$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: 4VBATAz3339gyNMokudWYi+Z0hhL64goknH1m2lac0I= Subject key identifier: AB:DA:66:18:AD:8A:6F:FA:1F:AD:C1:F5:41:B6:22:9F:D0:BA:CF:E8 Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 0934 Signing time: Thu 24 Apr 2025 20:37:09 +0000 Manifest this update: Thu 24 Apr 2025 20:37:08 +0000 Manifest next update: Thu 01 May 2025 20:37:08 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: jE3SgC0Fc+w5hQUGp8vrBW927rUZEvnXTTOIlPG3+vE=) 2: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: hwOF3wEGPYN9Coi28CC6fcXclDNnN/zPBkBKCSSYw20=) 3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: SMU4xFi1+BMgC34BsBqVGrlL7Nhi/uMYFKO8+xvL4gc=) 4: E94D73BE291D11EF86792873C4F9AE02.roa (hash: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU=) 5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I=) 6: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: /WqiErWrMk0Gg59ZNQRQV8k1iCmu38eqjuLSdgpmAoA=) 7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: 808jJ7dFgnwvbwRsKTU5jr+nJdVb6zUdp+50FtVbbEI=) 8: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (hash: Fk3lDfrttuAZqg6Wfn2O1TB2kJ0lsCcdFlnPaQQgPgQ=) 9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: auhnazCcpZ7TKgsrAgKTEGN+Zxpu+wqNpKG4gMblQpk=) 10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: 6gpu6/dBOZ2MchgvmUzyjPzKbIW+kNyxsH+MazWyCl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Apr 24 20:37:08 2025 GMT Not After : May 1 20:37:08 2025 GMT Subject: CN=680aa0f5-d129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2c:7b:e2:07:38:1f:f5:0a:25:5d:05:f1:66: 80:9a:c3:18:28:bd:dc:11:b8:86:27:51:a8:ad:75: 83:8b:39:b9:29:3d:2f:32:99:8e:fa:71:a6:8a:f0: 15:0b:9b:90:c0:79:a5:81:13:6d:8f:56:3c:56:41: 8c:c7:1e:fd:18:0c:bf:15:97:5c:f2:fa:43:54:ff: 7c:3f:68:a9:a6:3b:52:85:8f:e3:68:72:60:21:99: dc:ce:2f:04:19:4f:af:65:0a:29:5c:45:ef:db:00: 82:43:f5:54:75:5d:b2:61:2e:c3:14:c1:f2:ba:bf: 1e:27:f0:f9:60:b0:d3:b0:14:d6:c0:51:d1:2d:ee: 4c:30:27:86:b7:87:b1:9a:0e:36:8c:0e:df:e5:f9: fa:e2:f4:3f:36:80:e5:af:87:d7:b2:4a:8b:e7:88: fd:6e:08:23:c9:4f:5b:b7:4a:89:3f:db:17:5c:45: e2:b5:54:1e:90:b6:cb:c9:a6:dc:e7:56:0e:33:01: df:61:f7:53:c2:f0:d1:cf:02:c9:a9:40:54:89:49: ac:3f:b1:f2:42:be:e1:82:82:cd:82:d4:b3:5a:7d: e7:06:b6:8b:f5:e9:9b:ff:28:bd:ac:1b:73:5b:f0: d1:7d:4f:b5:e3:b1:f8:b4:19:ba:a4:cb:38:36:3b: 15:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DA:66:18:AD:8A:6F:FA:1F:AD:C1:F5:41:B6:22:9F:D0:BA:CF:E8 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:29:20:3d:49:18:c0:6a:c4:b5:33:79:5f:75:f3:32:43:17: 2d:33:7e:da:dd:c3:c6:07:48:ed:91:f0:1c:0b:08:aa:32:9e: 93:65:17:81:c0:d5:1f:c3:f6:85:80:88:e1:ba:5b:f5:ad:27: 6f:7f:a4:89:23:0a:14:c1:4c:1c:64:11:17:01:5d:43:84:e8: c8:60:92:ee:39:0e:61:8f:2a:ba:41:08:0c:a2:76:0a:db:d2: c5:62:9c:32:a2:db:c3:4f:0b:58:46:4e:80:68:d7:d4:26:5a: 85:29:d3:03:f6:6c:cc:ad:99:de:fb:8d:e7:c6:a5:94:a3:f6: 02:87:2b:18:da:95:18:0c:e4:94:ad:5b:fb:6d:e8:e1:13:06: 12:5d:2c:44:ff:60:13:2f:21:48:98:a5:da:cf:cc:da:c9:7a: 1a:a4:1f:19:7f:38:e9:91:f6:80:02:3b:15:2c:e0:b4:82:d0: 72:9e:d1:ef:08:d0:eb:b5:e8:95:fe:02:a8:67:65:60:37:d0: 14:82:94:f2:ae:a0:4d:e5:1b:df:f7:61:49:22:b6:08:8e:df: de:7a:6a:8a:df:11:73:19:29:9e:b6:be:20:b5:77:93:8a:81: f8:cb:b0:8e:b9:ba:a6:02:47:4a:75:7d:e9:17:31:a2:b3:52: d3:c8:e1:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUwNDI0MjAzNzA4WhcNMjUwNTAxMjAzNzA4WjAYMRYwFAYD VQQDEw02ODBhYTBmNS1kMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ix74gc4H/UKJV0F8WaAmsMYKL3cEbiGJ1GorXWDizm5KT0vMpmO+nGmivAV C5uQwHmlgRNtj1Y8VkGMxx79GAy/FZdc8vpDVP98P2ippjtShY/jaHJgIZnczi8E GU+vZQopXEXv2wCCQ/VUdV2yYS7DFMHyur8eJ/D5YLDTsBTWwFHRLe5MMCeGt4ex mg42jA7f5fn64vQ/NoDlr4fXskqL54j9bggjyU9bt0qJP9sXXEXitVQekLbLyabc 51YOMwHfYfdTwvDRzwLJqUBUiUmsP7HyQr7hgoLNgtSzWn3nBraL9emb/yi9rBtz W/DRfU+147H4tBm6pMs4NjsVNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvaZhit im/6H63B9UG2Ip/Qus/oMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzKSA9SRjAasS1M3lfdfMyQxctM37a3cPGB0jtkfAcCwiqMp6TZReB wNUfw/aFgIjhulv1rSdvf6SJIwoUwUwcZBEXAV1DhOjIYJLuOQ5hjyq6QQgMonYK 29LFYpwyotvDTwtYRk6AaNfUJlqFKdMD9mzMrZne+43nxqWUo/YChysY2pUYDOSU rVv7bejhEwYSXSxE/2ATLyFImKXaz8zayXoapB8ZfzjpkfaAAjsVLOC0gtByntHv CNDrteiV/gKoZ2VgN9AUgpTyrqBN5Rvf92FJIrYIjt/eemqK3xFzGSmetr4gtXeT ioH4y7COubqmAkdKdX3pFzGis1LTyOEY -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:53 2025 by rpki-client