$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft File: u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json) Hash identifier: 1nGLOKPVTN5aelXsbgVuYV+cMHYsKt58f43MNOEADSU= Subject key identifier: C0:AD:A0:62:C8:7C:47:D5:BC:39:CA:12:11:3F:78:C9:9B:4B:AC:50 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3366 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft Manifest number: 32FF Signing time: Thu 16 May 2024 15:37:17 +0000 Manifest this update: Thu 16 May 2024 15:37:16 +0000 Manifest next update: Thu 23 May 2024 15:37:16 +0000 Files and hashes: 1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: yqDftkx06or6QeT4QXcdBz3vnYb1t0uXgYvoAgi5VFI=) 2: 760C74EC021A11EF9D39D267C4F9AE02.roa (hash: rh4X+qJ7ZDKocjLDVjEf80yULt0Eazfld4AaA5ZlTz0=) 3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: ODd/KbyV1dKtPRXyiR/8CGUuMB8EdgFkSZIUAw8ZgVc=) 4: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: J2B62sMcnSdrJJbUQ/iV8zM2NMli09yKtWpghmuGGD8=) 5: D77AED8064BD11EEAB38FB17C4F9AE02.roa (hash: SPtsBKzyk4Xm9+5vb0/V/1U3p9/yup3JPQfUkfpvytA=) 6: 1D5CF862021A11EFB5F82E67C4F9AE02.roa (hash: mQNcX7xDwE8PsMaZz9vI0pDlLUi9LiHlpTmzOdzm5mg=) 7: B3087E32CE2F11EEAF078018C4F9AE02.roa (hash: ZksUYGAcB3L+kUumgikeHffV7i9h1cHbRPb3hxzqu1A=) 8: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: xraItLh7Qa2azf1yhEL6lYfhMGBZEGyxS0vkvcHXR/E=) 9: B3E6A716CE2F11EEAF078018C4F9AE02.roa (hash: jbl/yZfjtacFHJLXIZQnqzQmIA4/kNlkUibqczFg0Gg=) 10: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: GStxspM7rX6cVJq7TJi4F9iOLd6pT7iZHKiCRc0MCaI=) 11: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: 5BoxLKekJFCkZTtAL7aRDOqjExsyHH7PHxs8u02byjw=) 12: B590CBC8CE2F11EEAF078018C4F9AE02.roa (hash: sS7KG6rHP9vAS6J9BmLyAdNC5ob2+S3UbgfjYP6cBYo=) 13: A83F948064BD11EE98E6B05FC4F9AE02.roa (hash: xFI39PGqmtRlHq6qAWb4CCtH/S2zg4uorYD8gQFQ1Ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13158 (0x3366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: May 16 15:37:16 2024 GMT Not After : May 23 15:37:16 2024 GMT Subject: CN=6646282d-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:f9:80:c8:dd:8f:5d:09:fa:47:e6:8a:ce: d6:45:ad:b0:01:06:6f:75:a0:57:ab:2b:32:62:54: 7a:27:6d:b0:8e:bd:9c:61:57:6b:2a:f5:0e:ed:ea: e6:f6:20:c2:ea:8a:b0:43:ed:33:0f:e6:7c:b8:46: 6e:60:a7:9d:cf:ac:f4:6e:d0:80:0d:0c:08:5f:cd: bd:fa:79:8a:fd:01:5c:d1:82:93:f1:08:87:75:08: e4:b3:f1:0f:55:10:fc:4f:6f:9d:bb:02:c1:a1:48: fa:58:c5:16:50:e6:19:04:c1:86:95:46:75:44:9d: b3:84:80:69:03:53:7a:37:17:11:57:69:96:91:5e: f2:57:ef:f3:06:b6:92:6c:8c:b4:fc:32:bb:82:30: aa:9c:40:ed:c0:91:89:bd:36:2c:ab:7d:74:82:ed: cf:c7:ca:98:70:86:44:98:cd:cd:a7:62:6a:53:19: ae:25:2a:16:51:d9:fc:80:c5:07:bb:f2:44:eb:70: 91:11:e8:94:bc:24:f9:8f:db:45:9f:05:e6:34:13: b6:36:92:30:cc:b3:ed:3b:51:75:3f:24:f3:ae:34: 2b:b8:69:f8:0e:2c:8a:a7:51:ed:f4:30:f0:d6:a0: 1c:c3:2f:15:f1:65:d3:c7:ff:bc:b6:a2:ce:23:7d: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AD:A0:62:C8:7C:47:D5:BC:39:CA:12:11:3F:78:C9:9B:4B:AC:50 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:52:1d:7b:35:05:f3:69:a6:9e:1f:e6:2a:ce:78:a5:ae:a4: 7d:3a:00:be:e5:6b:b5:a7:1e:2a:d2:ea:01:b2:77:0a:86:a0: a3:3a:e9:8d:9c:f1:fb:0c:9f:8c:fe:bd:50:cd:17:0b:d7:ea: 7f:9c:a6:54:c6:48:79:73:21:9c:a6:41:d1:f2:b4:6b:5a:ce: 24:a8:c9:1f:1d:bc:a2:d4:16:49:21:3c:d4:70:8f:be:de:08: e4:20:29:ed:61:27:c5:92:6d:9e:a5:b5:c5:7f:42:99:73:46: 6e:bb:e1:82:81:dc:5e:72:6c:52:aa:ca:34:f4:60:19:0b:f5: f9:57:3c:5a:b7:35:b1:84:12:df:aa:28:82:21:02:a1:34:66: b3:75:c3:91:27:28:e0:5d:13:d1:48:54:ed:7d:19:cf:81:e8: 77:9a:2c:30:b6:47:9f:5f:c6:8c:01:73:73:26:d6:54:ad:21: 56:c8:d5:0e:7c:46:99:c6:b1:d9:bf:8b:34:b9:a4:13:21:6a: 89:e0:da:d0:48:3d:38:d7:da:fd:32:20:52:01:c6:67:13:57: fc:d2:c6:0b:5b:48:ad:d3:1d:df:6f:e5:42:12:37:4e:42:df: ed:a4:64:e8:2d:a1:49:23:39:77:98:3b:42:da:ca:7c:73:8b: a8:ba:68:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjQwNTE2MTUzNzE2WhcNMjQwNTIzMTUzNzE2WjAYMRYwFAYD VQQDEw02NjQ2MjgyZC03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOn5gMjdj10J+kfmis7WRa2wAQZvdaBXqysyYlR6J22wjr2cYVdrKvUO7erm 9iDC6oqwQ+0zD+Z8uEZuYKedz6z0btCADQwIX829+nmK/QFc0YKT8QiHdQjks/EP VRD8T2+duwLBoUj6WMUWUOYZBMGGlUZ1RJ2zhIBpA1N6NxcRV2mWkV7yV+/zBraS bIy0/DK7gjCqnEDtwJGJvTYsq310gu3Px8qYcIZEmM3Np2JqUxmuJSoWUdn8gMUH u/JE63CREeiUvCT5j9tFnwXmNBO2NpIwzLPtO1F1PyTzrjQruGn4DiyKp1Ht9DDw 1qAcwy8V8WXTx/+8tqLOI33TcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCtoGLI fEfVvDnKEhE/eMmbS6xQMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzcwRi83MzQ2RThBMjYwNDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVk SWlZLXJIOXFFY0JTX2ZZejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Uh17NQXzaaaeH+YqznilrqR9OgC+5Wu1px4q0uoBsncKhqCjOumN nPH7DJ+M/r1QzRcL1+p/nKZUxkh5cyGcpkHR8rRrWs4kqMkfHbyi1BZJITzUcI++ 3gjkICntYSfFkm2epbXFf0KZc0Zuu+GCgdxecmxSqso09GAZC/X5VzxatzWxhBLf qiiCIQKhNGazdcORJyjgXRPRSFTtfRnPgeh3miwwtkefX8aMAXNzJtZUrSFWyNUO fEaZxrHZv4s0uaQTIWqJ4NrQSD0419r9MiBSAcZnE1f80sYLW0it0x3fb+VCEjdO Qt/tpGToLaFJIzl3mDtC2sp8c4uoumh2 -----END CERTIFICATE-----Generated at Thu May 16 17:51:20 2024 by rpki-client on console-ams.rpki-client.org