$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json) Hash identifier: R0xG36why2/yktSY2pf0qmXwb9TmztCKnjPjb6uSVyQ= Subject key identifier: 5C:0E:53:5A:4D:E0:22:FB:EB:06:E9:1F:0F:D6:D2:50:D4:91:04:A7 Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft Manifest number: 0398 Signing time: Sat 23 Nov 2024 00:19:35 +0000 Manifest this update: Sat 23 Nov 2024 00:19:35 +0000 Manifest next update: Sat 30 Nov 2024 00:19:35 +0000 Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: kC8xJUlNCUAm8oLJls4TII143VZ8UCYR73hJTWx6jsw=) 2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: +nAeLjb+TBEYVVPImLnPfEQNMqbzuQHLMiBByx+ZAiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Validity Not Before: Nov 23 00:19:35 2024 GMT Not After : Nov 30 00:19:35 2024 GMT Subject: CN=67411f97-c6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:01:ea:db:3d:b7:d2:46:10:bf:54:c2:d8: 57:e0:c9:65:60:d9:d0:dd:cb:5b:06:75:18:c1:de: 77:24:2f:02:0d:07:41:53:5a:be:d5:a8:90:6c:24: 6c:cd:0f:5b:ac:5b:b0:c8:37:cb:10:91:33:09:8d: 91:ff:1f:84:40:0b:7e:8c:e5:0b:e3:e4:5a:c6:e1: 98:42:7c:d0:83:92:87:5f:f2:6f:79:82:b0:8e:0b: 13:18:f0:a4:33:45:e4:77:2e:59:de:d2:ea:4b:4e: 49:f3:64:c1:d7:ca:58:b5:e7:7f:02:75:80:b1:1d: bf:31:98:d8:d8:fc:f6:a4:6b:5d:44:47:3c:74:9b: 8a:43:6b:5c:f1:cc:9f:40:7f:87:0d:4e:6d:ba:71: 44:6d:26:6d:ab:1a:ae:9f:7a:0e:08:04:a1:f3:29: f5:f7:6b:f2:fe:d0:e0:ef:c2:ed:4a:a5:bc:f9:88: 2e:9e:8e:da:c1:03:4e:6d:91:4d:4c:09:3e:d9:12: f7:24:38:2b:61:e5:13:b3:d8:dc:c2:60:92:be:ae: 4d:bf:e2:ae:1f:b3:b9:af:38:a1:22:b1:b9:94:1f: 69:9c:f1:10:cc:34:db:04:03:ec:fc:a7:13:5c:4a: 79:80:9c:b7:16:68:6c:81:26:5b:95:08:8f:77:65: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:53:5A:4D:E0:22:FB:EB:06:E9:1F:0F:D6:D2:50:D4:91:04:A7 X509v3 Authority Key Identifier: keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1e:9c:a6:4b:d5:09:43:6e:1e:88:fd:4f:85:b0:cc:84:1b: fa:7c:34:09:e4:24:99:47:b2:91:6d:9c:e4:37:68:74:90:30: 71:77:5c:8e:7c:c7:89:25:46:00:7d:68:99:ee:3d:51:2e:be: 8c:87:b7:f3:7f:59:70:ed:3a:c3:cb:ea:86:68:fb:77:93:c0: df:79:38:3c:97:d9:c4:3f:c4:29:dd:9e:eb:27:65:80:c9:1c: 37:37:72:18:37:7a:1d:a3:1c:f0:8c:b7:ee:bb:3a:07:20:ef: 82:df:a9:64:48:11:e4:c6:03:d0:f0:06:79:1a:fd:b7:9c:ad: 87:62:f7:d3:de:c2:86:ed:ba:d5:ca:c1:59:07:a0:06:d5:fd: 8e:f4:40:03:32:11:c2:25:1b:3e:e3:95:b4:69:b9:83:fa:60: 2c:b2:09:e2:45:b9:eb:2a:6a:d6:50:41:c4:4d:23:e2:21:a7: 0c:46:25:3f:f1:3a:01:2e:ca:af:e9:54:69:27:cf:52:8b:e3: 7a:77:35:47:5b:44:34:c8:a3:dc:df:3f:ca:9b:e3:28:c7:b7: 13:b2:41:af:de:a2:87:ab:db:be:c7:f7:87:a4:5a:76:ee:51: e0:0f:ea:85:4d:90:a1:30:f9:d2:ed:6c:06:c7:e9:12:a0:38: 7e:59:3f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2 ODlGNDZFM0YwHhcNMjQxMTIzMDAxOTM1WhcNMjQxMTMwMDAxOTM1WjAYMRYwFAYD VQQDEw02NzQxMWY5Ny1jNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFsB6ts9t9JGEL9UwthX4MllYNnQ3ctbBnUYwd53JC8CDQdBU1q+1aiQbCRs zQ9brFuwyDfLEJEzCY2R/x+EQAt+jOUL4+RaxuGYQnzQg5KHX/JveYKwjgsTGPCk M0Xkdy5Z3tLqS05J82TB18pYted/AnWAsR2/MZjY2Pz2pGtdREc8dJuKQ2tc8cyf QH+HDU5tunFEbSZtqxqun3oOCASh8yn192vy/tDg78LtSqW8+Yguno7awQNObZFN TAk+2RL3JDgrYeUTs9jcwmCSvq5Nv+KuH7O5rzihIrG5lB9pnPEQzDTbBAPs/KcT XEp5gJy3FmhsgSZblQiPd2UimQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwOU1pN 4CL76wbpHw/W0lDUkQSnMB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3 MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsHpymS9UJQ24eiP1PhbDMhBv6fDQJ5CSZR7KRbZzkN2h0kDBxd1yO fMeJJUYAfWiZ7j1RLr6Mh7fzf1lw7TrDy+qGaPt3k8DfeTg8l9nEP8Qp3Z7rJ2WA yRw3N3IYN3odoxzwjLfuuzoHIO+C36lkSBHkxgPQ8AZ5Gv23nK2HYvfT3sKG7brV ysFZB6AG1f2O9EADMhHCJRs+45W0abmD+mAssgniRbnrKmrWUEHETSPiIacMRiU/ 8ToBLsqv6VRpJ89Si+N6dzVHW0Q0yKPc3z/Km+Mox7cTskGv3qKHq9u+x/eHpFp2 7lHgD+qFTZChMPnS7WwGx+kSoDh+WT9Y -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:51 2024 by rpki-client on console-fra.rpki-client.org