$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: tTgsfFeFomqdbpHl18MpytJrm3fw6szNugemWobtpcI= Subject key identifier: 02:D1:5F:DA:DE:0F:56:29:B5:2C:D3:4E:14:3A:A8:08:16:4A:F7:F2 Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: 0C Signing time: Wed 23 Oct 2024 06:45:55 +0000 Manifest this update: Wed 23 Oct 2024 06:45:55 +0000 Manifest next update: Wed 30 Oct 2024 06:45:55 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: sI/TANM0ouv3lCGkHkztOiAjBzgLrshVwxVASDORnkU=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: ieIL/C2PsSajQ+T9x9NCeatLKXOzRnjbWOmpv4r/01g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Oct 23 06:45:55 2024 GMT Not After : Oct 30 06:45:55 2024 GMT Subject: CN=67189ba3-7124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:af:0f:ae:29:53:65:c5:fb:c2:46:f6:3f: f4:92:e0:64:28:30:93:eb:24:f1:db:75:e4:78:e1: 22:ca:5f:cf:4a:1c:d2:14:f9:cf:48:82:c9:fb:f9: 28:e0:ff:64:33:b9:80:c9:95:83:3d:a4:0e:0e:5f: 34:73:65:0b:f4:a2:22:37:82:45:30:cc:5c:65:f1: 42:55:6f:4d:99:de:6a:0a:ac:f9:88:ed:f6:73:93: 9d:25:f4:c4:0e:d3:c4:5b:ce:fd:a8:db:3c:a9:db: d7:6f:0d:40:e7:82:ee:71:68:7c:38:78:5a:a5:9d: 83:8f:ea:4a:56:2e:bf:71:b6:a9:13:9d:a8:a5:b8: d8:68:60:8d:6c:e3:c4:d4:ce:fd:d2:e1:a9:39:b7: 01:3c:31:02:53:0f:e6:0b:ba:60:ef:dd:60:42:c8: a8:b6:02:24:da:6e:9d:ba:6a:50:37:72:66:17:e3: 6c:8d:16:d3:c6:ba:7e:08:66:95:20:d2:60:ad:1c: 7f:09:1a:d3:24:d4:7b:f0:89:aa:09:76:59:b4:a0: 43:ce:4c:fb:0b:69:30:5d:b2:ec:91:ff:54:a7:ce: 02:37:af:a9:de:07:31:52:61:a6:a0:b9:f2:55:be: 6b:52:23:4b:b5:08:3d:f2:3b:af:c2:2f:86:3a:d9: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D1:5F:DA:DE:0F:56:29:B5:2C:D3:4E:14:3A:A8:08:16:4A:F7:F2 X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0a:f5:c3:35:bf:0f:d0:2d:ad:b2:9d:a1:70:ca:83:72:29: a3:cd:c6:b7:64:7c:db:5d:27:1b:05:85:9e:04:ab:36:9c:7d: 16:3b:f5:1a:07:35:3e:c3:64:be:82:0c:ab:5b:2a:06:41:56: c8:54:85:a1:92:65:42:e8:fa:0e:de:ef:1a:2e:41:dd:53:65: 8c:6b:6b:3c:d5:4e:7c:b4:30:15:97:84:84:9f:c7:d0:f7:91: a7:f5:15:5a:0f:1f:49:a6:42:70:21:bc:04:39:e2:de:3e:7a: d9:4f:a3:00:0a:db:e5:3f:d6:2c:2d:bc:74:ee:43:d9:45:7d: ee:8d:17:ff:b8:83:7a:a6:85:34:ff:74:ed:91:bd:75:ba:2c: 4c:87:8c:3b:c6:af:1b:a5:b1:ba:a3:35:c8:6c:5c:12:7a:8d: 22:90:84:ac:ac:58:6d:a2:88:c6:e2:d5:57:71:be:a1:3c:ca: 6f:e6:cf:75:73:75:45:af:84:bd:6b:f6:76:e2:d5:08:81:61: 18:74:98:97:19:79:d9:8e:38:2f:f0:fe:3b:95:54:e4:73:c9: 03:f8:54:4e:50:89:62:f9:40:b0:84:5f:2a:68:0f:98:03:f6: e3:90:bf:bb:2c:7f:15:ac:12:6e:d9:8d:3f:42:3f:53:2c:31: 25:bc:ff:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoM0NCNEE5MDA0MThCRTlEQ0RDNUUwNEEwQkE2MkE4NERB ODVGRTZFMDAeFw0yNDEwMjMwNjQ1NTVaFw0yNDEwMzAwNjQ1NTVaMBgxFjAUBgNV BAMTDTY3MTg5YmEzLTcxMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKO68PrilTZcX7wkb2P/SS4GQoMJPrJPHbdeR44SLKX89KHNIU+c9Igsn7+Sjg /2QzuYDJlYM9pA4OXzRzZQv0oiI3gkUwzFxl8UJVb02Z3moKrPmI7fZzk50l9MQO 08Rbzv2o2zyp29dvDUDngu5xaHw4eFqlnYOP6kpWLr9xtqkTnailuNhoYI1s48TU zv3S4ak5twE8MQJTD+YLumDv3WBCyKi2AiTabp26alA3cmYX42yNFtPGun4IZpUg 0mCtHH8JGtMk1HvwiaoJdlm0oEPOTPsLaTBdsuyR/1SnzgI3r6neBzFSYaagufJV vmtSI0u1CD3yO6/CL4Y62cnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAtFf2t4P Vim1LNNOFDqoCBZK9/IwHwYDVR0jBBgwFoAUPLSpAEGL6dzcXgSgumKoTahf5uAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzg5Qzc4RjcwODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUExTcEFFR0w2ZHpjWGdTZ3VtS29UYWhmNXVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzg5Qzc4RjcwODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6 Y1hnU2d1bUtvVGFoZjV1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF8K9cM1vw/QLa2ynaFwyoNyKaPNxrdkfNtdJxsFhZ4EqzacfRY79RoH NT7DZL6CDKtbKgZBVshUhaGSZULo+g7e7xouQd1TZYxrazzVTny0MBWXhISfx9D3 kaf1FVoPH0mmQnAhvAQ54t4+etlPowAK2+U/1iwtvHTuQ9lFfe6NF/+4g3qmhTT/ dO2RvXW6LEyHjDvGrxulsbqjNchsXBJ6jSKQhKysWG2iiMbi1VdxvqE8ym/mz3Vz dUWvhL1r9nbi1QiBYRh0mJcZedmOOC/w/juVVORzyQP4VE5QiWL5QLCEXypoD5gD 9uOQv7ssfxWsEm7ZjT9CP1MsMSW8/z8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org