$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: pTIbn+KzmlnKKqLxKqjgcfKhPX8FuqPIFTJC+QiHRGQ= Subject key identifier: C1:BB:35:7B:4F:51:74:87:AD:6B:BB:11:EE:E7:46:B9:8A:0E:80:E3 Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 0399 Signing time: Sun 05 May 2024 02:43:44 +0000 Manifest this update: Sun 05 May 2024 02:43:43 +0000 Manifest next update: Sun 12 May 2024 02:43:43 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: yXdyGds28k/J51Z3A2ggVaYsDDyQZHvQTFED4Kodsus=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: pT1jOJBxibqfgL7ao1iXWPPeCYrzlcJhLrCdb7QZ8Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: May 5 02:43:43 2024 GMT Not After : May 12 02:43:43 2024 GMT Subject: CN=6636f25f-a14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5c:ca:37:47:62:b7:17:4e:1a:bd:28:ec:3b: 28:e7:eb:af:71:95:72:aa:8d:1c:eb:08:57:ea:9a: c0:0f:e0:6f:ae:cb:a5:5a:c3:5e:95:a3:2d:cf:43: 63:65:d1:d4:6e:4e:27:62:87:22:e7:bd:ad:29:06: 18:70:22:be:f0:0e:77:c6:fa:bc:12:e7:04:ee:e1: d5:a6:4d:f1:8e:74:b8:91:64:31:e8:f8:99:9c:61: 23:61:69:4f:92:fc:8c:52:67:02:41:3a:88:b9:a1: e2:98:56:bf:c0:d8:76:de:60:cc:84:42:df:de:68: 19:22:cd:6a:a4:0e:bb:56:c1:6b:a6:22:16:40:37: 10:f8:1d:2b:ff:6c:2f:cd:d7:ae:7a:c4:8d:4a:73: e2:cb:d2:ec:d7:74:3d:c2:28:b2:0f:5f:ce:51:f3: 9d:86:b6:94:77:7f:0a:b2:ca:46:42:54:dd:ac:44: 57:20:57:5e:d0:04:fe:bc:2e:fb:58:7d:45:c6:c8: 49:3d:eb:05:60:bb:a4:a9:62:3c:7d:5d:11:86:a8: ce:2d:30:cb:b0:39:40:71:96:58:f4:37:19:ab:42: b0:59:d3:40:5b:cb:f4:f3:47:8d:af:0a:1f:85:04: 6c:5d:e7:04:18:dd:86:1b:b6:86:62:16:3c:ee:07: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BB:35:7B:4F:51:74:87:AD:6B:BB:11:EE:E7:46:B9:8A:0E:80:E3 X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a2:8b:74:4c:01:9a:8a:fb:fe:13:ed:a7:22:9c:88:ba:7a: fd:59:22:0b:48:d6:45:04:76:63:8a:8f:aa:6c:18:4d:bf:f6: e2:3d:cb:c2:73:f2:c1:81:2c:6b:1f:00:7e:89:77:8b:3a:79: b3:bc:73:bd:9e:79:04:e0:df:76:a4:9f:da:a2:3a:7a:e5:65: c4:84:b7:ee:df:78:58:21:33:a9:68:fb:c7:f0:c7:7a:3f:a0: 8b:ca:e2:94:a2:e1:9e:f0:d6:40:42:07:d7:49:84:84:63:bc: 5c:a1:5e:66:60:5a:e3:f3:ab:d1:dc:3c:3a:4b:d0:e8:71:a6: 12:b2:86:32:3f:7b:48:cd:1d:65:c0:4d:8b:f2:13:2c:3a:c4: c2:29:41:e2:df:66:bc:84:a4:06:c0:98:4a:68:cb:bc:45:a4: a1:b2:60:9b:5f:44:1b:8f:15:80:f7:2c:e1:95:d1:31:eb:00: 59:99:68:e7:b7:86:5d:0b:9a:9e:86:37:7f:86:49:79:1d:f4: 28:c3:9e:98:01:d5:0c:53:4e:2f:2e:55:ae:3e:f5:8c:f8:86: 51:df:f0:cc:b1:9c:75:34:c5:a5:3c:99:d8:c2:1e:5d:41:21: 1a:70:9c:b1:56:c4:0e:3d:d2:16:63:17:3b:10:a2:61:ba:6d: 9a:a0:ce:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjQwNTA1MDI0MzQzWhcNMjQwNTEyMDI0MzQzWjAYMRYwFAYD VQQDEw02NjM2ZjI1Zi1hMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61zKN0ditxdOGr0o7Dso5+uvcZVyqo0c6whX6prAD+BvrsulWsNelaMtz0Nj ZdHUbk4nYoci572tKQYYcCK+8A53xvq8EucE7uHVpk3xjnS4kWQx6PiZnGEjYWlP kvyMUmcCQTqIuaHimFa/wNh23mDMhELf3mgZIs1qpA67VsFrpiIWQDcQ+B0r/2wv zdeuesSNSnPiy9Ls13Q9wiiyD1/OUfOdhraUd38KsspGQlTdrERXIFde0AT+vC77 WH1FxshJPesFYLukqWI8fV0RhqjOLTDLsDlAcZZY9DcZq0KwWdNAW8v080eNrwof hQRsXecEGN2GG7aGYhY87geilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG7NXtP UXSHrWu7Ee7nRrmKDoDjMB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdoot0TAGaivv+E+2nIpyIunr9WSILSNZFBHZjio+qbBhNv/biPcvC c/LBgSxrHwB+iXeLOnmzvHO9nnkE4N92pJ/aojp65WXEhLfu33hYITOpaPvH8Md6 P6CLyuKUouGe8NZAQgfXSYSEY7xcoV5mYFrj86vR3Dw6S9DocaYSsoYyP3tIzR1l wE2L8hMsOsTCKUHi32a8hKQGwJhKaMu8RaShsmCbX0QbjxWA9yzhldEx6wBZmWjn t4ZdC5qehjd/hkl5HfQow56YAdUMU04vLlWuPvWM+IZR3/DMsZx1NMWlPJnYwh5d QSEacJyxVsQOPdIWYxc7EKJhum2aoM7c -----END CERTIFICATE-----Generated at Sun May 5 03:47:44 2024 by rpki-client on console-fra.rpki-client.org