$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: nuXAB3lozWgauuD+12Cj6gPyQOLg6Vymb3GDZr8GSjU= Subject key identifier: 62:19:73:71:BC:88:55:3E:11:2D:B3:C8:82:03:59:96:16:E4:09:E1 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 04C8 Signing time: Fri 03 May 2024 01:31:03 +0000 Manifest this update: Fri 03 May 2024 01:31:03 +0000 Manifest next update: Fri 10 May 2024 01:31:03 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: pzJFzwkRapBtG15GpSoDAkRd9vQ5iy6EIe3FUj+3cSo=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: xL2eKYZ3O5laJu39JEaImdBnLTDPOEEdXQr86L3tJS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: May 3 01:31:03 2024 GMT Not After : May 10 01:31:03 2024 GMT Subject: CN=66343e57-6c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:ff:f1:9f:b2:46:58:50:78:27:a1:8a:14: ef:d6:47:7a:18:a0:2e:af:44:88:79:9d:f0:68:c2: da:61:ca:7b:cb:e3:70:53:7d:15:55:3a:a3:64:b3: ba:27:38:b7:f0:77:96:44:8d:c4:f7:e6:86:dc:9e: 9c:35:3e:b7:9e:95:a6:e9:0d:89:89:9d:d4:49:b7: d4:4f:13:d4:2c:14:07:ce:e0:46:a4:ec:16:a8:6b: d1:ce:cb:d7:6f:14:20:c1:9f:72:e7:7c:43:1b:cb: 40:a1:44:b7:0b:15:00:68:5b:84:8e:6d:8c:3b:04: ab:ef:46:44:1f:9b:c8:d6:53:d8:d0:b1:da:61:aa: 56:e2:d0:f0:3a:ef:5c:ec:33:43:41:d0:0b:3e:02: 48:1e:0d:15:92:6e:ea:e1:b2:07:0f:78:5d:69:41: ea:55:39:cc:f2:7d:a5:33:89:32:1e:bf:d0:6d:29: d5:c3:4f:d8:64:87:d1:f4:29:9d:85:df:78:c8:0c: 16:6b:01:32:17:7b:c0:fa:8d:86:7c:22:33:d2:21: 68:cb:59:e0:7a:28:f3:77:5e:68:ae:f5:f6:7c:e7: 32:dd:d6:be:0f:5c:eb:4b:98:6c:69:ff:78:9a:35: 90:6c:61:a2:58:ac:e2:03:a8:03:4d:8b:e4:f5:32: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:19:73:71:BC:88:55:3E:11:2D:B3:C8:82:03:59:96:16:E4:09:E1 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:8a:7c:22:97:09:7e:cf:0c:a0:58:15:b0:bc:66:fd:5f: c8:2f:dd:58:07:e6:11:c4:54:85:89:60:20:3a:b2:c1:a3:93: c3:dc:53:81:ba:bf:d2:7d:12:7c:19:1e:69:69:a9:82:83:66: 19:fc:68:c5:3e:e7:1a:61:8d:04:c3:2e:16:d1:f5:d1:f6:c1: ec:04:75:e3:83:28:aa:55:23:c1:b2:92:5e:71:c7:10:90:64: 84:d5:94:89:87:d1:75:f5:a7:df:db:d5:e1:5f:fe:dc:6f:0b: 71:25:09:64:6e:bb:d7:cf:91:9b:de:ee:51:9e:a8:5b:80:84: 02:f8:56:5a:ea:84:65:c7:2e:44:88:e7:6a:f3:66:b6:6b:5e: 0d:13:2d:6b:73:1a:10:97:7f:28:32:a0:e4:7b:72:fa:ae:07: 26:b6:da:53:96:aa:00:54:26:b2:cb:4c:60:0e:44:69:af:9b: 91:fc:3b:14:bd:5a:46:81:fa:94:20:ef:fc:c1:1d:1b:ec:4f: 6a:89:8c:54:93:a0:da:cd:7a:c7:95:6b:e6:4c:7b:48:7a:a8: a0:2e:7d:e1:4b:cf:9c:69:95:1c:34:46:f6:d2:15:a6:ff:89: 41:75:84:63:fc:85:e3:f3:5e:07:c3:fe:ee:be:eb:12:3d:37: f9:18:a1:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjQwNTAzMDEzMTAzWhcNMjQwNTEwMDEzMTAzWjAYMRYwFAYD VQQDEw02NjM0M2U1Ny02YzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqj/8Z+yRlhQeCehihTv1kd6GKAur0SIeZ3waMLaYcp7y+NwU30VVTqjZLO6 Jzi38HeWRI3E9+aG3J6cNT63npWm6Q2JiZ3USbfUTxPULBQHzuBGpOwWqGvRzsvX bxQgwZ9y53xDG8tAoUS3CxUAaFuEjm2MOwSr70ZEH5vI1lPY0LHaYapW4tDwOu9c 7DNDQdALPgJIHg0Vkm7q4bIHD3hdaUHqVTnM8n2lM4kyHr/QbSnVw0/YZIfR9Cmd hd94yAwWawEyF3vA+o2GfCIz0iFoy1ngeijzd15orvX2fOcy3da+D1zrS5hsaf94 mjWQbGGiWKziA6gDTYvk9TIfZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIZc3G8 iFU+ES2zyIIDWZYW5AnhMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqYp8IpcJfs8MoFgVsLxm/V/IL91YB+YRxFSFiWAgOrLBo5PD3FOB ur/SfRJ8GR5paamCg2YZ/GjFPucaYY0Ewy4W0fXR9sHsBHXjgyiqVSPBspJecccQ kGSE1ZSJh9F19aff29XhX/7cbwtxJQlkbrvXz5Gb3u5RnqhbgIQC+FZa6oRlxy5E iOdq82a2a14NEy1rcxoQl38oMqDke3L6rgcmttpTlqoAVCayy0xgDkRpr5uR/DsU vVpGgfqUIO/8wR0b7E9qiYxUk6DazXrHlWvmTHtIeqigLn3hS8+caZUcNEb20hWm /4lBdYRj/IXj814Hw/7uvusSPTf5GKG5 -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org