$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json) Hash identifier: so/GvRmTOdDR8nj2EfGsBd0cbS1u2nAmz8tqYf20aSM= Subject key identifier: B6:60:56:32:3D:D5:0A:B0:61:7C:47:87:B6:D4:B7:83:3D:B4:94:D3 Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft Manifest number: 34 Signing time: Sat 23 Nov 2024 05:34:13 +0000 Manifest this update: Sat 23 Nov 2024 05:34:13 +0000 Manifest next update: Sat 30 Nov 2024 05:34:13 +0000 Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: +2L9WcY2kjmGds+CH3Na/QiR3XROU+m9YOCWqYmC13s=) 2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: w7XAoEqzOUn2fN+Z5QNERvhpDDcLRxuYcXrspPvLSME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Validity Not Before: Nov 23 05:34:13 2024 GMT Not After : Nov 30 05:34:13 2024 GMT Subject: CN=67416955-697f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:99:28:3f:31:38:4f:9c:1e:0b:0e:5e:4d: 0d:69:f8:02:ba:a8:cb:76:7d:55:ee:a0:0a:7f:28: 06:0e:10:14:dd:aa:99:d2:30:4a:8c:d6:fe:0d:16: 71:d6:d2:3f:13:f2:92:e5:7a:2e:ef:5a:55:c8:ca: c0:41:12:e8:53:3a:df:be:dd:be:fd:e4:91:3b:4c: 6c:f6:2c:6e:78:43:c6:b2:fc:fb:98:3b:a8:4d:a5: 7f:46:d4:d8:37:c0:5a:d5:c0:2e:36:10:10:4f:9e: 2e:38:9e:80:bb:5b:e0:47:60:f7:7d:ac:4e:b6:40: b0:f4:03:c6:90:a1:e0:d8:5f:bb:e4:b3:7b:95:47: d6:5c:00:33:1c:0b:82:55:aa:de:f1:43:c3:15:ba: e9:0c:9e:8c:61:12:cf:97:8e:c1:c6:1c:e9:19:60: 0e:58:26:7b:84:05:55:b7:ee:21:9e:72:f2:49:03: a5:79:a7:f4:c1:fc:ca:a5:6e:74:29:ba:e0:b1:8c: c1:fb:34:d7:a6:31:b7:b0:0c:ef:be:81:81:7f:c3: 46:e4:ec:14:51:a8:87:80:43:33:80:d8:24:00:0d: 6d:12:47:e2:55:a1:81:7e:5a:38:3e:08:62:0f:94: fa:b4:98:7f:49:cc:ee:16:7a:d5:08:1f:14:54:ce: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:56:32:3D:D5:0A:B0:61:7C:47:87:B6:D4:B7:83:3D:B4:94:D3 X509v3 Authority Key Identifier: keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:d9:1e:3c:e5:e1:3a:b4:2b:3f:7c:20:1f:5a:0a:08:b5: 66:d8:bc:12:10:8e:82:43:01:56:a1:24:89:ff:4b:a8:b6:1a: aa:b3:77:ae:93:a4:5f:2d:bf:7e:bb:e4:ac:84:89:bb:00:32: 31:be:d7:68:c9:b3:0d:ea:5d:d4:fe:22:7f:2c:af:e2:15:98: 9b:00:72:7a:03:c7:9f:87:e5:8a:4f:4e:bc:7f:ab:01:b3:43: ec:e6:7e:5a:c3:75:1f:b4:60:05:d4:68:45:30:f1:5d:06:01: 75:ad:75:b5:64:81:be:6d:db:14:7d:29:46:eb:d5:29:96:8e: 8c:83:3b:b8:23:33:c9:f8:b5:42:43:56:98:b4:46:53:b5:3f: 49:51:e8:5a:34:2b:61:34:4c:5a:b7:5e:c3:a8:3b:18:70:75: 31:0a:d2:cf:95:03:e1:28:0b:0d:51:28:5c:0b:db:a6:48:d3: 14:41:ea:54:e9:30:53:5a:ff:6b:d9:04:05:b9:e2:61:62:35: da:47:1a:60:23:5e:86:70:1e:fb:d9:86:7f:60:9b:59:b0:9a: e5:99:78:91:1f:a8:6e:b2:37:27:0b:e9:f1:b8:2e:c4:1f:77: 62:00:a0:d3:68:06:25:3f:62:f4:d8:b8:5f:cd:f0:0c:5d:5f: 04:99:a7:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzZBNjExMC8GA1UEBRMoQTRCODdGOURGOTZBMjA3MjYxQjk3QjRDOUUzOEM4M0I1 QzgwRDY2RTAeFw0yNDExMjMwNTM0MTNaFw0yNDExMzAwNTM0MTNaMBgxFjAUBgNV BAMTDTY3NDE2OTU1LTY5N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVLJkoPzE4T5weCw5eTQ1p+AK6qMt2fVXuoAp/KAYOEBTdqpnSMEqM1v4NFnHW 0j8T8pLlei7vWlXIysBBEuhTOt++3b795JE7TGz2LG54Q8ay/PuYO6hNpX9G1Ng3 wFrVwC42EBBPni44noC7W+BHYPd9rE62QLD0A8aQoeDYX7vks3uVR9ZcADMcC4JV qt7xQ8MVuukMnoxhEs+XjsHGHOkZYA5YJnuEBVW37iGecvJJA6V5p/TB/MqlbnQp uuCxjMH7NNemMbewDO++gYF/w0bk7BRRqIeAQzOA2CQADW0SR+JVoYF+Wjg+CGIP lPq0mH9JzO4WetUIHxRUzvznAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtmBWMj3V CrBhfEeHttS3gz20lNMwHwYDVR0jBBgwFoAUpLh/nflqIHJhuXtMnjjIO1yA1m4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNkE2L0EyQzYyMUEwNUYz OTExRUY4NURDOEUyREM0RjlBRTAyL3BMaF9uZmxxSUhKaHVYdE1uampJTzF5QTFt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcExoX25mbHFJSEpodVh0TW5qaklPMXlBMW00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NkE2L0EyQzYyMUEwNUYzOTExRUY4NURDOEUyREM0RjlBRTAyL3BMaF9uZmxxSUhK aHVYdE1uampJTzF5QTFtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA152R485eE6tCs/fCAfWgoItWbYvBIQjoJDAVahJIn/S6i2Gqqzd66T pF8tv3675KyEibsAMjG+12jJsw3qXdT+In8sr+IVmJsAcnoDx5+H5YpPTrx/qwGz Q+zmflrDdR+0YAXUaEUw8V0GAXWtdbVkgb5t2xR9KUbr1SmWjoyDO7gjM8n4tUJD Vpi0RlO1P0lR6Fo0K2E0TFq3XsOoOxhwdTEK0s+VA+EoCw1RKFwL26ZI0xRB6lTp MFNa/2vZBAW54mFiNdpHGmAjXoZwHvvZhn9gm1mwmuWZeJEfqG6yNycL6fG4LsQf d2IAoNNoBiU/YvTYuF/N8AxdXwSZp9I= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org