$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: hPP91f+ZWSkS4mZ62KHjdozEcI5tLVpmea6ET2MIfao= Subject key identifier: 48:9C:D2:8A:58:0B:90:D8:79:0E:C1:57:27:F1:AC:CA:F8:3F:22:2D Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:34:12 +0000 Manifest this update: Wed 23 Oct 2024 06:34:12 +0000 Manifest next update: Wed 30 Oct 2024 06:34:12 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: 9av27fmunK5d6ALLTvIBnTP0pWU6ZrlYKfUHqyM59Js=) 2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Oct 23 06:34:12 2024 GMT Not After : Oct 30 06:34:12 2024 GMT Subject: CN=671898e4-ebbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:b7:32:9a:80:4d:aa:57:d0:2e:19:06:85: ae:52:24:e6:bd:14:5d:09:c3:98:b5:18:91:57:19: 6c:48:fc:2d:4a:e4:25:36:16:c6:b6:8a:93:c6:37: a0:be:56:d7:8e:47:ee:fb:7c:6c:3b:59:98:5e:ab: b4:00:dc:83:1b:34:ce:73:de:d2:b7:9c:49:ec:4f: da:56:59:de:f0:ee:9c:8a:40:bc:3c:f2:c2:6c:7c: a0:e5:68:a5:62:e8:94:b8:c9:60:04:0a:68:e8:f1: 90:48:7b:a2:be:03:ca:b5:e8:09:4f:07:24:7a:d7: 7c:03:b0:ec:c2:0b:11:ef:b7:05:73:0f:3f:90:50: 10:43:a6:d0:a7:a9:bb:ac:ce:ec:cb:5b:57:bf:15: 21:97:e2:6a:28:db:d7:81:10:50:9d:94:32:d0:49: 7d:3b:22:40:83:c5:da:61:8b:63:e2:31:47:25:85: af:44:a4:a9:5c:18:ad:cc:58:f8:ad:a2:72:07:6c: 61:98:d4:73:e9:5d:05:02:c7:8c:e4:90:72:42:d3: a4:cc:94:f0:fa:b3:dc:74:64:b6:e6:b3:30:98:2c: c7:01:90:76:82:09:69:bc:78:30:45:96:d2:16:10: 68:90:45:4f:c0:36:47:79:35:63:ee:54:23:a4:33: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9C:D2:8A:58:0B:90:D8:79:0E:C1:57:27:F1:AC:CA:F8:3F:22:2D X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a9:52:d8:82:78:f4:07:4d:42:d5:f9:42:d2:86:9c:83:61: 66:40:ad:d4:a4:5e:36:2f:f0:dd:c5:5c:7b:fb:77:9a:fe:ce: 18:01:2c:e1:d2:d7:d5:92:87:3d:19:f5:42:52:43:ba:48:4b: a4:f0:c5:7b:40:d7:84:89:4c:f4:a2:16:50:2a:d3:36:c4:80: ac:85:15:84:a2:bc:b5:db:45:96:de:70:ac:57:38:1c:60:ea: 48:64:62:34:5a:c6:d9:9f:ef:8c:ab:bb:56:a5:e3:97:4f:b3: 7e:2f:3a:2f:a6:58:40:dc:f3:11:ad:d4:23:03:d9:b2:e5:f6: 01:28:0d:4e:52:9a:5e:9a:f6:3a:83:78:0b:b2:de:38:f1:44: 2d:ea:75:bf:ec:3a:0a:ad:e0:1d:89:bc:a2:68:ea:e0:26:2c: ba:3e:3e:f6:db:27:12:01:cb:e4:65:3f:51:f7:30:ae:67:88: 2d:bb:e6:39:b1:fd:54:4a:fc:e0:bd:a1:70:93:58:3b:65:83: 12:68:18:89:cc:f6:55:e6:98:33:e1:dc:c6:14:0e:84:0c:89: 39:a3:72:33:3a:09:41:77:ae:28:8f:cb:57:29:d4:32:74:2a: 22:37:97:0d:84:44:c2:a6:2b:fa:21:db:39:c5:57:5c:e8:bb: a1:e8:73:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzE3NTExMC8GA1UEBRMoNzI1NzkyM0Q2NzcwQzU2Nzg5MTlCMDdDQkNGQThBRjhC OUM1MDUzRjAeFw0yNDEwMjMwNjM0MTJaFw0yNDEwMzAwNjM0MTJaMBgxFjAUBgNV BAMTDTY3MTg5OGU0LWViYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq0bcymoBNqlfQLhkGha5SJOa9FF0Jw5i1GJFXGWxI/C1K5CU2Fsa2ipPGN6C+ VteOR+77fGw7WZheq7QA3IMbNM5z3tK3nEnsT9pWWd7w7pyKQLw88sJsfKDlaKVi 6JS4yWAECmjo8ZBIe6K+A8q16AlPByR613wDsOzCCxHvtwVzDz+QUBBDptCnqbus zuzLW1e/FSGX4moo29eBEFCdlDLQSX07IkCDxdphi2PiMUclha9EpKlcGK3MWPit onIHbGGY1HPpXQUCx4zkkHJC06TMlPD6s9x0ZLbmszCYLMcBkHaCCWm8eDBFltIW EGiQRU/ANkd5NWPuVCOkM3U9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSJzSilgL kNh5DsFXJ/Gsyvg/Ii0wHwYDVR0jBBgwFoAUcleSPWdwxWeJGbB8vPqK+LnFBT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0U5QTA5MkI4NjhG RDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY2xlU1BXZHd4V2VKR2JCOHZQcUstTG5GQlQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTc1L0U5QTA5MkI4NjhGRDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdl SkdiQjh2UHFLLUxuRkJUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFSpUtiCePQHTULV+ULShpyDYWZArdSkXjYv8N3FXHv7d5r+zhgBLOHS 19WShz0Z9UJSQ7pIS6TwxXtA14SJTPSiFlAq0zbEgKyFFYSivLXbRZbecKxXOBxg 6khkYjRaxtmf74yru1al45dPs34vOi+mWEDc8xGt1CMD2bLl9gEoDU5Sml6a9jqD eAuy3jjxRC3qdb/sOgqt4B2JvKJo6uAmLLo+PvbbJxIBy+RlP1H3MK5niC275jmx /VRK/OC9oXCTWDtlgxJoGInM9lXmmDPh3MYUDoQMiTmjcjM6CUF3riiPy1cp1DJ0 KiI3lw2ERMKmK/oh2znFV1zou6Hoc/M= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org