$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: nRUBvEAr73SxAG3ILVrqpnBG6bTRe8fOxzxfd/ga/pA= Subject key identifier: B0:30:47:A9:74:74:8D:AF:06:09:A2:22:BB:56:29:7E:AA:4E:34:8B Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: 5C Signing time: Sat 23 Nov 2024 05:04:32 +0000 Manifest this update: Sat 23 Nov 2024 05:04:32 +0000 Manifest next update: Sat 30 Nov 2024 05:04:32 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: wtE5kBqm5Pr4/ZkYK698r4mbKZImftL1eDQBo7zVBPA=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: XvWRCynYkFhCMaJDNTtD88NyWN5MgwjlrDADWnFFA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Nov 23 05:04:32 2024 GMT Not After : Nov 30 05:04:32 2024 GMT Subject: CN=67416260-10dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:34:4f:10:c5:43:33:b2:cd:ae:a2:4c:6a:8f: c9:e5:57:4c:41:f0:8d:9e:ab:5d:1e:4d:b7:eb:27: 15:d0:e0:af:c9:d6:91:14:43:f4:23:62:23:7a:4e: 48:7c:e7:ec:44:05:8e:cb:9f:93:29:4f:31:1a:a3: fc:aa:19:8a:f4:f7:8d:e3:31:34:3e:75:5c:f8:4a: 3c:a2:e0:6e:a3:67:18:d8:b2:56:4a:24:be:94:91: 24:97:09:79:1a:2f:01:d2:ed:69:00:35:06:45:6c: d2:7b:a0:32:0c:a2:de:ef:2c:37:6b:e8:ab:15:d1: 83:bb:4a:75:8d:f4:a4:51:36:45:64:9f:07:bb:ae: 05:de:4d:54:62:50:be:61:09:8f:ce:76:b8:a5:52: 8f:77:e4:32:c7:99:b5:67:40:10:65:f5:f5:cf:05: 55:94:c5:72:fb:74:fa:5a:e1:92:0b:d6:55:d0:ae: d5:8b:e8:76:80:65:91:c7:02:ca:c8:7e:6f:e3:26: 48:bb:5b:e0:63:e0:94:26:d7:61:00:5f:ac:de:0a: 5e:00:be:73:88:e4:40:bb:ec:b7:81:40:42:79:e1: 6f:9a:4c:b8:9b:3b:93:bb:6e:9c:c3:1e:87:7f:9b: 61:3f:68:8b:5e:8f:ce:db:26:8f:42:c8:44:af:45: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:30:47:A9:74:74:8D:AF:06:09:A2:22:BB:56:29:7E:AA:4E:34:8B X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:93:22:75:e0:80:3d:d4:10:39:8a:15:fb:15:0b:91:20:65: 34:d0:3c:e5:43:84:2d:3b:b0:bc:a3:21:f8:ac:87:da:3c:ec: 07:af:33:ea:4f:f7:6b:ea:cd:4f:7f:93:51:51:b0:cf:cf:b0: b4:21:d9:49:0d:0a:b3:e5:ff:8c:2a:83:6f:dd:06:fc:ad:ae: e0:1b:d7:75:97:39:ad:3b:da:39:1e:04:04:b3:41:fe:34:5b: 9b:b9:94:b6:71:19:73:b4:cb:0f:a7:f8:4a:79:7d:0f:10:d8: 90:af:7e:4d:3e:7c:bf:29:b8:44:5a:2b:e7:53:34:a1:66:d5: dc:e8:41:77:b9:8c:93:94:a8:ba:7d:50:05:3a:a4:b0:93:6f: 2f:f7:f1:43:16:5a:d1:89:70:9c:34:8b:59:0a:89:f1:53:f2: 24:8f:d6:54:06:00:00:db:5d:2d:07:d4:30:8c:43:a7:17:0f: 04:f7:3a:bb:44:9c:53:05:4c:1a:89:cb:6f:e2:64:f3:36:ab: b9:bd:b6:5d:6a:96:14:7d:b2:40:91:bf:60:e0:d0:e0:ab:55: 62:8a:ea:c6:e3:50:85:aa:e0:54:7b:fd:4b:19:d0:be:c4:9a: bd:f2:42:c3:a4:cc:71:80:0e:4d:c1:72:de:7c:4a:79:6e:21: 46:f6:8a:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE M0Q4OTExMC8GA1UEBRMoNDhGOTYwMDlCQ0Q0Q0UwNkNENjBEMTI1RjBBOTFCMjNG RUMzMDM2MDAeFw0yNDExMjMwNTA0MzJaFw0yNDExMzAwNTA0MzJaMBgxFjAUBgNV BAMTDTY3NDE2MjYwLTEwZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrNE8QxUMzss2uokxqj8nlV0xB8I2eq10eTbfrJxXQ4K/J1pEUQ/QjYiN6Tkh8 5+xEBY7Ln5MpTzEao/yqGYr0943jMTQ+dVz4Sjyi4G6jZxjYslZKJL6UkSSXCXka LwHS7WkANQZFbNJ7oDIMot7vLDdr6KsV0YO7SnWN9KRRNkVknwe7rgXeTVRiUL5h CY/OdrilUo935DLHmbVnQBBl9fXPBVWUxXL7dPpa4ZIL1lXQrtWL6HaAZZHHAsrI fm/jJki7W+Bj4JQm12EAX6zeCl4AvnOI5EC77LeBQEJ54W+aTLibO5O7bpzDHod/ m2E/aItej87bJo9CyESvRTIbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsDBHqXR0 ja8GCaIiu1YpfqpONIswHwYDVR0jBBgwFoAUSPlgCbzUzgbNYNEl8KkbI/7DA2Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzRDg5L0QzRUQ1ODU4MjBC ODExRUZCRTFDMjgxNUM0RjlBRTAyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEy QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU1BsZ0NielV6Z2JOWU5FbDhLa2JJXzdEQTJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz RDg5L0QzRUQ1ODU4MjBCODExRUZCRTFDMjgxNUM0RjlBRTAyL1NQbGdDYnpVemdi TllORWw4S2tiSV83REEyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGqTInXggD3UEDmKFfsVC5EgZTTQPOVDhC07sLyjIfish9o87AevM+pP 92vqzU9/k1FRsM/PsLQh2UkNCrPl/4wqg2/dBvytruAb13WXOa072jkeBASzQf40 W5u5lLZxGXO0yw+n+Ep5fQ8Q2JCvfk0+fL8puERaK+dTNKFm1dzoQXe5jJOUqLp9 UAU6pLCTby/38UMWWtGJcJw0i1kKifFT8iSP1lQGAADbXS0H1DCMQ6cXDwT3OrtE nFMFTBqJy2/iZPM2q7m9tl1qlhR9skCRv2Dg0OCrVWKK6sbjUIWq4FR7/UsZ0L7E mr3yQsOkzHGADk3Bct58SnluIUb2iuI= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org