$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: qZ6lJJr7kE8CN+tBdzFE4FPK+zgPtLRG8Z3Wwxs19ao= Subject key identifier: 31:84:CB:7D:1C:FB:CD:24:69:CB:10:E3:77:03:04:C6:21:65:84:B6 Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 09BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 08DE Signing time: Sun 24 Nov 2024 20:26:51 +0000 Manifest this update: Sun 24 Nov 2024 20:26:51 +0000 Manifest next update: Sun 01 Dec 2024 20:26:51 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: aG4ogxSVCt4NFBwzPaXvrFHvPv0SraPFb+Sk6HqjZWo=) 2: E94D73BE291D11EF86792873C4F9AE02.roa (hash: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU=) 3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: SMU4xFi1+BMgC34BsBqVGrlL7Nhi/uMYFKO8+xvL4gc=) 4: EAE0FE7E1ED511EEB264DB5AC4F9AE02.roa (hash: 52BzsglrJN2hQ+2b6Ff3guBxU88Kr+m6cHdfJdtNMfw=) 5: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: /WqiErWrMk0Gg59ZNQRQV8k1iCmu38eqjuLSdgpmAoA=) 6: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: 808jJ7dFgnwvbwRsKTU5jr+nJdVb6zUdp+50FtVbbEI=) 7: CF4F46100B4811EF9318A733C4F9AE02.roa (hash: LRNrT/IbWqVBqmCeYr8RZz4VVsw5Y1n6TAV/esIrqJg=) 8: 25F61F4A7FA011EFA765BD5FC4F9AE02.roa (hash: 9HoW1xfigr6llVTNKawazONQVteKboOZp31+wJBdBzc=) 9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: auhnazCcpZ7TKgsrAgKTEGN+Zxpu+wqNpKG4gMblQpk=) 10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: 6gpu6/dBOZ2MchgvmUzyjPzKbIW+kNyxsH+MazWyCl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2495 (0x9bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Nov 24 20:26:51 2024 GMT Not After : Dec 1 20:26:51 2024 GMT Subject: CN=67438c0b-34f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:5e:59:0c:84:96:c3:97:80:5b:61:c4:df: 4a:4f:c5:9a:b2:22:ae:83:33:14:46:ef:59:92:c2: 47:81:0e:d3:22:58:44:c7:5f:e1:f6:10:fd:04:e1: 70:09:69:04:f4:36:6c:cd:6a:1a:db:e8:ca:5c:aa: 2b:3c:bf:8c:13:53:eb:96:4b:8b:57:47:ed:0f:f3: 94:66:ca:14:0d:4b:5d:61:e3:83:2f:83:c1:27:15: b8:59:c9:6b:4d:6f:45:01:38:2c:3d:e6:6d:93:a0: 70:30:44:ea:22:4c:bf:ce:0f:49:2b:63:f0:f2:6e: 66:0d:ef:07:98:0c:cf:f2:73:06:95:84:a8:e0:96: ed:8f:54:79:57:e6:da:68:10:61:94:6a:2e:63:28: 81:6e:7c:5a:4f:0a:2a:9d:7d:71:55:1e:9b:a2:a1: b0:da:7e:27:76:0b:b1:47:3e:f4:23:66:34:f5:7b: 98:fc:5f:26:b3:c8:ab:bd:8d:eb:5e:e4:2d:ff:51: a2:09:b2:50:15:09:90:ca:f8:ab:65:9b:2a:2b:6e: f3:4f:d8:37:9e:e1:a8:c8:b1:1f:73:8b:c8:f4:ae: 53:4c:67:08:7c:4a:1b:19:11:c7:9e:0c:59:fc:c8: 55:68:fe:f1:6c:7f:1c:1c:4d:e1:93:2d:42:3e:08: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:84:CB:7D:1C:FB:CD:24:69:CB:10:E3:77:03:04:C6:21:65:84:B6 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a8:62:78:c4:40:48:67:fe:3f:19:ab:52:54:09:6d:83:d6: 59:64:3b:bc:50:6d:f9:54:0e:6a:4f:1e:29:8c:34:d3:3f:d9: ca:e1:46:8c:be:ef:1f:fa:32:93:28:37:37:c5:78:95:15:4c: ff:ea:c9:5e:a7:26:35:fb:c4:5e:bf:b7:32:53:53:b2:89:c8: fc:8a:60:45:ed:87:1b:40:90:6d:22:bf:ea:3d:76:e2:3e:aa: 03:5a:82:4d:61:d4:4b:d8:40:0e:e0:13:10:6a:b0:48:ad:a6: 40:b9:c4:5c:0f:e6:d0:83:87:a1:2f:17:e0:40:34:db:83:7a: 93:f5:52:4a:e7:7a:71:d3:53:5b:60:6f:81:1f:3a:6b:8e:08: f2:fd:2a:02:79:7d:52:44:81:7f:8c:d2:20:2d:e1:ff:03:98: d2:5b:72:e5:62:5f:78:73:4d:db:8f:73:98:8d:c1:f2:a5:69: 73:16:04:e8:ba:15:bd:41:ed:7c:66:c7:7d:7e:62:67:4b:8e: 8d:fc:e6:95:a9:93:b7:09:1e:b3:d1:3b:00:95:83:9b:7e:01: d7:08:ff:fa:a2:40:b9:83:0c:11:1d:05:17:9f:06:ad:9d:4d: b7:9d:0f:9f:98:d6:83:e2:9e:1a:43:05:8e:a3:a6:9a:0c:f9: b9:a6:a4:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjQxMTI0MjAyNjUxWhcNMjQxMjAxMjAyNjUxWjAYMRYwFAYD VQQDEw02NzQzOGMwYi0zNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/NeWQyElsOXgFthxN9KT8WasiKugzMURu9ZksJHgQ7TIlhEx1/h9hD9BOFw CWkE9DZszWoa2+jKXKorPL+ME1PrlkuLV0ftD/OUZsoUDUtdYeODL4PBJxW4Wclr TW9FATgsPeZtk6BwMETqIky/zg9JK2Pw8m5mDe8HmAzP8nMGlYSo4Jbtj1R5V+ba aBBhlGouYyiBbnxaTwoqnX1xVR6boqGw2n4ndguxRz70I2Y09XuY/F8ms8irvY3r XuQt/1GiCbJQFQmQyvirZZsqK27zT9g3nuGoyLEfc4vI9K5TTGcIfEobGRHHngxZ /MhVaP7xbH8cHE3hky1CPgh1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGEy30c +80kacsQ43cDBMYhZYS2MB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFqGJ4xEBIZ/4/GatSVAltg9ZZZDu8UG35VA5qTx4pjDTTP9nK4UaM vu8f+jKTKDc3xXiVFUz/6slepyY1+8Rev7cyU1Oyicj8imBF7YcbQJBtIr/qPXbi PqoDWoJNYdRL2EAO4BMQarBIraZAucRcD+bQg4ehLxfgQDTbg3qT9VJK53px01Nb YG+BHzprjgjy/SoCeX1SRIF/jNIgLeH/A5jSW3LlYl94c03bj3OYjcHypWlzFgTo uhW9Qe18Zsd9fmJnS46N/OaVqZO3CR6z0TsAlYObfgHXCP/6okC5gwwRHQUXnwat nU23nQ+fmNaD4p4aQwWOo6aaDPm5pqQm -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:03 2024 by rpki-client on console-ams.rpki-client.org