$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: qPA3cJNLRu3YxEAe2psXyyXCi8xIEvU4XoVfb5PAXXY= Subject key identifier: 5A:FB:56:4C:D9:75:BB:39:EF:F2:DD:77:DF:DF:C5:F4:A1:78:F8:C5 Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: 1B Signing time: Thu 21 Nov 2024 05:57:34 +0000 Manifest this update: Thu 21 Nov 2024 05:57:34 +0000 Manifest next update: Thu 28 Nov 2024 05:57:34 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: qH9z0VdOm0WWj0EmvQZsEvpg8od9xjJDV6kOU6kRUF4=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: ieIL/C2PsSajQ+T9x9NCeatLKXOzRnjbWOmpv4r/01g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Nov 21 05:57:34 2024 GMT Not After : Nov 28 05:57:34 2024 GMT Subject: CN=673ecbce-4f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:a1:54:5c:b1:b6:cc:2f:a3:df:d0:b4:52: 7f:4f:36:36:b3:82:f9:86:c5:82:2f:7d:8f:bd:71: 91:99:9e:ea:d9:8b:79:42:97:3d:2a:76:bd:5a:c8: 39:8c:32:c4:cd:f9:ca:fd:49:06:9d:51:60:15:6f: 12:db:bf:43:e8:02:69:e5:96:7d:d3:b1:30:cc:54: 85:67:5d:c4:3f:e1:e0:af:82:af:95:f2:9f:62:8d: 21:1f:18:d6:b6:c3:7f:b4:b2:6c:15:c3:53:b8:b3: eb:be:7f:04:f8:59:10:83:44:af:00:69:ba:ff:fa: 65:3e:64:58:ec:56:b6:99:c6:09:ab:45:9d:99:98: e1:be:79:b0:18:06:18:3d:f9:cd:33:47:62:7a:25: fc:62:13:2a:ab:51:f8:89:36:4e:c4:e4:31:bb:af: ca:f0:bb:50:ae:85:ee:ac:63:df:b6:ad:a9:a6:c3: 63:48:c6:2d:47:64:d9:cd:bf:1b:16:80:a1:0e:f3: cd:5d:92:b2:89:04:79:40:d0:a6:20:e6:cb:b7:b5: f0:0b:ca:00:32:19:a1:8f:a6:c7:1c:56:a9:79:57: 27:32:9a:3e:e6:58:e9:87:cf:fd:86:87:52:85:f2: 30:70:ea:78:3f:af:16:f0:9a:18:fb:20:48:7b:1d: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:56:4C:D9:75:BB:39:EF:F2:DD:77:DF:DF:C5:F4:A1:78:F8:C5 X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:1a:89:c6:65:d2:83:a2:96:36:b0:1d:ba:cb:0f:44:02:99: 43:2d:50:91:c9:f0:ae:c0:ac:47:33:5f:1e:53:a0:65:ca:6d: f2:16:b4:f9:da:4c:9c:c9:66:75:5d:02:4c:de:2f:ed:17:c5: bb:11:8d:f7:34:d3:ae:ac:f6:aa:6a:15:da:a1:6f:2f:71:68: c9:37:d4:e5:d1:1b:7f:6f:e1:9a:ef:ec:fc:de:88:8a:2a:11: f8:71:30:c6:b4:17:51:ca:ec:76:78:14:f5:54:c3:69:1d:ea: 52:69:44:92:b0:6e:b9:94:77:92:78:21:41:27:05:6e:f9:34: bd:86:c8:d3:de:02:cb:66:3f:94:66:3c:62:17:ec:e9:7c:aa: e3:cd:a7:03:02:7b:68:eb:64:56:db:c8:98:b2:da:16:1c:f3: 80:db:64:b0:eb:59:2f:9f:f0:f7:ae:4b:a0:b2:ee:ff:14:0a: 02:da:7c:3b:02:97:3b:15:b8:db:e2:09:c7:b8:b2:44:ed:a6: b6:20:26:99:1c:03:ee:20:8b:1b:04:05:92:61:f8:a2:69:fb: 83:43:21:27:00:6f:f5:40:71:84:df:d6:6f:7c:70:e7:6f:55: 8f:49:5d:09:cf:7a:5d:45:81:ac:23:bf:9a:92:7f:37:40:aa: 1c:7f:eb:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoM0NCNEE5MDA0MThCRTlEQ0RDNUUwNEEwQkE2MkE4NERB ODVGRTZFMDAeFw0yNDExMjEwNTU3MzRaFw0yNDExMjgwNTU3MzRaMBgxFjAUBgNV BAMTDTY3M2VjYmNlLTRmOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC42qFUXLG2zC+j39C0Un9PNjazgvmGxYIvfY+9cZGZnurZi3lClz0qdr1ayDmM MsTN+cr9SQadUWAVbxLbv0PoAmnlln3TsTDMVIVnXcQ/4eCvgq+V8p9ijSEfGNa2 w3+0smwVw1O4s+u+fwT4WRCDRK8Aabr/+mU+ZFjsVraZxgmrRZ2ZmOG+ebAYBhg9 +c0zR2J6JfxiEyqrUfiJNk7E5DG7r8rwu1Cuhe6sY9+2rammw2NIxi1HZNnNvxsW gKEO881dkrKJBHlA0KYg5su3tfALygAyGaGPpsccVql5Vycymj7mWOmHz/2Gh1KF 8jBw6ng/rxbwmhj7IEh7HZ/pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWvtWTNl1 uznv8t1339/F9KF4+MUwHwYDVR0jBBgwFoAUPLSpAEGL6dzcXgSgumKoTahf5uAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzg5Qzc4RjcwODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUExTcEFFR0w2ZHpjWGdTZ3VtS29UYWhmNXVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzg5Qzc4RjcwODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6 Y1hnU2d1bUtvVGFoZjV1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALYaicZl0oOiljawHbrLD0QCmUMtUJHJ8K7ArEczXx5ToGXKbfIWtPna TJzJZnVdAkzeL+0XxbsRjfc0066s9qpqFdqhby9xaMk31OXRG39v4Zrv7PzeiIoq EfhxMMa0F1HK7HZ4FPVUw2kd6lJpRJKwbrmUd5J4IUEnBW75NL2GyNPeAstmP5Rm PGIX7Ol8quPNpwMCe2jrZFbbyJiy2hYc84DbZLDrWS+f8PeuS6Cy7v8UCgLafDsC lzsVuNviCce4skTtprYgJpkcA+4gixsEBZJh+KJp+4NDIScAb/VAcYTf1m98cOdv VY9JXQnPel1Fgawjv5qSfzdAqhx/68A= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org