$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft File: gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json) Hash identifier: VJoNN/nNeRJrxHqwa7Wxokz/JluFepQWQOMXJoxXfCg= Subject key identifier: F2:67:FA:B0:F8:AD:80:B1:0A:83:7D:46:92:D4:3F:32:0A:9D:A1:E6 Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft Manifest number: 18 Signing time: Sat 23 Nov 2024 05:54:57 +0000 Manifest this update: Sat 23 Nov 2024 05:54:56 +0000 Manifest next update: Sat 30 Nov 2024 05:54:56 +0000 Files and hashes: 1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: febP99Z+lHekiFLFf8bow3Ee2fYc8/9kI2tWYZFgcb8=) 2: DC5A39DA965011EF85038743C4F9AE02.roa (hash: Oq2BM3PW09tunP3ZdeIXLYfigxwXQLqfwRoL/esj5kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Validity Not Before: Nov 23 05:54:56 2024 GMT Not After : Nov 30 05:54:56 2024 GMT Subject: CN=67416e30-61f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:85:dc:3c:c2:a8:ef:40:c7:25:78:12:62: 74:4d:04:15:96:9f:42:a1:7c:b9:c4:8f:25:87:bc: 3a:d6:5f:d7:2d:00:86:61:2c:47:00:ed:ef:a3:95: 79:4f:2c:f1:1e:69:4e:77:4d:ea:af:dd:6a:4f:f3: cb:5e:94:6e:1c:d4:23:76:05:53:7d:c9:4f:55:a8: cf:5a:d9:42:cb:fa:48:e8:00:49:3b:01:eb:a9:d8: b4:f8:68:ff:45:45:2f:05:7d:6b:b9:b8:2f:fd:87: bd:a5:a2:74:50:65:7c:3a:df:40:28:71:48:08:94: 59:78:e2:75:50:c1:0d:9a:5e:13:1c:fd:b0:41:74: cd:e9:2a:24:6d:8d:59:fe:0f:b1:5d:3e:10:36:23: 84:03:b1:43:24:1c:cc:ce:f8:dc:0f:66:0b:2b:06: 8a:82:37:72:bf:06:62:f6:8e:f3:62:52:a4:58:0e: 75:74:8d:ae:48:30:4c:7f:7e:9f:96:09:2e:23:4a: b6:d6:38:ac:33:c7:54:41:1b:bc:c3:0a:0c:04:3c: 9f:38:4a:57:fc:48:fb:4c:a4:5e:f4:47:0a:f7:a4: d5:8b:da:f1:25:05:51:42:7a:bf:11:52:82:eb:52: 93:80:e5:a8:09:5c:c9:e6:c0:63:35:34:29:c7:46: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:FA:B0:F8:AD:80:B1:0A:83:7D:46:92:D4:3F:32:0A:9D:A1:E6 X509v3 Authority Key Identifier: keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f1:ce:6a:eb:b1:08:c4:a5:f8:54:c6:c8:86:f7:9e:38:0d: dc:f6:ed:da:12:6d:81:77:3b:b1:a1:e8:e3:87:3e:38:37:50: 3c:0f:3c:24:d1:87:7c:55:a6:9f:2c:71:f8:9f:db:d8:5d:bf: 84:6e:a8:74:fe:88:d7:8b:29:0a:de:8a:f7:3e:3c:47:50:7e: 00:b7:3e:a7:e4:31:48:63:ed:82:14:ab:dc:4a:ab:86:29:9b: 44:2e:28:bd:47:61:b2:8f:67:cb:db:94:cf:a6:aa:7e:0b:76: c7:51:84:73:4d:bb:c1:07:7a:e6:a9:67:b9:97:2a:58:fc:72: 86:cf:60:81:43:48:d5:3f:48:05:68:38:9f:e1:a5:a9:6b:bb: 79:7b:e2:16:d7:df:7d:7b:4c:7d:71:6d:c7:3e:0c:ef:02:8f: da:6c:e7:12:c6:52:17:49:10:8f:4b:c0:ba:ac:4e:fa:5d:7c: ac:88:a6:2a:aa:af:c6:b4:93:8f:15:90:ae:51:39:09:7c:58: 95:b0:d3:ca:a0:62:af:55:f4:02:cc:32:f8:ab:8a:c9:80:60: 92:00:b3:4b:2c:96:93:6c:d3:d0:27:64:19:ea:ec:46:0f:6b: 01:63:32:cb:fc:a2:85:84:81:f8:9a:1a:00:bd:7d:d1:5a:21: 7d:f3:39:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTVDRTExMC8GA1UEBRMoODI4QTQ3RDNBQzZFNkIwMzYwMTFDMjMzMjMxNzBBOTcz MUJBRDIyNDAeFw0yNDExMjMwNTU0NTZaFw0yNDExMzAwNTU0NTZaMBgxFjAUBgNV BAMTDTY3NDE2ZTMwLTYxZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/v4XcPMKo70DHJXgSYnRNBBWWn0KhfLnEjyWHvDrWX9ctAIZhLEcA7e+jlXlP LPEeaU53Teqv3WpP88telG4c1CN2BVN9yU9VqM9a2ULL+kjoAEk7Aeup2LT4aP9F RS8FfWu5uC/9h72lonRQZXw630AocUgIlFl44nVQwQ2aXhMc/bBBdM3pKiRtjVn+ D7FdPhA2I4QDsUMkHMzO+NwPZgsrBoqCN3K/BmL2jvNiUqRYDnV0ja5IMEx/fp+W CS4jSrbWOKwzx1RBG7zDCgwEPJ84Slf8SPtMpF70Rwr3pNWL2vElBVFCer8RUoLr UpOA5agJXMnmwGM1NCnHRmRtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8mf6sPit gLEKg31GktQ/MgqdoeYwHwYDVR0jBBgwFoAUgopH06xuawNgEcIzIxcKlzG60iQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NUNFLzQ1MUE4MjNBOEI3 QjExRUY4MjkwMzI3RkM0RjlBRTAyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBp US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ29wSDA2eHVhd05nRWNJekl4Y0tsekc2MGlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NUNFLzQ1MUE4MjNBOEI3QjExRUY4MjkwMzI3RkM0RjlBRTAyL2dvcEgwNnh1YXdO Z0VjSXpJeGNLbHpHNjBpUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHxzmrrsQjEpfhUxsiG9544Ddz27doSbYF3O7Gh6OOHPjg3UDwPPCTR h3xVpp8scfif29hdv4RuqHT+iNeLKQreivc+PEdQfgC3PqfkMUhj7YIUq9xKq4Yp m0QuKL1HYbKPZ8vblM+mqn4LdsdRhHNNu8EHeuapZ7mXKlj8cobPYIFDSNU/SAVo OJ/hpalru3l74hbX3317TH1xbcc+DO8Cj9ps5xLGUhdJEI9LwLqsTvpdfKyIpiqq r8a0k48VkK5ROQl8WJWw08qgYq9V9ALMMvirismAYJIAs0sslpNs09AnZBnq7EYP awFjMsv8ooWEgfiaGgC9fdFaIX3zOSA= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org