$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: EfKjQT4fBT8XEy/h5+OULI1nU7h55G5GQLzQIzzRU4M= Subject key identifier: DE:7E:9A:F5:58:09:F9:D2:89:41:0D:87:A2:32:92:58:88:2A:94:95 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 16FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 16DB Signing time: Wed 20 Nov 2024 16:36:07 +0000 Manifest this update: Wed 20 Nov 2024 16:36:06 +0000 Manifest next update: Wed 27 Nov 2024 16:36:06 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: 5IMpYOzXfWDjFKcTtVyhry8HV5kcVEzBCeAlEl3rRFc=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: CepPiAbJAoxGCqiYtSDauOfwQTH3WoA/suUaMBW0GWU=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: 48JBt5Gcb7sUHllyu3CzlGslyamAvHfo9Qmj8BxkUyY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: NdXrfA7Ct56tyNobjCoPc9qWdQ3yfuVXDMkA+F+kNHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5884 (0x16fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Nov 20 16:36:06 2024 GMT Not After : Nov 27 16:36:06 2024 GMT Subject: CN=673e0ff6-b3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:ff:ca:75:19:ee:fb:8d:4d:e6:12:71:47: 8f:5f:5a:c3:1e:7b:58:ef:1b:3e:c1:fb:02:be:3a: 3a:3e:e8:6c:e1:8d:6b:56:ca:85:ea:be:11:60:d2: e9:91:6d:d4:eb:87:9b:77:98:dc:e8:cd:98:69:f4: d6:6b:33:81:f6:4a:c6:ea:74:c7:16:0d:07:22:48: 6b:bf:30:86:c2:eb:c0:fc:e0:8f:4f:a0:24:33:4e: fe:14:03:a2:ec:47:89:f6:73:8c:b1:b9:14:05:e5: 1c:8f:bd:9d:c5:24:10:e0:ca:59:2b:70:ba:90:af: 0c:5e:2b:c8:9f:ec:5c:f4:91:23:4a:db:5e:69:b5: 1d:c7:52:be:bd:76:0f:d3:69:81:86:3b:d3:9e:1c: 6c:d9:ec:08:94:34:7d:e2:05:25:12:e4:20:9a:2e: 4a:8d:e6:ea:7b:28:ad:6d:7e:c6:65:84:8a:ac:06: 39:b6:54:15:8d:61:04:5d:39:7f:c5:48:aa:09:da: 03:96:9f:50:d6:27:0d:6b:e8:f5:08:a3:b2:53:45: 71:93:fa:d4:78:bd:9a:56:ee:60:0b:a8:89:a3:82: b7:07:e7:79:e9:2c:de:ba:53:af:fa:ab:57:30:2c: 8c:11:cc:e7:8d:69:23:63:b1:89:33:18:a7:11:3e: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7E:9A:F5:58:09:F9:D2:89:41:0D:87:A2:32:92:58:88:2A:94:95 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4a:79:72:1a:c6:48:c7:93:c1:e0:dd:3a:1a:80:82:38:40: 9c:68:1f:7b:3b:12:3e:5e:32:76:c4:05:54:4d:67:aa:56:66: 9e:3f:cd:c0:e5:1e:96:b8:6d:06:cb:6b:34:3c:77:bf:d6:3b: 9c:93:55:23:42:65:98:cc:c1:9a:b9:55:5a:0e:67:8e:4c:95: 72:db:de:cd:e2:ef:9c:d1:17:50:ca:43:cb:bc:88:8b:fc:42: 92:81:c4:5d:81:59:d9:b7:91:d5:f9:8d:df:75:c2:a1:b7:a3: bd:85:84:e9:df:25:00:78:d1:81:82:eb:cc:97:c7:24:a2:d9: 2a:b3:43:83:87:80:10:c9:d9:10:5a:b4:ab:6a:f2:0a:08:ee: b8:a0:45:cc:f0:eb:60:21:70:fe:c0:9f:0f:97:8d:24:dd:71: ad:74:57:cb:54:71:3b:7e:8b:c1:01:04:e9:48:71:a7:5a:de: 79:b4:c2:a6:b9:eb:6e:2a:9e:2f:25:52:bd:4f:c6:96:00:7e: e2:b1:f3:81:18:b4:30:91:9f:ce:69:c1:ec:93:36:8c:0e:57: a0:c0:52:f8:66:10:08:f5:04:72:5a:68:70:76:25:80:fe:e9: 1a:89:3f:48:0a:4e:40:02:08:46:0c:eb:83:87:d8:8b:33:77: 3a:78:7a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjQxMTIwMTYzNjA2WhcNMjQxMTI3MTYzNjA2WjAYMRYwFAYD VQQDEw02NzNlMGZmNi1iM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZj/ynUZ7vuNTeYScUePX1rDHntY7xs+wfsCvjo6Puhs4Y1rVsqF6r4RYNLp kW3U64ebd5jc6M2YafTWazOB9krG6nTHFg0HIkhrvzCGwuvA/OCPT6AkM07+FAOi 7EeJ9nOMsbkUBeUcj72dxSQQ4MpZK3C6kK8MXivIn+xc9JEjStteabUdx1K+vXYP 02mBhjvTnhxs2ewIlDR94gUlEuQgmi5KjebqeyitbX7GZYSKrAY5tlQVjWEEXTl/ xUiqCdoDlp9Q1icNa+j1CKOyU0Vxk/rUeL2aVu5gC6iJo4K3B+d56SzeulOv+qtX MCyMEcznjWkjY7GJMxinET6iOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5+mvVY CfnSiUENh6IykliIKpSVMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkSnlyGsZIx5PB4N06GoCCOECcaB97OxI+XjJ2xAVUTWeqVmaeP83A 5R6WuG0Gy2s0PHe/1juck1UjQmWYzMGauVVaDmeOTJVy297N4u+c0RdQykPLvIiL /EKSgcRdgVnZt5HV+Y3fdcKht6O9hYTp3yUAeNGBguvMl8ckotkqs0ODh4AQydkQ WrSravIKCO64oEXM8OtgIXD+wJ8Pl40k3XGtdFfLVHE7fovBAQTpSHGnWt55tMKm uetuKp4vJVK9T8aWAH7isfOBGLQwkZ/OacHskzaMDlegwFL4ZhAI9QRyWmhwdiWA /ukaiT9ICk5AAghGDOuDh9iLM3c6eHro -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:01 2024 by rpki-client on console-fra.rpki-client.org