6c:9b:50:b8:3d:2f:a1:af:ca:58:74:03:cb:ae: 4d:81:65:56:09:0d:ca:10:4b:84:6d:d9:52:1e:26: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:5B:7F:60:5E:E2:80:56:FF:D5:EF:38:F9:46:C3:EE:81:1C:BE X509v3 Authority Key Identifier: keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:10:70:e6:20:24:37:d2:75:aa:e0:90:9a:7d:0e:0a:0d:eb: a6:17:23:4d:e1:c7:48:b8:e5:a8:a4:cc:7c:bf:78:5b:43:e1: ea:d1:d6:05:ea:3d:e9:77:95:96:14:be:ab:99:d9:ec:4b:5f: b6:b0:bf:f1:ab:21:b7:9e:19:81:d0:51:21:e3:4d:4f:1c:5a: 16:54:eb:ad:8c:24:91:8c:7f:a8:45:be:7c:e4:be:88:b2:ab: 42:98:f2:8c:a6:75:ff:c4:99:a3:8b:2d:b9:75:87:1d:91:06: 8d:c3:e2:f4:2c:09:1e:9f:1e:b2:49:7a:58:e2:41:07:34:14: be:56:62:e9:a0:4b:06:f7:96:6a:aa:86:6a:ea:c7:dc:ac:f2: 29:ca:39:af:9f:46:ba:15:3b:c4:74:00:6b:25:8b:e7:94:1b: b9:42:c2:3c:e5:19:ae:a8:4a:4e:89:88:4d:c5:b1:c6:77:50: b2:c0:98:66:26:7a:36:7a:f6:52:98:49:9e:62:f0:ac:bd:60: 6e:a0:c6:72:00:09:d4:48:7f:e0:03:10:e2:ab:5c:7e:b6:89: ad:c2:9a:55:92:ec:aa:fa:57:47:d5:b3:47:5b:14:6f:60:16: da:66:dd:d2:cd:b0:b1:db:0c:ae:00:25:c9:9b:36:c7:b3:23: a8:fe:f9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNBNjcxMTAvBgNVBAUTKDgwRTBBQjE4OUZDRDcwMUVFRTQyQzkyQjkzQzE1QjZG NzQyNDgyNkEwHhcNMjQxMTIzMDEzMTM1WhcNMjQxMTMwMDEzMTM1WjAYMRYwFAYD VQQDEw02NzQxMzA3Ny01MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04SzJfi4ygbF1jvAF43w/Hcz09un9bwpNPKiBE8HzOFhzXRqhmrv24/0IlQW b9ZiTpS5HG/Rp/Aq442XPC/0L96Zii+CSxWefOTaLMWVWgbhfaAqBGtw36AuGnD2 WzbqBtL9deJ/nc/CoSrQwQiLj8QUAzgdc3N3yHT+VYktM7cy+LzB/Vcl0ZFYL/LJ 5Ey7nVzq4XkfBD1Xxyaidm5s21aHZnXPNCepTI6hTx083nZWRWpSyGoAFjJle0YV sTKnrcz3tx2fWHVdoixeD2gdaH/mI5d0aevarFtCtZ7HvuwNbJtQuD0voa/KWHQD y65NgWVWCQ3KEEuEbdlSHibm7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpJW39g XuKAVv/V7zj5RsPugRy+MB8GA1UdIwQYMBaAFIDgqxifzXAe7kLJK5PBW290JIJq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0E2Ny9DODA2OTc5MjBE OUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNCN3VRc2tyazhGYmIzUWtn bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPQ3JHSl9OY0I3dVFza3JrOEZiYjNRa2dtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0E2Ny9DODA2OTc5MjBEOUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNC N3VRc2tyazhGYmIzUWtnbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEHDmICQ30nWq4JCafQ4KDeumFyNN4cdIuOWopMx8v3hbQ+Hq0dYF 6j3pd5WWFL6rmdnsS1+2sL/xqyG3nhmB0FEh401PHFoWVOutjCSRjH+oRb585L6I sqtCmPKMpnX/xJmjiy25dYcdkQaNw+L0LAkenx6ySXpY4kEHNBS+VmLpoEsG95Zq qoZq6sfcrPIpyjmvn0a6FTvEdABrJYvnlBu5QsI85RmuqEpOiYhNxbHGd1CywJhm Jno2evZSmEmeYvCsvWBuoMZyAAnUSH/gAxDiq1x+tomtwppVkuyq+ldH1bNHWxRv YBbaZt3SzbCx2wyuACXJmzbHsyOo/vkK -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org