$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: xXI6DZuGTfEj+iwDoZQ2PH2NnQXrAZ6dJRs2qTUPHHU= Subject key identifier: 98:2D:5E:70:34:43:2E:D1:48:B1:96:40:28:86:D0:D9:88:75:E2:DC Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: 39 Signing time: Sun 15 Sep 2024 09:57:34 +0000 Manifest this update: Sun 15 Sep 2024 09:57:34 +0000 Manifest next update: Sun 22 Sep 2024 09:57:34 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: hb8/71K1WWfX3Yra8m9CrwXYdQk2w4cbRPrauB6UlT4=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: XvWRCynYkFhCMaJDNTtD88NyWN5MgwjlrDADWnFFA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Sep 15 09:57:34 2024 GMT Not After : Sep 22 09:57:34 2024 GMT Subject: CN=66e6af8e-437d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:97:47:3d:21:8c:bb:57:54:b8:57:47:25: ef:38:89:b0:3b:f6:a4:28:2e:74:cd:6c:a0:b4:10: aa:ba:d9:a3:dc:fc:6c:ff:c7:59:e2:b7:fe:b4:3d: bc:f6:fa:c9:b8:6f:40:64:5c:b2:0d:c1:f3:24:70: 25:7d:e8:57:ae:a8:c0:d4:a6:39:7c:97:1f:17:a1: f1:a2:d7:be:63:c4:51:1c:d2:11:d5:b1:50:aa:98: 26:95:b4:56:57:0c:8d:95:5f:98:e2:cc:41:78:d3: 91:39:c7:75:b2:5f:b7:9e:88:f7:c4:6c:ba:72:63: 75:fb:1e:32:ec:ca:cc:c7:cf:1a:67:c5:1f:e0:7d: 16:9b:cf:af:65:c4:6c:4d:8c:13:ea:4a:b2:f5:ea: 0c:7d:ff:75:1c:70:37:2e:0b:7c:3a:f5:e5:c2:70: bd:6d:3d:6f:4f:a0:67:6f:90:85:fe:4f:e3:d8:e9: 69:ff:70:5a:e5:e8:3f:ab:c9:61:bc:be:39:84:d1: b9:93:6e:09:66:f1:e8:35:d5:1c:a1:68:a3:53:70: 02:59:b2:95:0b:39:aa:d7:13:93:4b:7b:21:98:b5: da:66:66:8d:44:18:fd:f8:9f:50:36:58:a1:d1:b5: f9:54:7c:68:f2:70:56:96:63:e8:73:b3:74:a6:f6: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2D:5E:70:34:43:2E:D1:48:B1:96:40:28:86:D0:D9:88:75:E2:DC X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:68:dd:c7:e6:53:a1:25:93:73:c7:8e:65:28:1c:20:32:ef: bb:e1:c5:d6:b0:78:f9:9e:8a:8d:a9:55:b5:be:03:0c:b3:c5: f6:6a:6d:b8:2b:c6:08:5d:0a:2d:c3:5c:63:e4:97:24:46:3f: 9a:20:ef:c0:f7:89:70:bd:8b:71:94:cf:65:97:b0:68:05:15: 4d:da:2c:5b:ca:76:ef:fe:00:8b:65:21:09:98:8c:40:a3:b4: 82:91:14:eb:44:fa:92:6b:d7:7b:89:2e:c0:10:a5:c3:bf:cc: d7:5a:50:78:0e:94:28:e4:0a:df:30:5f:f0:2a:ab:6e:87:3f: 2a:53:c5:6b:cc:5d:41:70:19:8f:98:f7:07:08:57:c3:4b:40: 85:30:c9:e8:f4:e4:9c:8a:be:ba:40:6e:41:28:cf:90:27:80: c1:7a:91:0d:51:ff:0a:f8:de:da:86:a5:e9:c2:b0:cd:32:1f: 72:dd:ac:a3:ae:ce:05:71:87:22:b5:92:ab:44:98:1a:df:47: 22:41:72:d5:79:a3:18:fa:ea:52:30:30:8d:58:32:02:5f:c6: 13:fd:73:66:53:bc:77:6f:c2:46:cd:04:e6:49:13:4c:f2:8d: ff:1f:c7:97:2c:ec:2d:f2:df:9d:0e:4b:2a:f4:34:25:64:b3: ce:4a:71:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE M0Q4OTExMC8GA1UEBRMoNDhGOTYwMDlCQ0Q0Q0UwNkNENjBEMTI1RjBBOTFCMjNG RUMzMDM2MDAeFw0yNDA5MTUwOTU3MzRaFw0yNDA5MjIwOTU3MzRaMBgxFjAUBgNV BAMTDTY2ZTZhZjhlLTQzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzLJdHPSGMu1dUuFdHJe84ibA79qQoLnTNbKC0EKq62aPc/Gz/x1nit/60Pbz2 +sm4b0BkXLINwfMkcCV96FeuqMDUpjl8lx8XofGi175jxFEc0hHVsVCqmCaVtFZX DI2VX5jizEF405E5x3WyX7eeiPfEbLpyY3X7HjLsyszHzxpnxR/gfRabz69lxGxN jBPqSrL16gx9/3UccDcuC3w69eXCcL1tPW9PoGdvkIX+T+PY6Wn/cFrl6D+ryWG8 vjmE0bmTbglm8eg11RyhaKNTcAJZspULOarXE5NLeyGYtdpmZo1EGP34n1A2WKHR tflUfGjycFaWY+hzs3Sm9ijhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmC1ecDRD LtFIsZZAKIbQ2Yh14twwHwYDVR0jBBgwFoAUSPlgCbzUzgbNYNEl8KkbI/7DA2Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzRDg5L0QzRUQ1ODU4MjBC ODExRUZCRTFDMjgxNUM0RjlBRTAyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEy QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU1BsZ0NielV6Z2JOWU5FbDhLa2JJXzdEQTJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz RDg5L0QzRUQ1ODU4MjBCODExRUZCRTFDMjgxNUM0RjlBRTAyL1NQbGdDYnpVemdi TllORWw4S2tiSV83REEyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlo3cfmU6Elk3PHjmUoHCAy77vhxdawePmeio2pVbW+AwyzxfZqbbgr xghdCi3DXGPklyRGP5og78D3iXC9i3GUz2WXsGgFFU3aLFvKdu/+AItlIQmYjECj tIKRFOtE+pJr13uJLsAQpcO/zNdaUHgOlCjkCt8wX/Aqq26HPypTxWvMXUFwGY+Y 9wcIV8NLQIUwyej05JyKvrpAbkEoz5AngMF6kQ1R/wr43tqGpenCsM0yH3LdrKOu zgVxhyK1kqtEmBrfRyJBctV5oxj66lIwMI1YMgJfxhP9c2ZTvHdvwkbNBOZJE0zy jf8fx5cs7C3y350OSyr0NCVks85KcaQ= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:25 2024 by rpki-client on console-ams.rpki-client.org