$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: zJUgaV5KthB2JdVdcMAf97r5lf4m1Chf7i5SG598Ii0= Subject key identifier: D9:E2:AA:B4:D5:4B:13:CC:BD:4F:BF:92:F8:68:7D:B2:66:71:72:4D Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 03FF Signing time: Sat 23 Nov 2024 00:01:21 +0000 Manifest this update: Sat 23 Nov 2024 00:01:21 +0000 Manifest next update: Sat 30 Nov 2024 00:01:21 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: rc5Whkz4m0OqPqy3MbmQ/8dfvAFPMaW9RMPz6s/3PeE=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: pT1jOJBxibqfgL7ao1iXWPPeCYrzlcJhLrCdb7QZ8Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: Nov 23 00:01:21 2024 GMT Not After : Nov 30 00:01:21 2024 GMT Subject: CN=67411b51-df21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:ba:27:76:b9:cf:ce:75:bb:5e:4e:cf:7c: 56:1f:f6:d9:37:0f:ec:01:fd:4a:39:42:43:98:55: 08:8a:73:df:6d:1f:37:f2:89:bc:da:cc:0c:f2:78: 89:40:30:ec:c7:c7:a1:6a:63:d5:7e:80:68:48:73: 28:12:76:9a:6e:15:92:4c:c3:72:30:d0:bc:c8:b8: 18:74:0f:3c:8f:7f:d9:11:89:d4:5d:f6:12:c2:0e: 94:a5:39:06:e8:c7:ea:63:eb:32:03:f4:17:86:02: 3f:d0:28:c7:7b:7a:63:06:c7:91:62:6c:86:1e:b2: 4f:7f:40:d4:3b:7f:13:39:02:ce:49:46:dc:c3:05: 6c:f8:46:83:b3:4d:a2:14:b1:6e:1a:9c:76:89:63: cc:15:d3:e7:91:d3:7d:ea:a1:12:02:8b:b0:69:93: d9:83:4c:f3:e5:0d:1f:ce:6b:a8:c1:f1:59:3f:63: 1b:a2:40:fe:7c:d1:c4:91:59:eb:b9:3e:be:e7:e1: fd:c9:51:3d:cc:f6:9d:3e:8c:aa:1e:26:61:67:e8: 80:13:ed:cb:be:5e:50:78:25:75:b7:4c:ec:58:51: ed:3f:af:ab:78:00:92:e9:0a:c1:74:3a:b3:87:17: af:ba:8a:26:49:13:88:ce:3b:7b:b9:e4:78:17:3b: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E2:AA:B4:D5:4B:13:CC:BD:4F:BF:92:F8:68:7D:B2:66:71:72:4D X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5f:bd:06:0c:d4:3b:15:e6:03:c1:3c:64:72:ce:f9:8f:ae: d6:eb:99:62:c6:6e:dd:74:bc:5d:39:44:92:b3:62:58:f3:54: 2c:8b:00:94:5b:7b:3a:34:e7:e0:17:27:9d:41:5c:a5:0d:7d: 57:f0:33:47:1e:43:f9:3d:81:06:05:16:3a:2c:bc:63:bf:5e: c2:8a:b6:d6:96:2b:55:33:37:13:7c:bd:14:43:7e:26:d4:5c: d1:c2:7e:d8:10:14:ae:a7:fe:37:99:c7:2f:d4:a6:f3:ad:e5: ae:ca:52:65:90:a4:ab:82:a9:82:55:01:68:b5:8c:7a:97:e4: 5a:6f:3f:61:9f:6e:4d:bf:da:6b:c0:24:7b:18:3f:17:17:5f: bf:7a:5f:ba:0b:49:f0:08:39:f9:b8:55:b5:ba:e5:37:3b:9a: 90:1d:24:5d:0e:12:a6:e2:ee:af:6c:02:7a:50:73:78:c6:96: 87:cc:ea:ea:e4:30:a1:9f:99:43:be:11:0c:49:a2:e8:2c:21: f4:d1:2e:22:59:6d:03:1c:5c:48:b1:a2:c9:89:3b:bd:12:52: e0:3d:f6:0d:f4:7d:59:69:20:98:8b:a1:d8:39:59:64:7a:c2: 5a:65:32:91:c7:bc:91:07:c3:4a:d7:f3:08:b1:59:1a:4c:98: 35:e4:e3:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjQxMTIzMDAwMTIxWhcNMjQxMTMwMDAwMTIxWjAYMRYwFAYD VQQDEw02NzQxMWI1MS1kZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYu6J3a5z851u15Oz3xWH/bZNw/sAf1KOUJDmFUIinPfbR838om82swM8niJ QDDsx8ehamPVfoBoSHMoEnaabhWSTMNyMNC8yLgYdA88j3/ZEYnUXfYSwg6UpTkG 6MfqY+syA/QXhgI/0CjHe3pjBseRYmyGHrJPf0DUO38TOQLOSUbcwwVs+EaDs02i FLFuGpx2iWPMFdPnkdN96qESAouwaZPZg0zz5Q0fzmuowfFZP2MbokD+fNHEkVnr uT6+5+H9yVE9zPadPoyqHiZhZ+iAE+3Lvl5QeCV1t0zsWFHtP6+reACS6QrBdDqz hxevuoomSROIzjt7ueR4FzumcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNniqrTV SxPMvU+/kvhofbJmcXJNMB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9X70GDNQ7FeYDwTxkcs75j67W65lixm7ddLxdOUSSs2JY81QsiwCU W3s6NOfgFyedQVylDX1X8DNHHkP5PYEGBRY6LLxjv17CirbWlitVMzcTfL0UQ34m 1FzRwn7YEBSup/43mccv1KbzreWuylJlkKSrgqmCVQFotYx6l+Rabz9hn25Nv9pr wCR7GD8XF1+/el+6C0nwCDn5uFW1uuU3O5qQHSRdDhKm4u6vbAJ6UHN4xpaHzOrq 5DChn5lDvhEMSaLoLCH00S4iWW0DHFxIsaLJiTu9ElLgPfYN9H1ZaSCYi6HYOVlk esJaZTKRx7yRB8NK1/MIsVkaTJg15OOI -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org