$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: x/oB7pYTWbzV7mSmSO5PHPMJfCV+6o2yo0B8sXLIEnU= Subject key identifier: 69:85:C3:73:9A:D0:1F:92:A4:2A:6E:43:55:90:70:1B:CB:E1:52:1E Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 0341 Signing time: Sat 23 Nov 2024 00:36:36 +0000 Manifest this update: Sat 23 Nov 2024 00:36:36 +0000 Manifest next update: Sat 30 Nov 2024 00:36:36 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: SKRHBdt1ibWkC5Nek1S7vXLQo3N/eq+5bBNDwxnabdE=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Nov 23 00:36:36 2024 GMT Not After : Nov 30 00:36:36 2024 GMT Subject: CN=67412394-3015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:75:73:cb:07:cf:67:5b:39:73:bf:a2:1f: a2:01:09:e1:77:b9:95:ff:66:16:3c:8d:f9:8f:0a: a8:61:44:2a:e3:89:88:cf:9a:c4:b1:90:e0:b2:6c: 49:bd:70:17:cb:52:9f:21:57:01:0b:57:9c:da:34: 2f:bb:11:74:eb:7e:9f:d4:f3:c1:1e:93:c3:c0:bd: c8:75:c1:f0:db:7a:fd:a6:08:f8:56:70:0b:b2:3e: 6a:f0:52:8a:8a:81:1f:c6:3c:a2:7b:f9:a4:40:78: 40:7d:b8:45:3a:61:00:d8:9c:8c:c3:bd:81:5c:68: 99:cb:80:73:80:20:94:ae:5f:a0:1d:95:21:76:0a: c3:ba:79:97:a7:6d:f8:bc:44:10:d7:6e:87:c6:45: ab:2a:f0:ad:0a:74:0c:f7:ea:4c:80:59:8a:04:de: 14:79:5b:78:af:f0:e5:e0:03:ba:b9:59:06:3f:b0: 4a:db:c1:5f:ae:c0:64:41:6c:ee:9b:09:f9:ef:a4: cd:7c:ff:00:2c:8c:e2:76:4a:69:6f:6d:79:f0:10: 1a:65:21:de:e0:d3:6c:b5:1b:fd:28:b0:cb:d1:a7: d8:50:ff:1c:2b:e3:8e:7d:89:7b:e7:4f:92:59:9b: 68:7a:fc:7f:8f:67:95:75:16:da:7e:f1:15:ab:d3: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:C3:73:9A:D0:1F:92:A4:2A:6E:43:55:90:70:1B:CB:E1:52:1E X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:63:49:c4:a5:56:df:b1:72:00:db:15:ef:04:6c:a7:70:75: 78:b5:18:34:10:fc:ee:86:5a:29:a9:c5:5e:87:2f:0e:d3:7d: 0d:8b:08:96:3f:f2:bf:6e:d8:22:03:26:a1:f7:29:cf:20:72: 40:01:1f:d3:97:73:35:0e:78:77:fe:2d:8c:7f:78:25:36:ca: 60:29:c3:73:48:f4:a3:cb:e6:1b:2f:57:cb:dd:f8:ca:d1:a1: b5:54:08:f5:ff:66:eb:83:61:50:ac:f6:aa:f5:9f:82:32:da: 2d:11:71:f9:bd:e4:3e:61:68:d3:b3:a4:83:58:0f:26:bb:6a: ec:02:59:87:09:d8:fe:71:8a:f9:30:65:65:aa:74:a4:fd:69: e1:a3:95:01:cf:51:a8:f6:be:0b:fa:9e:9a:5f:36:ab:c5:76: 3f:7a:e4:00:bb:5c:fe:1f:a7:5c:e9:dd:e5:37:5f:32:c0:57: 75:af:7a:e7:57:7e:ca:95:6d:a7:e3:9b:00:39:29:70:09:4b: 06:e7:4a:27:2b:77:1f:b6:43:fb:9a:5e:f8:91:b4:86:eb:f0: 80:2e:27:52:5d:e8:d8:29:58:04:0e:55:b6:ad:c7:ba:36:f2: f9:2c:9b:3d:55:96:14:aa:49:7e:1c:62:b2:29:c1:7f:60:a6: 53:2f:bb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjQxMTIzMDAzNjM2WhcNMjQxMTMwMDAzNjM2WjAYMRYwFAYD VQQDEw02NzQxMjM5NC0zMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kB1c8sHz2dbOXO/oh+iAQnhd7mV/2YWPI35jwqoYUQq44mIz5rEsZDgsmxJ vXAXy1KfIVcBC1ec2jQvuxF0636f1PPBHpPDwL3IdcHw23r9pgj4VnALsj5q8FKK ioEfxjyie/mkQHhAfbhFOmEA2JyMw72BXGiZy4BzgCCUrl+gHZUhdgrDunmXp234 vEQQ126HxkWrKvCtCnQM9+pMgFmKBN4UeVt4r/Dl4AO6uVkGP7BK28FfrsBkQWzu mwn576TNfP8ALIzidkppb2158BAaZSHe4NNstRv9KLDL0afYUP8cK+OOfYl750+S WZtoevx/j2eVdRbafvEVq9MEwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmFw3Oa 0B+SpCpuQ1WQcBvL4VIeMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUY0nEpVbfsXIA2xXvBGyncHV4tRg0EPzuhlopqcVehy8O030NiwiW P/K/btgiAyah9ynPIHJAAR/Tl3M1Dnh3/i2Mf3glNspgKcNzSPSjy+YbL1fL3fjK 0aG1VAj1/2brg2FQrPaq9Z+CMtotEXH5veQ+YWjTs6SDWA8mu2rsAlmHCdj+cYr5 MGVlqnSk/Wnho5UBz1Go9r4L+p6aXzarxXY/euQAu1z+H6dc6d3lN18ywFd1r3rn V37KlW2n45sAOSlwCUsG50onK3cftkP7ml74kbSG6/CALidSXejYKVgEDlW2rce6 NvL5LJs9VZYUqkl+HGKyKcF/YKZTL7tH -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org