$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json) Hash identifier: XzVfYA//e/MAiwmq4z++dpJTt+6i7oFNt4CsWtPWNW8= Subject key identifier: FB:85:3D:A8:CC:44:35:78:EB:1E:C0:73:09:3C:01:AB:3F:3B:54:F5 Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft Manifest number: 02CE Signing time: Sat 23 Nov 2024 00:55:59 +0000 Manifest this update: Sat 23 Nov 2024 00:55:59 +0000 Manifest next update: Sat 30 Nov 2024 00:55:59 +0000 Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: +GVEJHDs7EnxePzOILHenfikup9EmrkVdem8ieWwQm4=) 2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: m3IL/Nx+bW0gwi3M1I53/qMj9OSn7nf8hhPK7849ajY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Validity Not Before: Nov 23 00:55:59 2024 GMT Not After : Nov 30 00:55:59 2024 GMT Subject: CN=6741281f-7259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:52:52:d2:81:5a:e3:4d:fc:11:55:47:5b: 36:76:7f:6b:51:17:9e:f8:28:04:95:84:9c:02:d4: 79:33:e9:b0:51:d2:b9:ff:2c:5f:1a:64:3e:60:85: b0:1c:36:51:49:41:29:85:3b:b5:fe:2e:85:ee:03: 93:73:fe:02:ba:1b:0f:f9:54:37:d2:22:c0:d2:29: 99:05:4d:3b:40:83:44:0f:1c:c9:60:d3:ac:44:9e: 4a:eb:3f:8a:39:37:64:ae:fa:65:f4:c4:01:7a:6e: 49:19:8c:fd:09:c0:cd:0c:c6:b7:d4:a8:f3:69:94: 23:f5:0c:95:1f:be:00:ec:c2:d7:14:8a:1a:77:2d: a9:e3:2c:a4:68:d3:4d:ab:1a:39:5b:97:25:46:66: ab:2b:d4:8b:34:e9:c7:1a:29:92:2a:66:75:31:3a: ba:6c:68:5f:01:f8:4c:ad:16:23:cb:dd:8b:52:48: 5c:16:63:9a:79:80:64:32:a4:86:1b:9f:ea:a1:3e: ef:ed:12:73:6b:dd:91:e2:9c:7e:1d:60:65:f1:d7: 02:4e:8e:d4:00:e7:00:f4:a9:a1:97:1d:1b:5e:63: 1d:b6:61:4c:21:3e:f1:49:d6:df:d1:58:75:64:be: b9:0d:1b:17:95:7b:bb:08:53:9d:39:da:be:f3:cd: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:3D:A8:CC:44:35:78:EB:1E:C0:73:09:3C:01:AB:3F:3B:54:F5 X509v3 Authority Key Identifier: keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:81:c1:41:5e:1f:09:9e:ef:eb:79:5a:ea:34:1e:27:61:d7: 34:7a:0c:48:cb:4b:9d:53:96:c1:db:9e:90:cd:ab:ce:3a:4c: 88:23:81:87:ef:72:72:d9:ce:75:7a:b8:73:e6:6b:ca:5e:9a: 80:09:6a:52:1d:95:33:2b:b1:71:87:c1:af:be:ba:f8:73:ca: cd:63:b2:c8:fe:fb:6d:38:88:48:aa:e4:3f:df:b4:04:7d:9c: c7:15:9b:3b:21:0b:87:64:c7:97:d1:30:7b:78:76:c4:7e:36: 35:65:3e:92:72:68:00:4d:95:9f:7f:dd:2c:b8:42:6d:0c:e5: 59:f8:dc:96:8a:b0:fd:ad:08:6e:d6:65:af:a6:00:72:d8:b9: 64:82:0c:70:fd:a4:b4:02:59:ed:06:e8:ae:af:81:96:37:d6: e0:53:ad:a9:17:2a:13:05:e9:cd:6f:cd:06:cd:34:f1:80:66: 93:27:b1:d0:d7:a7:5d:90:91:a6:8e:6c:61:dd:c0:ba:f6:ce: 78:5c:fd:65:34:3a:af:34:bf:8b:bf:96:6e:49:5e:81:0e:75: 67:43:4e:b3:97:57:25:d0:10:6a:eb:8d:85:cb:08:58:bf:a9: 03:f7:1e:c0:3a:0e:41:c8:24:16:4f:4f:d2:8a:a3:1f:57:df: f2:1d:17:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE NDhCQjI5MkIwHhcNMjQxMTIzMDA1NTU5WhcNMjQxMTMwMDA1NTU5WjAYMRYwFAYD VQQDEw02NzQxMjgxZi03MjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kVSUtKBWuNN/BFVR1s2dn9rURee+CgElYScAtR5M+mwUdK5/yxfGmQ+YIWw HDZRSUEphTu1/i6F7gOTc/4CuhsP+VQ30iLA0imZBU07QINEDxzJYNOsRJ5K6z+K OTdkrvpl9MQBem5JGYz9CcDNDMa31KjzaZQj9QyVH74A7MLXFIoady2p4yykaNNN qxo5W5clRmarK9SLNOnHGimSKmZ1MTq6bGhfAfhMrRYjy92LUkhcFmOaeYBkMqSG G5/qoT7v7RJza92R4px+HWBl8dcCTo7UAOcA9Kmhlx0bXmMdtmFMIT7xSdbf0Vh1 ZL65DRsXlXu7CFOdOdq+8803pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuFPajM RDV46x7Acwk8Aas/O1T1MB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1 RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6 Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNgcFBXh8Jnu/reVrqNB4nYdc0egxIy0udU5bB256QzavOOkyII4GH 73Jy2c51erhz5mvKXpqACWpSHZUzK7Fxh8Gvvrr4c8rNY7LI/vttOIhIquQ/37QE fZzHFZs7IQuHZMeX0TB7eHbEfjY1ZT6ScmgATZWff90suEJtDOVZ+NyWirD9rQhu 1mWvpgBy2Llkggxw/aS0AlntBuiur4GWN9bgU62pFyoTBenNb80GzTTxgGaTJ7HQ 16ddkJGmjmxh3cC69s54XP1lNDqvNL+Lv5ZuSV6BDnVnQ06zl1cl0BBq642FywhY v6kD9x7AOg5ByCQWT0/SiqMfV9/yHReC -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org