$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json) Hash identifier: E/dJq4yz+js/KEbJ01ESahZ8+rQc2vEJlfnfofiUKW4= Subject key identifier: AC:2A:D2:F7:95:C6:44:1A:4C:69:12:04:C2:BD:E0:1A:F9:61:4B:DB Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft Manifest number: 032F Signing time: Sun 19 May 2024 03:11:36 +0000 Manifest this update: Sun 19 May 2024 03:11:35 +0000 Manifest next update: Sun 26 May 2024 03:11:35 +0000 Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: trVQmkP+KEExAmelZ0acSk6P4We8pUM6xsu0KO+93Ms=) 2: 7FAC662E10D411EFB72D712AC4F9AE02.roa (hash: 3mVG4TR6ZbM1ADI2on54xZV6fPVz6LvxIINQBRYTcwE=) 3: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: lI6Q78HbL3QUhYUlhhzatCtrWosSdu79FdgEdqfNWdI=) 4: A3265ED0DF3E11EC83CCFE1EC4F9AE02.roa (hash: CZbzO9+UnlEriMr2dbAsBrLNrMfrt2tq3U4zlRIiVIo=) 5: F6311004DD8E11EC8005001CC4F9AE02.roa (hash: ZnXK3Se5RiC6TyMZXuhhqSGcILLb/GOoRSbMfMWY4KQ=) 6: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: 6+ZhSXqmeYLNvtVUciBd/i+WC+cRD9O28wwDKdiIb3Y=) 7: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: T7QGT79FOIcH+JXdeDOI7OfXeAoCg/KfFrKgz+rlinQ=) 8: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: NQHfqGV9nzmqD0Z+5y3As3/7yKq5UJhzAqztCFjKb3E=) 9: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K0wz8PsK56Y9vdPmk28KICwU224ztLwKvH98LVOzpEQ=) 10: 82D00C2895AD11ED9D01B932C4F9AE02.roa (hash: 4jNkeWKZZzElNBBPpebWTSORyo1jdcNMT9UqLTiLQI4=) 11: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: 6MCuHP0hGHCbWIcRNULVgvVqMVCi4bS/D0xPVURHGuI=) 12: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: Nqh3WwNNgVtjW48fzgCsJJLhFXK/9FBQ0UMSrY4pnVU=) 13: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: B5+9ok4BBzxMUhculbxjaPRYhtPsxy/kzbHo+0VXqb4=) 14: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: KiJ4HG0zGxX7N1cMBzTaagj5jKunNDpzBcWRuBfQJ+4=) 15: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: pB5foXk5THZu3RTM2e2YUP0XDpy1QPsxbStheWqSZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: May 19 03:11:35 2024 GMT Not After : May 26 03:11:35 2024 GMT Subject: CN=66496de7-0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:48:a9:08:0f:7f:e7:95:ad:da:d5:d4:6f: a1:90:8c:2b:9e:8a:c9:6a:79:eb:57:38:be:5c:a4: ce:c9:90:02:7b:30:9c:77:2b:96:00:d6:0f:72:b2: f4:a5:17:52:31:51:91:3f:f0:a6:82:4f:f9:1a:38: 8a:18:04:11:71:13:43:8d:b8:54:6d:96:6f:65:12: 04:a7:95:51:1b:c9:23:e9:99:54:7d:02:c0:ab:12: 4b:a7:bf:45:ed:77:6b:ec:52:61:b9:a5:e2:fa:4d: 74:bd:a7:b4:f9:c1:12:44:22:35:ff:9e:0d:ef:df: ab:67:07:c3:ca:a0:39:fd:09:de:fc:e4:06:64:75: 15:0b:9a:13:50:fa:66:46:c9:1d:c9:41:fb:f5:87: 98:12:a0:3a:c7:85:ea:47:d5:cb:2e:af:1a:c6:aa: 89:1e:e0:6b:f3:84:85:35:b4:22:ea:87:e8:94:b9: d7:90:1a:63:31:fd:c1:d8:17:13:75:70:41:6f:7d: f5:15:28:fd:bc:b5:c2:e0:78:67:73:e8:36:02:2e: bf:7c:97:dc:9c:6a:56:86:7f:9f:5e:a1:58:ed:6e: c7:ee:73:6e:d7:f2:0c:02:c9:12:19:bd:be:ee:39: ac:17:e6:be:31:78:61:73:09:c1:55:a3:90:9c:70: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2A:D2:F7:95:C6:44:1A:4C:69:12:04:C2:BD:E0:1A:F9:61:4B:DB X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c7:18:13:69:ea:49:c7:71:c2:02:ab:cf:e1:a6:73:bf:0e: a5:57:4a:52:b3:df:df:2f:af:1d:e7:d5:7e:c0:d2:dd:37:89: 8b:c9:5a:6d:31:75:d8:38:ce:8a:79:56:59:78:4a:d1:32:21: 70:4d:f3:91:44:64:a9:53:eb:af:11:22:90:97:8a:52:38:27: 67:59:0f:c8:f9:3a:b1:bc:14:13:d0:1a:f4:72:3f:83:93:59: ed:5f:3d:f3:cb:4e:9c:70:e1:bb:39:6b:dc:1f:4e:e5:d6:7d: 50:7e:5f:c1:26:44:2d:09:b6:de:72:29:a2:09:a6:28:97:32: 22:df:ab:cc:9d:de:0f:9c:3c:27:c8:0c:d2:9f:c9:75:a3:89: 9a:5a:77:de:b3:db:11:f7:30:c2:68:b2:8b:d2:42:08:0c:7b: 9a:32:d3:3e:d7:ad:6b:75:c3:36:76:e0:67:01:a6:7e:20:25: 4b:69:97:5e:b5:b7:2b:b7:c2:44:e3:28:75:b6:90:a3:7e:25: c6:0c:e0:3f:49:3e:62:d9:e7:23:51:f3:51:ca:97:22:61:44: 2a:ae:e4:c2:18:b6:68:6e:c9:e6:26:47:6b:65:55:92:ab:7c: 9f:16:7f:44:a9:d2:45:75:6c:b5:47:b1:6f:05:b2:75:1c:b4: ce:4d:06:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjQwNTE5MDMxMTM1WhcNMjQwNTI2MDMxMTM1WjAYMRYwFAYD VQQDEw02NjQ5NmRlNy0wZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+xIqQgPf+eVrdrV1G+hkIwrnorJannrVzi+XKTOyZACezCcdyuWANYPcrL0 pRdSMVGRP/Cmgk/5GjiKGAQRcRNDjbhUbZZvZRIEp5VRG8kj6ZlUfQLAqxJLp79F 7Xdr7FJhuaXi+k10vae0+cESRCI1/54N79+rZwfDyqA5/Qne/OQGZHUVC5oTUPpm RskdyUH79YeYEqA6x4XqR9XLLq8axqqJHuBr84SFNbQi6ofolLnXkBpjMf3B2BcT dXBBb331FSj9vLXC4Hhnc+g2Ai6/fJfcnGpWhn+fXqFY7W7H7nNu1/IMAskSGb2+ 7jmsF+a+MXhhcwnBVaOQnHAlMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwq0veV xkQaTGkSBMK94Br5YUvbMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWxxgTaepJx3HCAqvP4aZzvw6lV0pSs9/fL68d59V+wNLdN4mLyVpt MXXYOM6KeVZZeErRMiFwTfORRGSpU+uvESKQl4pSOCdnWQ/I+TqxvBQT0Br0cj+D k1ntXz3zy06ccOG7OWvcH07l1n1Qfl/BJkQtCbbecimiCaYolzIi36vMnd4PnDwn yAzSn8l1o4maWnfes9sR9zDCaLKL0kIIDHuaMtM+161rdcM2duBnAaZ+ICVLaZde tbcrt8JE4yh1tpCjfiXGDOA/ST5i2ecjUfNRypciYUQqruTCGLZobsnmJkdrZVWS q3yfFn9EqdJFdWy1R7FvBbJ1HLTOTQZo -----END CERTIFICATE-----Generated at Sun May 19 03:48:50 2024 by rpki-client on console-fra.rpki-client.org