$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: leOa98BPXhQ/SkloqLNxFG6OUNzzkfzC4w6IaTQYxv4= Subject key identifier: CA:B0:02:A5:25:6F:44:AB:3F:BA:9E:06:DE:DA:44:87:57:E4:E9:63 Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: 2C Signing time: Sat 23 Nov 2024 05:38:32 +0000 Manifest this update: Sat 23 Nov 2024 05:38:32 +0000 Manifest next update: Sat 30 Nov 2024 05:38:32 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: PxuQpYUL/B+sNjzkABQRTxkL5/yKh6mak+v25OpJCYc=) 2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Nov 23 05:38:32 2024 GMT Not After : Nov 30 05:38:32 2024 GMT Subject: CN=67416a58-2dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7c:4c:b5:58:b1:dd:87:8e:8a:00:b0:c9:2f: 49:40:db:4d:ff:68:c4:21:4f:ae:89:9b:d4:aa:c0: d0:77:b5:57:81:04:57:b0:70:31:52:47:12:81:68: 6c:38:26:a8:d1:9b:7c:4b:fa:d1:2b:44:58:4c:f9: 5d:d0:3a:0e:0a:f7:af:c1:6f:ed:10:c5:60:94:4d: 39:c8:d6:e3:bb:08:d1:c9:f2:0c:6f:a6:52:71:2a: eb:ad:cb:0b:75:ea:93:82:2f:da:49:26:76:e6:a2: d2:f2:85:41:f9:ef:76:0c:5b:80:ef:24:d0:22:d2: ad:85:44:18:da:fb:ea:79:21:ff:53:22:2b:6a:9a: 03:11:2e:f1:96:5d:45:66:d0:a4:12:d3:ba:24:66: f4:3d:5f:09:8d:a2:9a:74:0f:9d:fd:2b:87:15:33: 05:1d:e2:56:74:1c:73:20:57:40:c9:39:35:8e:1f: 1d:7e:81:4b:c7:26:a3:7a:ab:ba:8d:d7:a3:9c:db: 0e:06:2e:74:34:7d:fa:54:f5:98:9f:5d:66:c0:3d: 0e:7d:c4:15:88:15:96:c7:55:3f:14:e1:88:a9:08: e5:f2:84:68:6e:fc:03:40:a7:cc:ba:42:1e:b1:4e: 86:16:60:87:cc:34:4d:46:f8:fe:d0:6f:89:12:17: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B0:02:A5:25:6F:44:AB:3F:BA:9E:06:DE:DA:44:87:57:E4:E9:63 X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:31:68:80:26:b8:72:2f:a6:69:89:7d:66:a4:3c:63:16:79: 52:b9:20:7d:03:a6:56:cc:32:6d:4d:e9:69:b9:8f:f4:fc:0f: 4a:97:71:69:f2:40:5b:49:fa:e7:5e:fe:24:15:95:00:b4:f9: 30:9f:6f:6c:e0:ac:6a:2d:bd:f6:4b:5d:6d:d6:b0:dc:53:00: bc:39:7b:5a:2e:52:1c:c4:21:ba:88:05:52:f3:7c:f5:79:59: e0:b1:3e:d6:93:e9:63:7d:9b:75:da:9d:f9:4a:38:7a:6f:d2: 5a:fc:9b:6f:77:c0:78:b9:2c:17:41:25:1e:96:86:5b:d0:c9: 73:4e:ee:b3:ab:52:d0:b1:bf:73:62:34:47:47:54:fe:47:60: 71:12:6a:24:60:94:18:bd:b3:c1:15:b8:92:ae:03:39:ba:f1: bf:5a:b4:84:bc:2c:ac:18:4f:3a:88:27:57:e0:ff:79:ad:ec: 20:df:b3:e8:2b:e5:3a:7b:a3:b6:56:cb:00:a3:3c:74:e3:39: 4e:af:3d:10:8c:46:f2:b8:63:35:6c:fa:94:1c:8d:69:15:94: a8:3a:c7:08:97:fe:23:af:f3:c5:10:57:62:89:b1:ed:35:23: 87:53:24:5e:cb:26:f5:a1:fc:58:42:1a:4d:03:56:35:61:ee: 67:90:e8:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzE3NTExMC8GA1UEBRMoNzI1NzkyM0Q2NzcwQzU2Nzg5MTlCMDdDQkNGQThBRjhC OUM1MDUzRjAeFw0yNDExMjMwNTM4MzJaFw0yNDExMzAwNTM4MzJaMBgxFjAUBgNV BAMTDTY3NDE2YTU4LTJkY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqfEy1WLHdh46KALDJL0lA203/aMQhT66Jm9SqwNB3tVeBBFewcDFSRxKBaGw4 JqjRm3xL+tErRFhM+V3QOg4K96/Bb+0QxWCUTTnI1uO7CNHJ8gxvplJxKuutywt1 6pOCL9pJJnbmotLyhUH573YMW4DvJNAi0q2FRBja++p5If9TIitqmgMRLvGWXUVm 0KQS07okZvQ9XwmNopp0D539K4cVMwUd4lZ0HHMgV0DJOTWOHx1+gUvHJqN6q7qN 16Oc2w4GLnQ0ffpU9ZifXWbAPQ59xBWIFZbHVT8U4YipCOXyhGhu/ANAp8y6Qh6x ToYWYIfMNE1G+P7Qb4kSF+JxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyrACpSVv RKs/up4G3tpEh1fk6WMwHwYDVR0jBBgwFoAUcleSPWdwxWeJGbB8vPqK+LnFBT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0U5QTA5MkI4NjhG RDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY2xlU1BXZHd4V2VKR2JCOHZQcUstTG5GQlQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTc1L0U5QTA5MkI4NjhGRDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdl SkdiQjh2UHFLLUxuRkJUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIxaIAmuHIvpmmJfWakPGMWeVK5IH0DplbMMm1N6Wm5j/T8D0qXcWny QFtJ+ude/iQVlQC0+TCfb2zgrGotvfZLXW3WsNxTALw5e1ouUhzEIbqIBVLzfPV5 WeCxPtaT6WN9m3XanflKOHpv0lr8m293wHi5LBdBJR6WhlvQyXNO7rOrUtCxv3Ni NEdHVP5HYHESaiRglBi9s8EVuJKuAzm68b9atIS8LKwYTzqIJ1fg/3mt7CDfs+gr 5Tp7o7ZWywCjPHTjOU6vPRCMRvK4YzVs+pQcjWkVlKg6xwiX/iOv88UQV2KJse01 I4dTJF7LJvWh/FhCGk0DVjVh7meQ6IE= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org