$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: rDaSg2RjDhBa943jz4c2KQBd7uCZH56rCLxEzMZiNlA= Subject key identifier: F1:22:02:D5:3B:10:3F:CC:83:B8:67:F2:B6:2D:D0:C1:21:A7:11:33 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 27BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 27B9 Signing time: Fri 22 Nov 2024 15:37:57 +0000 Manifest this update: Fri 22 Nov 2024 15:37:57 +0000 Manifest next update: Fri 29 Nov 2024 15:37:57 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: RyP1Y8riAQWUduS98cjzmnQZ6Rv65cEsDurU4iO3T2I=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: kQP/i0TgDmmtOwE7aHIlHdoy8Fb2ZdFNn27ehLkF3FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10173 (0x27bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Nov 22 15:37:57 2024 GMT Not After : Nov 29 15:37:57 2024 GMT Subject: CN=6740a555-53e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:0f:a0:30:72:cf:70:e6:71:7c:c4:fb:3d: 63:91:0c:da:bf:42:b4:e4:63:a7:2e:43:72:88:b5: 11:7f:57:23:5e:18:b4:db:61:5a:85:c1:f9:03:16: 7b:59:60:cb:18:7d:c8:7f:85:ed:ca:4b:6c:5b:38: 4e:44:b8:11:be:ff:4f:3e:8c:cc:4a:f0:38:68:ea: b9:95:85:79:9e:c8:0b:c6:19:56:ba:d3:d8:8b:51: 4d:08:4b:14:a0:a9:2c:d7:b5:5b:6f:ea:be:60:75: be:18:da:26:1b:06:d8:44:d7:2f:eb:82:66:b7:e1: 3f:ec:46:b8:bf:0c:09:21:fb:e6:84:8c:57:26:14: 67:cd:b3:0f:b6:14:5f:c1:06:1d:63:18:6c:3f:ba: ec:2d:1c:2c:e4:b4:e1:98:c6:bb:e7:65:fb:31:0f: b8:b2:c1:06:32:a9:23:d1:fc:69:aa:2d:48:83:40: de:61:41:61:0d:6f:4f:9e:65:89:8e:9b:92:6e:5f: 3c:5f:23:f1:f5:91:56:36:f1:83:b3:99:f7:21:6b: 9b:bb:59:0d:b8:ce:d2:a1:ed:f1:47:a6:29:3b:d6: 90:77:60:72:65:ca:db:43:fd:33:c1:bf:c6:1d:6c: 04:5e:74:7a:24:75:f9:93:4e:a3:8b:0c:9f:de:cd: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:02:D5:3B:10:3F:CC:83:B8:67:F2:B6:2D:D0:C1:21:A7:11:33 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4d:03:c1:ca:52:64:b7:59:71:a6:92:31:de:4d:88:f5:f3: 45:2c:a3:94:32:61:0a:71:73:7d:21:c6:e4:90:e7:5b:24:06: 1c:81:57:2c:e8:05:d4:3c:a5:e4:bc:16:86:de:69:23:7a:a8: 4f:b8:0e:3a:7e:2a:cb:89:cb:d2:79:bc:93:54:37:c6:64:cd: 37:08:ee:11:03:f6:15:89:47:e5:0a:58:26:3d:a8:46:92:a0: 72:e1:b5:e5:48:84:27:63:99:3b:13:47:7c:0f:1f:dc:5d:b4: ed:12:e5:c6:58:89:a6:1e:65:3a:2e:b1:88:8f:29:6e:a7:70: f3:34:3a:5b:9b:52:c3:54:be:2e:75:f8:68:7e:49:89:23:fd: d8:2d:9e:95:18:c2:37:89:77:a0:8d:f2:d7:89:a7:69:0f:e5: ae:36:9f:44:08:f2:87:79:74:69:74:c7:a6:44:01:18:5e:7b: 62:46:38:87:a3:cb:b0:52:6b:f9:cb:85:fd:1b:c8:88:a0:a4: 84:0c:94:b6:38:43:ca:02:fb:fa:75:62:16:07:70:c2:bc:26: e9:8c:bc:61:3d:68:da:b8:9d:22:df:a9:4f:88:94:8a:5a:18: 9f:35:6c:9d:96:56:1c:c4:f6:d9:e4:d4:c2:11:14:2d:c4:4b: f1:f6:35:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjQxMTIyMTUzNzU3WhcNMjQxMTI5MTUzNzU3WjAYMRYwFAYD VQQDEw02NzQwYTU1NS01M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYkPoDByz3DmcXzE+z1jkQzav0K05GOnLkNyiLURf1cjXhi022FahcH5AxZ7 WWDLGH3If4XtyktsWzhORLgRvv9PPozMSvA4aOq5lYV5nsgLxhlWutPYi1FNCEsU oKks17Vbb+q+YHW+GNomGwbYRNcv64Jmt+E/7Ea4vwwJIfvmhIxXJhRnzbMPthRf wQYdYxhsP7rsLRws5LThmMa752X7MQ+4ssEGMqkj0fxpqi1Ig0DeYUFhDW9PnmWJ jpuSbl88XyPx9ZFWNvGDs5n3IWubu1kNuM7Soe3xR6YpO9aQd2ByZcrbQ/0zwb/G HWwEXnR6JHX5k06jiwyf3s2tqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEiAtU7 ED/Mg7hn8rYt0MEhpxEzMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLTQPBylJkt1lxppIx3k2I9fNFLKOUMmEKcXN9IcbkkOdbJAYcgVcs 6AXUPKXkvBaG3mkjeqhPuA46firLicvSebyTVDfGZM03CO4RA/YViUflClgmPahG kqBy4bXlSIQnY5k7E0d8Dx/cXbTtEuXGWImmHmU6LrGIjylup3DzNDpbm1LDVL4u dfhofkmJI/3YLZ6VGMI3iXegjfLXiadpD+WuNp9ECPKHeXRpdMemRAEYXntiRjiH o8uwUmv5y4X9G8iIoKSEDJS2OEPKAvv6dWIWB3DCvCbpjLxhPWjauJ0i36lPiJSK WhifNWydllYcxPbZ5NTCERQtxEvx9jUE -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org