$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: 5zczspDXelm9G+TUpGnztttuogOrnkxzuCxQDOGLJcY= Subject key identifier: DC:BE:7D:91:E3:61:40:D2:D9:28:67:D0:D7:42:BE:AE:21:6A:0B:CA Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 0330 Signing time: Sat 23 Nov 2024 00:39:34 +0000 Manifest this update: Sat 23 Nov 2024 00:39:33 +0000 Manifest next update: Sat 30 Nov 2024 00:39:33 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: xpQafd78tbPTgvZ6TK0YtnikRxaZN/f2NjVq0pn6Qf8=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: cRibNPJM0oziCi5gTyLkkOA1GmdRwoOWdhdIN3I1xvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Nov 23 00:39:33 2024 GMT Not After : Nov 30 00:39:33 2024 GMT Subject: CN=67412446-6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:d4:79:41:a6:9a:94:11:19:cb:b7:5a:c1: 58:88:03:e7:b0:97:79:b3:91:bf:0c:11:43:4d:65: d1:82:0e:54:7b:82:70:ac:a9:64:94:32:7b:aa:e1: f1:9b:eb:ab:8a:cf:50:1c:5c:0d:df:46:84:07:20: 5f:40:33:dd:f9:21:a7:ac:6b:89:9e:a9:b2:f7:4e: e7:7c:2f:18:96:13:31:45:31:c1:c3:fc:33:33:5f: 94:a8:00:ba:50:d5:23:3e:30:af:65:2e:9d:39:71: 2a:eb:b7:3b:53:bd:05:ec:72:ba:da:fd:06:db:fe: 71:df:f0:93:97:e8:a9:69:cc:b4:70:37:08:fa:a4: 8b:7c:be:51:88:6c:50:cd:31:d8:36:d5:3e:c5:22: 2a:7d:c6:35:d1:4d:eb:fb:f0:5c:f5:a9:a7:fc:e0: 4d:2f:72:5d:06:0a:d0:0e:fc:e9:7b:87:ad:a4:e5: 8f:0d:61:e5:9a:77:a8:2a:d8:cc:8a:61:66:37:ef: e7:b8:9f:11:e6:5c:e0:c3:ed:77:1e:81:d2:b7:09: 42:4a:b7:f3:bd:cd:6b:a5:0d:78:07:4d:06:07:45: 28:03:b4:98:d7:08:fd:9a:1d:80:35:3e:ae:4f:ea: a3:60:da:38:68:ae:11:c2:25:60:fc:ac:ed:98:bc: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BE:7D:91:E3:61:40:D2:D9:28:67:D0:D7:42:BE:AE:21:6A:0B:CA X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:c9:bd:c4:9c:4d:08:ed:10:93:e2:c1:0b:9d:82:30:6c:a4: 81:35:a8:25:01:e3:ad:8e:fa:b0:a5:af:85:33:95:da:a4:84: 18:f4:1d:7b:ba:50:31:9a:03:4a:fd:0f:d2:4d:8f:bd:d3:6c: f7:83:80:a7:34:70:d8:6e:0d:85:0b:f2:11:4c:4d:49:c5:34: 0b:92:04:ab:d0:7f:6d:d8:e8:36:55:df:b7:07:f0:e6:06:73: ce:8d:85:61:76:f0:cf:cf:26:64:b6:65:70:d7:5f:0a:35:3b: 86:cd:cb:c8:2b:44:3c:c8:52:24:2b:3c:1e:ca:5f:14:d6:3d: c9:d4:a3:38:83:cf:0a:3a:b7:b3:14:26:2a:c4:fa:89:9a:db: e8:ab:89:0f:01:d8:8a:d4:42:e7:54:d9:59:12:6b:d1:93:ad: 08:0e:69:9d:3a:54:81:f9:a0:67:48:5c:73:e4:95:7f:8e:84: 6f:27:69:ba:0c:9e:88:22:0d:c2:fd:d5:4a:86:6b:a8:2c:01: 80:78:b1:f3:06:ba:7f:1d:9c:a6:4b:27:7d:f2:3c:0d:90:f4: d5:57:56:dc:9b:1a:e8:e9:77:25:10:c2:72:7c:52:8d:e7:c3: e9:e8:0c:72:06:63:68:7a:d6:3b:e9:80:9e:f1:d1:3c:d2:ad: e7:d3:a5:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjQxMTIzMDAzOTMzWhcNMjQxMTMwMDAzOTMzWjAYMRYwFAYD VQQDEw02NzQxMjQ0Ni02MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudnUeUGmmpQRGcu3WsFYiAPnsJd5s5G/DBFDTWXRgg5Ue4JwrKlklDJ7quHx m+uris9QHFwN30aEByBfQDPd+SGnrGuJnqmy907nfC8YlhMxRTHBw/wzM1+UqAC6 UNUjPjCvZS6dOXEq67c7U70F7HK62v0G2/5x3/CTl+ipacy0cDcI+qSLfL5RiGxQ zTHYNtU+xSIqfcY10U3r+/Bc9amn/OBNL3JdBgrQDvzpe4etpOWPDWHlmneoKtjM imFmN+/nuJ8R5lzgw+13HoHStwlCSrfzvc1rpQ14B00GB0UoA7SY1wj9mh2ANT6u T+qjYNo4aK4RwiVg/KztmLz09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy+fZHj YUDS2Shn0NdCvq4hagvKMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYyb3EnE0I7RCT4sELnYIwbKSBNaglAeOtjvqwpa+FM5XapIQY9B17 ulAxmgNK/Q/STY+902z3g4CnNHDYbg2FC/IRTE1JxTQLkgSr0H9t2Og2Vd+3B/Dm BnPOjYVhdvDPzyZktmVw118KNTuGzcvIK0Q8yFIkKzweyl8U1j3J1KM4g88KOrez FCYqxPqJmtvoq4kPAdiK1ELnVNlZEmvRk60IDmmdOlSB+aBnSFxz5JV/joRvJ2m6 DJ6IIg3C/dVKhmuoLAGAeLHzBrp/HZymSyd98jwNkPTVV1bcmxro6XclEMJyfFKN 58Pp6AxyBmNoetY76YCe8dE80q3n06VR -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org