$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json) Hash identifier: ez6GaeMx2kvCd6kj1lqpDcUGt/RIryU13iVf+lIBmxc= Subject key identifier: 84:4D:CE:A5:6F:43:32:B4:C7:36:AF:35:F3:D4:8E:54:D6:FA:A0:89 Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft Manifest number: 0332 Signing time: Tue 07 May 2024 02:57:44 +0000 Manifest this update: Tue 07 May 2024 02:57:44 +0000 Manifest next update: Tue 14 May 2024 02:57:44 +0000 Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: s+JCrKoQ7nFqo9Cg8wOAKRgPdYk5lXVB+RhqltgPS4E=) 2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: EKuSr6xrMHZxpxLfZOybmh4VB2CPt6owkfHEiLPoYtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Validity Not Before: May 7 02:57:44 2024 GMT Not After : May 14 02:57:44 2024 GMT Subject: CN=663998a8-2144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:ac:16:73:36:c7:fe:c5:c9:1e:24:3b:72: 2e:72:a9:38:78:36:43:3c:7f:45:05:0e:0f:c2:a0: af:a2:cf:47:fc:56:ad:2a:cd:53:bb:bf:17:b5:79: 73:94:f9:a4:12:73:58:66:a5:29:5a:9a:af:c1:1e: f2:62:d9:d1:09:52:98:4b:f1:2b:cf:81:31:9e:f9: b8:a5:3d:cf:25:b6:e2:b8:e7:ba:03:21:a8:ab:f9: e2:fe:81:6d:fb:4e:ed:ee:ad:ed:c7:b8:27:80:62: 8d:01:12:0b:64:ef:e1:2b:de:46:8e:62:4c:7d:d0: 57:13:89:8f:5c:f8:bc:1a:83:1a:69:c4:de:51:3f: 36:19:68:92:9b:23:56:06:8a:b1:fb:b9:6e:f9:e1: a0:de:1e:f0:84:46:1a:db:d7:85:59:8f:79:7c:93: f4:75:51:10:d7:0d:ce:cd:d4:0b:cf:29:ed:41:7c: d3:f8:60:f1:a2:b5:2b:0d:75:3c:8e:c1:77:69:40: 71:66:09:f4:c6:71:05:6b:7a:d3:c5:2a:17:7c:db: f0:f9:62:22:9b:a3:62:2c:8c:c2:42:51:d7:a9:66: b1:1a:68:9b:31:a8:c4:62:e5:a7:55:95:c1:22:04: 68:a5:45:28:45:85:14:fc:82:c2:21:73:bc:b7:84: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:CE:A5:6F:43:32:B4:C7:36:AF:35:F3:D4:8E:54:D6:FA:A0:89 X509v3 Authority Key Identifier: keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:25:5e:69:a1:e5:5b:5d:19:fd:5f:f2:bc:b7:3a:f0:9a:70: 56:8b:21:16:cf:13:12:9f:7b:4c:58:a8:77:01:d0:17:76:23: 06:b2:90:35:a8:ce:4c:8b:77:d5:94:e5:10:12:a9:94:52:4b: f7:2b:81:d9:f4:2a:2c:58:55:8b:4f:3c:fe:da:f2:8f:71:2d: 6b:61:07:19:c2:13:8d:7c:e1:42:4f:b6:a3:34:8f:db:7e:60: b2:dd:c9:82:43:53:b0:3c:f4:98:76:e4:fd:66:5d:2a:ef:f4: 29:c9:28:63:68:e2:7e:be:6a:0b:51:9f:7d:c6:41:c8:28:5b: 55:65:b1:60:04:49:9e:92:5f:d7:7a:17:be:fc:7b:25:c2:be: 19:4e:8d:26:e9:95:57:79:06:3a:af:df:97:ff:f7:3b:23:1f: 17:46:b4:66:2f:45:4e:94:e0:0e:f9:fb:be:20:7e:6e:35:05: e8:54:2c:29:22:82:77:ec:a5:7c:ff:95:3a:66:cb:3d:99:01: 01:98:21:58:07:16:77:3b:e7:b3:ab:18:ed:ce:f0:81:32:23: e8:b6:a4:53:d3:8a:8b:05:70:31:8a:02:6e:74:8e:ad:6b:0b: 2c:46:51:28:cb:75:2f:86:71:a2:89:1e:2b:42:8b:52:3d:93: b9:5a:b4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2 ODlGNDZFM0YwHhcNMjQwNTA3MDI1NzQ0WhcNMjQwNTE0MDI1NzQ0WjAYMRYwFAYD VQQDEw02NjM5OThhOC0yMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurSsFnM2x/7FyR4kO3Iucqk4eDZDPH9FBQ4PwqCvos9H/FatKs1Tu78XtXlz lPmkEnNYZqUpWpqvwR7yYtnRCVKYS/Erz4Exnvm4pT3PJbbiuOe6AyGoq/ni/oFt +07t7q3tx7gngGKNARILZO/hK95GjmJMfdBXE4mPXPi8GoMaacTeUT82GWiSmyNW Boqx+7lu+eGg3h7whEYa29eFWY95fJP0dVEQ1w3OzdQLzyntQXzT+GDxorUrDXU8 jsF3aUBxZgn0xnEFa3rTxSoXfNvw+WIim6NiLIzCQlHXqWaxGmibMajEYuWnVZXB IgRopUUoRYUU/ILCIXO8t4SVaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRNzqVv QzK0xzavNfPUjlTW+qCJMB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3 MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHJV5poeVbXRn9X/K8tzrwmnBWiyEWzxMSn3tMWKh3AdAXdiMGspA1 qM5Mi3fVlOUQEqmUUkv3K4HZ9CosWFWLTzz+2vKPcS1rYQcZwhONfOFCT7ajNI/b fmCy3cmCQ1OwPPSYduT9Zl0q7/QpyShjaOJ+vmoLUZ99xkHIKFtVZbFgBEmekl/X ehe+/Hslwr4ZTo0m6ZVXeQY6r9+X//c7Ix8XRrRmL0VOlOAO+fu+IH5uNQXoVCwp IoJ37KV8/5U6Zss9mQEBmCFYBxZ3O+ezqxjtzvCBMiPotqRT04qLBXAxigJudI6t awssRlEoy3UvhnGiiR4rQotSPZO5WrSJ -----END CERTIFICATE-----Generated at Tue May 7 03:53:41 2024 by rpki-client on console-fra.rpki-client.org