$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json) Hash identifier: FVTD8On1+kjYnzooQ5teFdoVwhIgQEcWzCZ/EI2hdxE= Subject key identifier: 61:E2:06:AC:24:10:B9:78:B1:38:20:F2:9D:58:5B:AD:EA:66:39:11 Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft Manifest number: 15 Signing time: Wed 05 Feb 2025 06:24:48 +0000 Manifest this update: Wed 05 Feb 2025 06:24:47 +0000 Manifest next update: Wed 12 Feb 2025 06:24:47 +0000 Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: 7lBr9ea3q7pBAlRzsfLfWmCW53Ymup72Nl5fCBzNp+g=) 2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=) 3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9 Validity Not Before: Feb 5 06:24:47 2025 GMT Not After : Feb 12 06:24:47 2025 GMT Subject: CN=67a30430-0930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:d6:29:f3:df:08:65:96:65:58:ec:72:08: 28:c9:c9:68:bf:38:33:98:ed:c2:37:90:b5:13:01: dd:d3:8f:3f:64:b4:f4:9b:d1:cf:7b:9e:34:0d:38: 8a:7e:d6:fd:af:ef:e9:78:03:5e:26:f6:9b:65:fd: b1:22:9e:16:5f:e9:a0:12:cb:2c:28:59:9b:27:7b: ff:39:97:fd:8f:82:1c:c6:90:21:8f:69:64:3a:11: e1:d9:b9:dc:f0:dd:14:03:36:65:e6:60:94:f1:db: 3f:5d:10:a1:ae:82:e1:3f:56:4d:67:42:e9:95:1f: 07:f1:18:dd:36:d4:b9:16:de:ba:99:de:d1:a8:46: 66:15:18:78:2f:9e:da:ff:89:5e:10:be:f3:bf:4e: 50:c2:6e:ec:45:31:7a:74:2d:29:a7:ae:96:97:76: 64:c1:20:8b:fb:05:ee:f1:cb:db:58:88:7c:9b:2c: b9:21:8b:af:38:1d:43:67:b1:f1:fb:5e:4e:53:b9: 3e:f4:d8:33:a0:77:26:2e:fc:b0:d0:45:ef:3d:d8: 00:9e:66:2f:a0:ea:4f:83:f7:08:38:eb:84:cd:0a: 00:03:41:61:23:b7:74:f2:9f:61:4a:90:14:20:39: 96:32:b5:a4:ca:ad:db:e1:f0:27:3e:57:b5:45:75: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E2:06:AC:24:10:B9:78:B1:38:20:F2:9D:58:5B:AD:EA:66:39:11 X509v3 Authority Key Identifier: keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:f6:f3:b6:c8:66:3f:38:d7:ef:ad:d2:7b:9f:ce:f3:93:1e: 90:22:23:a2:59:db:47:14:59:40:75:0e:59:2d:10:c8:43:37: d3:c7:34:e8:f6:19:16:39:9d:bd:29:41:ca:74:57:0a:d8:36: fc:73:33:ae:a5:20:7e:7c:1b:76:9f:62:1f:2b:97:4c:19:bd: e3:8d:9c:00:8a:85:3f:0e:11:7c:68:36:34:40:68:f3:7d:f8: d1:6c:12:39:f8:e1:ac:0e:d5:25:43:f3:ed:7e:0f:44:b2:d0: 04:e7:2b:59:7a:23:73:f5:39:1e:fd:83:2a:af:42:3b:11:d9: 7c:1d:a0:2a:c0:ae:26:06:6a:76:9b:2d:97:53:f4:4c:a9:bf: 77:2d:f0:8f:8c:56:75:d7:cd:f4:2f:80:3f:4b:4b:02:de:9d: 0b:82:37:d7:38:17:05:87:76:53:fd:da:82:f8:79:82:1d:0b: 06:09:2a:92:81:73:87:a4:d3:af:14:01:b6:41:5b:68:db:88: 4e:55:c6:06:00:cb:19:51:e9:4d:c1:b6:01:df:6e:f0:6f:5a: 2b:bf:b2:68:f7:a7:d8:7f:92:4a:4e:4f:86:2f:22:3e:7b:c8: 1f:98:de:f4:a2:bc:8a:74:60:0c:ec:13:1d:1b:60:13:60:90: 5d:84:de:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoNzYzNEFEODY2NTZFRkU2QzQ1RTRFRjk5OEY5NEI2OTdB QzM5QkVGMTAeFw0yNTAyMDUwNjI0NDdaFw0yNTAyMTIwNjI0NDdaMBgxFjAUBgNV BAMTDTY3YTMwNDMwLTA5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCppNYp898IZZZlWOxyCCjJyWi/ODOY7cI3kLUTAd3Tjz9ktPSb0c97njQNOIp+ 1v2v7+l4A14m9ptl/bEinhZf6aASyywoWZsne/85l/2PghzGkCGPaWQ6EeHZudzw 3RQDNmXmYJTx2z9dEKGuguE/Vk1nQumVHwfxGN021LkW3rqZ3tGoRmYVGHgvntr/ iV4QvvO/TlDCbuxFMXp0LSmnrpaXdmTBIIv7Be7xy9tYiHybLLkhi684HUNnsfH7 Xk5TuT702DOgdyYu/LDQRe892ACeZi+g6k+D9wg464TNCgADQWEjt3Tyn2FKkBQg OZYytaTKrdvh8Cc+V7VFdY/zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYeIGrCQQ uXixOCDynVhbrepmOREwHwYDVR0jBBgwFoAUdjSthmVu/mxF5O+Zj5S2l6w5vvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzgzNjg2QUNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpTdGhtVnVfbXhGNU8tWmo1UzJsNnc1dnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzgzNjg2QUNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214 RjVPLVpqNVMybDZ3NXZ2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM7287bIZj841++t0nufzvOTHpAiI6JZ20cUWUB1DlktEMhDN9PHNOj2 GRY5nb0pQcp0VwrYNvxzM66lIH58G3afYh8rl0wZveONnACKhT8OEXxoNjRAaPN9 +NFsEjn44awO1SVD8+1+D0Sy0ATnK1l6I3P1OR79gyqvQjsR2XwdoCrAriYGanab LZdT9Eypv3ct8I+MVnXXzfQvgD9LSwLenQuCN9c4FwWHdlP92oL4eYIdCwYJKpKB c4ek068UAbZBW2jbiE5VxgYAyxlR6U3BtgHfbvBvWiu/smj3p9h/kkpOT4YvIj57 yB+Y3vSivIp0YAzsEx0bYBNgkF2E3vY= -----END CERTIFICATE-----Generated at Thu Feb 6 03:53:27 2025 by rpki-client