$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: XDmtJFQz8gmJ3ymFiWKesXo+kTQAQPXI0hRwqqlxd4U= Subject key identifier: 10:F1:37:4C:BF:45:DE:A4:BD:E8:17:37:59:3F:DE:77:B1:C3:85:3D Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 0531 Signing time: Fri 22 Nov 2024 23:04:22 +0000 Manifest this update: Fri 22 Nov 2024 23:04:22 +0000 Manifest next update: Fri 29 Nov 2024 23:04:22 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: oIsnW/m9OFGUPi05alvDo+SeKNC/U6Cbq5UX81jEFWk=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: Vy6NYC5JIjZxR2Zo1j1YR7/JfYdq8GexI/1xooXpvMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Nov 22 23:04:22 2024 GMT Not After : Nov 29 23:04:22 2024 GMT Subject: CN=67410df6-32f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:d1:34:58:0b:69:a1:ef:ef:b1:7d:c3:a3: b0:73:48:3d:56:65:e8:e2:5b:42:db:5d:74:ec:a6: 02:e8:c0:5c:eb:cf:54:f0:c9:a9:0f:e4:03:06:f7: 2b:93:5d:93:f5:c0:dd:bf:19:e6:45:f3:6e:7c:67: 56:21:ee:4e:6e:24:92:01:7e:64:fa:50:31:eb:f5: 21:5b:5d:49:64:ba:6b:ac:92:b6:59:93:9c:2e:d0: 21:db:d3:6d:3d:6b:69:fb:e4:34:2e:d9:65:d2:40: 97:bc:b3:e7:d2:86:8a:ec:76:c5:c2:1e:de:cc:f7: 59:2f:66:a2:11:b3:c3:1e:54:6b:b8:47:05:1a:3b: 87:60:51:a4:ed:d3:97:57:01:c2:06:a0:39:1e:43: 05:65:6f:21:58:bb:f7:00:a8:b6:9b:4c:23:f1:8d: f7:74:06:92:24:47:06:62:b4:8f:cc:c9:81:c3:4c: fe:47:32:ec:c2:ee:18:8c:72:21:57:06:19:f4:d2: 4a:98:31:ee:67:71:48:35:0d:96:61:02:4e:12:67: 8e:80:b7:aa:11:96:db:94:e8:15:62:96:0c:b9:0b: fb:43:67:0a:7f:20:2b:66:bd:53:46:0e:2e:c0:60: 0f:c7:cd:1b:3c:e6:57:ea:1b:7c:2e:9a:cb:f1:6c: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:37:4C:BF:45:DE:A4:BD:E8:17:37:59:3F:DE:77:B1:C3:85:3D X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:35:aa:86:73:dc:e2:f3:fa:b7:96:1f:56:fc:f4:1b:83: 8b:b5:b4:62:96:64:e3:6e:a4:5e:10:f3:83:86:c4:0b:de:45: a8:8c:48:dd:c7:89:9f:b4:c7:bc:99:dc:fd:74:36:9b:4b:f5: 62:b5:bd:55:92:c3:76:25:33:5d:22:12:b9:d7:d6:18:c1:b4: 8c:b5:f8:17:61:40:87:05:4a:45:5e:e8:c5:9f:a1:d1:74:2f: 7f:a4:24:09:bb:fc:be:ab:d3:4c:d0:fc:61:cd:ec:44:5c:68: 8a:bb:bc:cf:83:e2:71:7e:99:f1:85:fb:88:46:ef:9a:7b:34: 28:a0:c3:3c:37:33:d8:57:7a:e3:bb:72:62:98:32:18:6b:3d: 87:60:8b:ac:c7:85:8c:f7:6e:8c:e9:b4:11:3c:63:a8:df:1d: 2a:97:e5:45:f7:a9:a5:29:02:cd:c5:1c:ac:73:71:37:32:7e: 1e:6c:2f:5a:cb:ab:fa:b6:ed:5d:4d:88:47:ff:df:74:68:0c: 0e:9d:c1:17:16:8b:60:8e:96:b9:43:5d:93:ce:97:3d:14:f3: f1:33:a6:c0:49:d5:62:c6:80:54:c7:be:39:ef:d2:1e:cf:c0: 72:c8:bd:84:24:60:6c:ed:6b:8b:3d:07:77:74:0d:2d:0a:51: 11:ee:a9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjQxMTIyMjMwNDIyWhcNMjQxMTI5MjMwNDIyWjAYMRYwFAYD VQQDEw02NzQxMGRmNi0zMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n3RNFgLaaHv77F9w6Owc0g9VmXo4ltC21107KYC6MBc689U8MmpD+QDBvcr k12T9cDdvxnmRfNufGdWIe5ObiSSAX5k+lAx6/UhW11JZLprrJK2WZOcLtAh29Nt PWtp++Q0Ltll0kCXvLPn0oaK7HbFwh7ezPdZL2aiEbPDHlRruEcFGjuHYFGk7dOX VwHCBqA5HkMFZW8hWLv3AKi2m0wj8Y33dAaSJEcGYrSPzMmBw0z+RzLswu4YjHIh VwYZ9NJKmDHuZ3FINQ2WYQJOEmeOgLeqEZbblOgVYpYMuQv7Q2cKfyArZr1TRg4u wGAPx80bPOZX6ht8LprL8WzntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDxN0y/ Rd6kvegXN1k/3nexw4U9MB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8UjWqhnPc4vP6t5YfVvz0G4OLtbRilmTjbqReEPODhsQL3kWojEjd x4mftMe8mdz9dDabS/Vitb1VksN2JTNdIhK519YYwbSMtfgXYUCHBUpFXujFn6HR dC9/pCQJu/y+q9NM0PxhzexEXGiKu7zPg+JxfpnxhfuIRu+aezQooMM8NzPYV3rj u3JimDIYaz2HYIusx4WM926M6bQRPGOo3x0ql+VF96mlKQLNxRysc3E3Mn4ebC9a y6v6tu1dTYhH/990aAwOncEXFotgjpa5Q12Tzpc9FPPxM6bASdVixoBUx74579Ie z8ByyL2EJGBs7WuLPQd3dA0tClER7qlK -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org