$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: VhMm1oRW6kwpqmbBPu0lfcYwYOt+UR9OpT8Q0wUJuRk= Subject key identifier: 83:FA:A6:B5:AF:B0:07:92:D9:24:84:FE:95:02:F9:3D:5A:48:BB:81 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 016D Signing time: Thu 21 Nov 2024 02:14:43 +0000 Manifest this update: Thu 21 Nov 2024 02:14:42 +0000 Manifest next update: Thu 28 Nov 2024 02:14:42 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: 6Qtxy/1LxUFKatT4o6ZF4HxXbsnBqe5YI+duHR4jQqo=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: ORL7FHyYLhjfJDRD1dwarcJ8totXTOHWHFx2ct/UEgg=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: xteyM1ldAXrwafcfzmBqJmUUzlYunq+2AYhyMDtlM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Nov 21 02:14:42 2024 GMT Not After : Nov 28 02:14:42 2024 GMT Subject: CN=673e9793-3980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:85:74:03:80:f3:38:d4:0e:71:1d:8e:f6: 63:ef:1d:e3:dd:23:40:39:58:a4:49:23:46:19:cb: a4:d0:18:9a:23:6d:ee:b9:4f:e1:c4:a7:c5:ed:f8: 2e:3f:4c:25:a4:3f:21:b4:9c:12:b8:21:fb:0c:37: 2f:87:f1:ac:f6:f4:31:51:13:41:cf:8d:02:c9:10: ca:93:ef:a6:a3:37:ee:6c:b2:49:c4:e8:3c:06:22: 27:f9:8f:82:73:5f:48:7b:c8:6b:f4:c3:8f:b0:d7: 71:41:c6:8d:ad:f3:98:9c:a4:34:f9:af:82:d4:d1: 91:14:2f:fd:17:e9:ff:70:6e:d5:14:c0:ba:b5:eb: c6:26:07:37:4d:49:82:59:0d:35:e3:9b:3e:6b:65: 2a:b4:1e:16:fd:06:a9:c3:76:c4:5e:05:b1:22:2c: 82:cd:ba:9c:60:dc:e6:97:60:15:3c:a7:83:9a:d7: 37:9c:48:2b:ee:fa:e4:10:ee:eb:1a:64:85:26:e7: 59:b1:63:56:85:1c:84:e6:05:94:dc:a7:f3:c0:ce: 15:35:22:ce:21:51:b2:b4:75:3d:99:b7:1c:2f:0a: f3:88:c5:02:47:d7:b9:20:3c:c5:6a:86:e2:2a:30: d7:ec:92:e6:98:38:c9:24:9c:37:47:9c:21:d5:74: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:A6:B5:AF:B0:07:92:D9:24:84:FE:95:02:F9:3D:5A:48:BB:81 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:49:ad:a2:35:e3:55:63:08:2f:bf:0b:84:40:89:89:52:85: ee:25:52:e6:29:14:94:f5:2e:2c:27:9b:c0:d5:6b:af:54:69: 40:ef:f7:aa:32:c8:44:6b:09:f0:41:ff:cf:45:f8:ed:15:69: aa:89:d7:d2:a8:02:a2:36:1a:9b:58:d7:7f:b3:bb:e3:f6:34: c4:30:12:2b:1d:f5:25:e2:7e:3d:b2:9d:2c:7b:7e:25:98:63: ab:e6:e0:9e:49:61:43:03:16:02:98:4d:c0:90:54:f4:4b:d8: e0:da:e4:bd:0c:72:82:b2:7c:41:2b:aa:0a:8b:35:81:38:82: 12:9d:a5:3d:09:a4:cc:c8:41:bf:aa:65:6b:02:4a:b5:39:d9: b8:95:c4:c5:af:00:f6:f7:6f:de:24:ee:66:96:58:62:60:19: 9e:62:80:14:37:05:79:70:e0:74:00:1a:6c:7b:8a:75:31:54: c7:0f:8a:b8:81:78:50:ac:28:0f:1e:59:8c:78:90:84:7c:bb: d7:23:b3:96:17:33:96:93:20:a8:12:cf:90:8a:0a:73:58:ba: fe:0d:61:ad:9a:71:95:1c:6b:c2:6e:a8:bf:c7:a6:51:be:cd: ef:83:c8:91:12:80:de:ac:36:93:fa:2a:1b:38:b8:57:e5:a3: f9:6e:c6:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjQxMTIxMDIxNDQyWhcNMjQxMTI4MDIxNDQyWjAYMRYwFAYD VQQDEw02NzNlOTc5My0zOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR2FdAOA8zjUDnEdjvZj7x3j3SNAOVikSSNGGcuk0BiaI23uuU/hxKfF7fgu P0wlpD8htJwSuCH7DDcvh/Gs9vQxURNBz40CyRDKk++mozfubLJJxOg8BiIn+Y+C c19Ie8hr9MOPsNdxQcaNrfOYnKQ0+a+C1NGRFC/9F+n/cG7VFMC6tevGJgc3TUmC WQ0145s+a2UqtB4W/Qapw3bEXgWxIiyCzbqcYNzml2AVPKeDmtc3nEgr7vrkEO7r GmSFJudZsWNWhRyE5gWU3KfzwM4VNSLOIVGytHU9mbccLwrziMUCR9e5IDzFaobi KjDX7JLmmDjJJJw3R5wh1XSqXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP6prWv sAeS2SSE/pUC+T1aSLuBMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Sa2iNeNVYwgvvwuEQImJUoXuJVLmKRSU9S4sJ5vA1WuvVGlA7/eq MshEawnwQf/PRfjtFWmqidfSqAKiNhqbWNd/s7vj9jTEMBIrHfUl4n49sp0se34l mGOr5uCeSWFDAxYCmE3AkFT0S9jg2uS9DHKCsnxBK6oKizWBOIISnaU9CaTMyEG/ qmVrAkq1Odm4lcTFrwD292/eJO5mllhiYBmeYoAUNwV5cOB0ABpse4p1MVTHD4q4 gXhQrCgPHlmMeJCEfLvXI7OWFzOWkyCoEs+QigpzWLr+DWGtmnGVHGvCbqi/x6ZR vs3vg8iREoDerDaT+iobOLhX5aP5bsZQ -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:01 2024 by rpki-client on console-fra.rpki-client.org