$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: UPBaAz2Rtu/BV3wkrBi124K1H1EwwJipvvjUJXtE5tU= Subject key identifier: 27:B1:26:29:3E:AD:C9:EA:6D:6E:C6:3A:62:7D:7B:C6:4F:C3:C9:8C Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1698 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 167A Signing time: Sat 18 May 2024 17:08:47 +0000 Manifest this update: Sat 18 May 2024 17:08:46 +0000 Manifest next update: Sat 25 May 2024 17:08:46 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: 7RptirvQwucRo2+oH0Edq3uibL5L5AS1Fk/Jnh4COuw=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: JalxQifJVFOUSnaEXpUDHVuRdigl/yt5t9Kqo/nTepM=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: oJAXuOtWecU0+MoURgBbn68ILjDBXF4ZWgsPb7e4mBM=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: O2w5N1Zod0RmjR73calT8+O57LgGjSnYZ9PGyMFvfv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5784 (0x1698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: May 18 17:08:46 2024 GMT Not After : May 25 17:08:46 2024 GMT Subject: CN=6648e09f-fdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:1e:32:6c:fe:33:9a:a6:ee:73:88:51:56: 25:f9:51:f5:5c:bc:3e:58:fb:0f:2f:e2:18:4d:04: cc:15:fd:f7:6d:6d:68:72:17:1d:2a:d9:4a:05:ce: e2:0a:1d:8e:72:e9:2e:4a:23:f0:57:bd:3d:58:7a: 04:80:f1:bd:41:a6:83:7c:60:e5:0a:5d:d8:a1:b9: ec:58:12:25:1b:8c:d6:d3:c9:b9:39:ce:a3:e5:11: 79:b3:03:24:52:a5:89:29:ee:fc:92:2d:a2:a4:a2: 21:f0:5a:61:22:69:ba:2b:b4:fc:4e:2d:2e:dc:e2: b8:3f:f0:13:62:57:3d:8f:89:7d:ab:45:0a:49:d3: 26:bf:37:6d:48:0a:e2:b2:73:98:98:53:ae:8d:4c: e5:16:f4:d0:70:16:29:45:a0:94:a0:b7:97:72:a1: 2a:db:b0:3b:25:f0:a7:01:ed:7a:72:77:09:c8:b5: 03:4d:1e:87:5f:ae:5f:ea:b4:7e:6c:53:fe:bd:04: 85:62:46:91:cf:1a:3b:89:2c:e8:54:21:9f:91:91: 9f:04:75:dc:33:bf:50:b4:aa:25:cb:bd:df:a5:cc: d7:d9:e7:ff:36:b2:eb:8c:1f:5d:bc:1d:33:0d:d5: 42:be:ea:29:b2:03:9b:60:89:03:9f:37:da:53:78: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B1:26:29:3E:AD:C9:EA:6D:6E:C6:3A:62:7D:7B:C6:4F:C3:C9:8C X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4b:ca:cf:35:0b:69:cb:5d:d8:a8:6f:80:8f:47:7b:ae:f7: 4c:ad:08:55:be:cf:6d:4b:f1:f3:08:f0:ba:93:43:f9:92:52: c6:56:be:46:c9:a2:fd:d1:45:04:2f:f6:87:2a:8a:d1:ed:29: 4d:2c:23:a2:65:0e:d6:d0:24:5d:3f:e4:5b:b2:9e:b1:a5:1d: 32:48:09:e2:da:54:e9:51:d3:44:44:53:36:37:56:32:26:af: 55:be:3e:43:97:ae:b3:48:77:4f:0b:67:4b:26:2e:f6:a3:b8: b1:d0:64:c4:34:34:55:44:a5:c8:7b:e5:14:ad:30:30:ab:c3: fc:e9:25:cd:f6:db:3f:b2:7c:ea:e3:46:8a:fc:55:a9:5c:f2: 12:de:43:25:90:f0:4f:3a:ef:6d:ce:8c:94:be:b9:d5:93:65: e2:d4:03:71:ea:74:4a:f9:74:fc:46:3c:3f:0a:7d:09:33:39: ad:9e:3f:f4:0f:dc:a1:65:c0:63:03:57:56:9d:c5:ec:e3:7e: 2a:e0:f2:63:64:a5:e7:9f:47:02:86:89:f9:46:04:2c:e7:fd: 7a:53:dd:f7:fa:5f:16:56:77:8e:9b:84:d5:74:0f:4e:fe:68: e9:5b:65:09:16:fa:38:32:27:bb:db:8a:d5:14:1f:8e:2b:0b: ac:93:cd:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjQwNTE4MTcwODQ2WhcNMjQwNTI1MTcwODQ2WjAYMRYwFAYD VQQDEw02NjQ4ZTA5Zi1mZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweoeMmz+M5qm7nOIUVYl+VH1XLw+WPsPL+IYTQTMFf33bW1ochcdKtlKBc7i Ch2OcukuSiPwV709WHoEgPG9QaaDfGDlCl3YobnsWBIlG4zW08m5Oc6j5RF5swMk UqWJKe78ki2ipKIh8FphImm6K7T8Ti0u3OK4P/ATYlc9j4l9q0UKSdMmvzdtSAri snOYmFOujUzlFvTQcBYpRaCUoLeXcqEq27A7JfCnAe16cncJyLUDTR6HX65f6rR+ bFP+vQSFYkaRzxo7iSzoVCGfkZGfBHXcM79QtKoly73fpczX2ef/NrLrjB9dvB0z DdVCvuopsgObYIkDnzfaU3ixrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCexJik+ rcnqbW7GOmJ9e8ZPw8mMMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/S8rPNQtpy13YqG+Aj0d7rvdMrQhVvs9tS/HzCPC6k0P5klLGVr5G yaL90UUEL/aHKorR7SlNLCOiZQ7W0CRdP+Rbsp6xpR0ySAni2lTpUdNERFM2N1Yy Jq9Vvj5Dl66zSHdPC2dLJi72o7ix0GTENDRVRKXIe+UUrTAwq8P86SXN9ts/snzq 40aK/FWpXPIS3kMlkPBPOu9tzoyUvrnVk2Xi1ANx6nRK+XT8Rjw/Cn0JMzmtnj/0 D9yhZcBjA1dWncXs434q4PJjZKXnn0cChon5RgQs5/16U933+l8WVneOm4TVdA9O /mjpW2UJFvo4Mie724rVFB+OKwusk83a -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org