$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: +olKlpinQy0cskyqSsw4V9C+iPPcMpWm6pI66estjNg= Subject key identifier: C3:44:F3:29:8C:3A:2F:FB:1C:47:BF:C1:A0:7F:E6:1D:14:17:6C:67 Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: DF Signing time: Mon 25 Nov 2024 03:31:05 +0000 Manifest this update: Mon 25 Nov 2024 03:31:04 +0000 Manifest next update: Mon 02 Dec 2024 03:31:04 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: JLMJcMhcr/Q+FtisXHUBAsJqgBnlfbCiqBzsT5LikSo=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: rhwc/Od/B1m9sjtqX6Ckqk0wZ+xoSrzn3/LiPuCYOPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Nov 25 03:31:04 2024 GMT Not After : Dec 2 03:31:04 2024 GMT Subject: CN=6743ef78-7c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:14:27:44:52:4c:b7:e4:44:a4:52:68:0a: dc:4b:07:23:85:df:c2:e7:3d:92:e9:c4:37:44:ab: 35:4c:23:6f:38:db:b4:70:1d:b9:e5:16:c5:53:a6: 63:aa:52:65:d2:39:e4:06:ba:23:e1:76:c1:14:d4: f2:72:5f:ae:f6:7a:a4:95:b7:7c:52:c2:cb:45:3c: c2:7c:63:85:c4:ce:09:1a:63:55:d7:c6:f2:68:80: 52:37:db:2e:2d:e6:a6:26:07:f1:a5:69:52:64:fb: 6f:a4:e8:6b:bb:ac:a4:6e:e6:1c:16:1c:f2:e1:da: a0:d8:71:4a:11:83:26:f9:ec:20:5e:ae:44:d3:88: 64:02:62:ba:a5:b4:1a:be:ce:d3:97:50:4c:d1:37: b3:fa:f5:fd:3c:e1:98:eb:85:88:fe:f0:6d:ef:07: ee:b6:37:e8:b3:eb:bc:15:0a:15:3b:f0:e5:52:78: 33:62:5b:5c:2c:c8:07:20:5c:b6:f6:8b:cf:1d:ea: 41:42:6e:10:8f:8d:09:3f:fb:9d:98:ff:da:3b:de: 9f:8d:55:5d:d4:0c:e6:b1:d5:57:6c:0d:e9:9b:27: de:4c:1b:f0:e1:08:6d:c4:6a:d7:cb:ff:80:47:39: f5:e9:e6:34:e1:78:b3:7e:5f:44:4a:2a:83:2d:e6: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:44:F3:29:8C:3A:2F:FB:1C:47:BF:C1:A0:7F:E6:1D:14:17:6C:67 X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bd:d7:75:55:25:e0:e8:3b:da:65:52:79:ea:25:dd:1c:c5: 42:7a:98:fc:2a:24:19:cc:52:78:64:13:88:2b:cd:21:bb:09: f0:97:79:3a:54:58:62:1f:ba:22:d7:78:cf:0a:36:93:b9:2b: 0a:be:e2:14:36:47:9e:a2:10:8d:40:bb:b3:bf:3e:4e:27:fc: 8e:0c:0a:0a:1d:26:69:e3:7e:3e:8f:ef:6c:7a:2a:da:fb:3e: 1b:23:00:2f:83:59:b6:55:b1:dc:ff:ac:c2:47:91:d4:31:db: cc:ea:7e:98:c9:43:9e:6b:f3:e3:b5:a9:33:73:79:02:4d:60: 68:f9:c4:d0:7d:fd:95:69:60:be:d9:34:59:c8:7d:38:41:10: 59:92:ee:9d:7a:b0:88:44:36:eb:d3:49:ff:97:e3:1c:b4:8c: 76:57:8a:bc:b6:14:6d:56:09:e4:d6:21:be:1b:02:b8:a4:67: 09:33:6f:68:0d:f7:f5:d1:93:58:3d:27:ac:63:07:19:f9:37: 24:42:25:64:43:63:2c:7c:3c:00:a6:cf:11:cf:df:ad:c2:18: 8b:cb:de:e8:ec:b4:2b:59:91:e7:e4:3e:5e:5a:fa:54:57:35: 07:13:a9:e2:84:f3:9b:7f:e0:ce:04:6b:16:90:25:4b:fa:12: 3a:76:55:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjQxMTI1MDMzMTA0WhcNMjQxMjAyMDMzMTA0WjAYMRYwFAYD VQQDEw02NzQzZWY3OC03YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPAUJ0RSTLfkRKRSaArcSwcjhd/C5z2S6cQ3RKs1TCNvONu0cB255RbFU6Zj qlJl0jnkBroj4XbBFNTycl+u9nqklbd8UsLLRTzCfGOFxM4JGmNV18byaIBSN9su LeamJgfxpWlSZPtvpOhru6ykbuYcFhzy4dqg2HFKEYMm+ewgXq5E04hkAmK6pbQa vs7Tl1BM0Tez+vX9POGY64WI/vBt7wfutjfos+u8FQoVO/DlUngzYltcLMgHIFy2 9ovPHepBQm4Qj40JP/udmP/aO96fjVVd1AzmsdVXbA3pmyfeTBvw4QhtxGrXy/+A Rzn16eY04Xizfl9ESiqDLebbvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNE8ymM Oi/7HEe/waB/5h0UF2xnMB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrvdd1VSXg6DvaZVJ56iXdHMVCepj8KiQZzFJ4ZBOIK80huwnwl3k6 VFhiH7oi13jPCjaTuSsKvuIUNkeeohCNQLuzvz5OJ/yODAoKHSZp434+j+9seira +z4bIwAvg1m2VbHc/6zCR5HUMdvM6n6YyUOea/Pjtakzc3kCTWBo+cTQff2VaWC+ 2TRZyH04QRBZku6derCIRDbr00n/l+MctIx2V4q8thRtVgnk1iG+GwK4pGcJM29o Dff10ZNYPSesYwcZ+TckQiVkQ2MsfDwAps8Rz9+twhiLy97o7LQrWZHn5D5eWvpU VzUHE6nihPObf+DOBGsWkCVL+hI6dlWx -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:32 2024 by rpki-client on console-fra.rpki-client.org