$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json) Hash identifier: Irpe/myAyvJugC1LIg4fikQijgB5YU2jfe/dHUP0KG4= Subject key identifier: 51:13:C6:75:B3:EA:61:70:82:F5:B7:30:A8:3D:3E:DA:76:FC:72:8F Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft Manifest number: 33F7 Signing time: Sat 18 May 2024 14:23:51 +0000 Manifest this update: Sat 18 May 2024 14:23:50 +0000 Manifest next update: Sat 25 May 2024 14:23:50 +0000 Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: vGqjW+jLg2fl+3DO4YuhlfPgP6Zvukp9o/kZqFIY4vI=) 2: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: 3p9OCi49asgCy5SBAKUTn4Am480OzEg0ytxlKBtYR7E=) 3: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: 3ny77XmK0R0t+wWpRaRj6/0jADY7h8DW4tQXhN5wy1Q=) 4: 425C78E48DB811E98ACC9F7EC4F9AE02.roa (hash: NeX3nlV47g61NgXKBIjXSrncjuAj23iwhp28oDebxag=) 5: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: RVCEZphh0VY6G4aQXCKb47TtLr7Pklp8Ny0XUXYyqkg=) 6: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: nwlwRKTf8/88wD0XHgQwRvghlq46etyxH8s4HvJ0SaU=) 7: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: M9fI6A69PBlrtaZv9mFzlc19/hv0PUmlZYVxL/+othI=) 8: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: +jBDq1DtkzkicPlpMmbrOt0G1NV/2LRTZ3ooPJ3LYxE=) 9: CEC68F44973211E9954F0565C4F9AE02.roa (hash: xdP5CNg4VaWLUv1PlYSz9fDRQGjtui1CtCLJqOZmcFM=) 10: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: 7YDcINujNdYWr5dyWzmAhMDEOPeeZscdVmCzJdffcqY=) 11: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: NrRnd5j9LqCBlXu53ZhoQQ+WhDdOXavSpskqRBB+ack=) 12: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: A1IUDPMC/Rxxzj5f79vVctc7IWAcASo/S4IA6PDargQ=) 13: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: tOW1+XlAohJ5jcO0tdct66+fo3vT7dx4hPR8gItTklY=) 14: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: /Ifqf0984NjGPAWGbF4mso5wI1oMXObhk2vSnv1SWW4=) 15: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: 3twoZG3jaG/0iKL6CszvtVJZWK+4n1R8BuGiAbWMj1c=) 16: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: eKuyu+fmX40BFSzGVNmxCuk9LSb8Bwq+mwXfWpSVHvE=) 17: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: fBDMREEQQWdingttW0Kn5mwzJ0DbHTHyYlumw8N0aA4=) 18: 425832460EB611EFB9CD4F47C4F9AE02.roa (hash: xbaZ5wvR+xbnWOVlmnOUvc/bfyu8MsFLeh8cN7kC+88=) 19: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: mZZO7VRNtEd/9mSg4UGXrPNl1qbP+Ken3yNN8V+/ZNY=) 20: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: vzBGal76vfkLrfXHNjJC7pq/YMdNqJaZICD9f3SVmYQ=) 21: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: fnlc3mSvfnKxK3eD9iZkDjhTdWJwzI4OqoBvnF3XodI=) 22: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: a9n/5ub/wg6jaNasZRtwYGrzpYC4g+nf9/bsgp7uQoc=) 23: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: YOPUecX2A28pnWwhHGiq0o0Qvv7Y8K91kQfSlv4cAX8=) 24: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: SoLLHnF6QDYrqWmLqnGhPJHIkGf9D0Rk3+Ynfq303HQ=) 25: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: PZLTBMkC0d0yx39JKyMqcPkJkoep9QbhBvKPd7r2IDU=) 26: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: qQWxpqMSMamHDSBIbaszk4GG/i5VmOsxz0zBXQyHWII=) 27: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: 0b32BRpmkKaudEg9QkjHzYry2KfYAkMPQEkLumi7yJo=) 28: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: YmZSfwmOLTcvS+ZrTXziUHM/FD7XL+wHJjgl7HKUAsk=) 29: 3F9B6EA88DB811E98ACC9F7EC4F9AE02.roa (hash: NGJt3vOtaqA5un/v4FGEbB3RAtOfwiq2EsA4Fh9obvg=) 30: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: lwHJVdbN23eCChW/THPLEAzro1WeGykTAhAcNxH5FKo=) 31: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: bRypCj2uFnSBN5FQ9sRRC3SAbw2gFnrrGagPlT6+4ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: May 18 14:23:50 2024 GMT Not After : May 25 14:23:50 2024 GMT Subject: CN=6648b9f7-4b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:6f:7d:83:73:e9:49:ed:52:cf:99:f2:85: 50:25:c2:fe:d7:7e:1b:eb:3e:f2:a1:77:c5:64:d2: 6f:04:d6:7d:31:49:df:06:17:1c:55:e1:76:4d:b4: 6d:68:1c:66:2e:57:b1:e9:62:b7:79:80:ad:34:72: 82:27:b0:d6:f8:87:47:be:fa:c6:40:d7:99:56:34: ff:6a:c0:4e:3b:41:a7:af:0b:62:74:05:29:f9:3f: 8c:4a:5b:4b:dc:22:89:dc:99:8f:fb:1d:ee:0f:db: 62:da:e1:96:65:d0:2e:1e:f4:86:e8:01:5a:b0:24: e6:d1:6d:d2:d1:95:fa:2d:09:ad:cc:2e:41:5c:9c: c3:93:46:61:48:5a:45:d9:4e:5f:5a:fe:37:8e:ff: a2:c8:fc:cb:f1:4c:fa:15:7a:f4:e2:f5:d8:3a:2b: d4:b0:5b:f3:cf:24:03:2c:c5:41:94:53:93:49:92: 65:3f:70:fd:86:18:b9:2d:8b:94:2b:37:af:d9:76: b7:dd:2b:6b:50:24:ec:f0:ac:14:e7:5e:7b:c4:1a: 33:19:a4:d7:59:7d:f8:e2:45:86:c2:84:48:9a:f9: 5b:2c:95:33:ec:db:ff:69:15:7d:23:74:2a:a7:93: ff:15:dc:6c:d8:55:47:2c:18:10:6d:28:14:43:b2: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:C6:75:B3:EA:61:70:82:F5:B7:30:A8:3D:3E:DA:76:FC:72:8F X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:49:81:42:05:72:98:3f:94:27:94:b8:0e:6b:5f:54:66:f2: 8f:ef:8e:fe:d5:5a:0a:d6:ac:bd:0e:1d:ce:ef:13:d4:6c:18: 77:7a:e8:0e:05:03:e6:c5:f1:ff:85:44:61:f3:5f:77:4b:1f: 13:1a:59:ee:0f:f6:d2:85:4f:bf:12:20:9a:92:5b:f1:b6:2b: 40:d5:93:43:ae:85:78:10:15:fa:77:4a:a7:f7:c7:3d:c5:76: 35:27:0e:da:3c:37:bf:a2:f4:48:c6:11:24:ba:29:0a:6f:93: 5d:f3:3f:e7:17:84:41:4f:c8:9a:e9:da:fa:79:8e:5c:07:eb: 5c:2a:e6:4e:4b:55:03:c7:7b:a7:4b:0b:43:53:e8:2b:79:dd: 11:54:6e:43:94:3b:b3:03:f6:10:9b:5e:8e:d4:c3:17:66:ef: 0f:6a:36:a9:61:e5:4e:23:ac:58:41:57:25:08:c4:9a:9f:b0: 18:f8:33:94:1d:c8:d0:f3:54:76:b2:09:97:bc:a7:b2:52:5a: dc:64:cd:d9:62:66:29:80:d7:48:56:9a:d5:d2:9a:26:04:03: c3:bf:b1:8f:1c:51:28:3c:a5:66:50:76:ef:6f:06:51:a2:8a: e0:21:cc:8e:9d:7c:ca:48:05:3d:1e:0f:32:05:63:4d:a4:89: 4f:ad:32:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNTE4MTQyMzUwWhcNMjQwNTI1MTQyMzUwWjAYMRYwFAYD VQQDEw02NjQ4YjlmNy00YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjlvfYNz6UntUs+Z8oVQJcL+134b6z7yoXfFZNJvBNZ9MUnfBhccVeF2TbRt aBxmLlex6WK3eYCtNHKCJ7DW+IdHvvrGQNeZVjT/asBOO0GnrwtidAUp+T+MSltL 3CKJ3JmP+x3uD9ti2uGWZdAuHvSG6AFasCTm0W3S0ZX6LQmtzC5BXJzDk0ZhSFpF 2U5fWv43jv+iyPzL8Uz6FXr04vXYOivUsFvzzyQDLMVBlFOTSZJlP3D9hhi5LYuU Kzev2Xa33StrUCTs8KwU5157xBozGaTXWX344kWGwoRImvlbLJUz7Nv/aRV9I3Qq p5P/Fdxs2FVHLBgQbSgUQ7KS7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFETxnWz 6mFwgvW3MKg9Ptp2/HKPMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8yN0Y4M0I3MDFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVz VzZMcElTZVRBa0FKVnFtQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfSYFCBXKYP5QnlLgOa19UZvKP747+1VoK1qy9Dh3O7xPUbBh3eugO BQPmxfH/hURh8193Sx8TGlnuD/bShU+/EiCaklvxtitA1ZNDroV4EBX6d0qn98c9 xXY1Jw7aPDe/ovRIxhEkuikKb5Nd8z/nF4RBT8ia6dr6eY5cB+tcKuZOS1UDx3un SwtDU+gred0RVG5DlDuzA/YQm16O1MMXZu8PajapYeVOI6xYQVclCMSan7AY+DOU HcjQ81R2sgmXvKeyUlrcZM3ZYmYpgNdIVprV0pomBAPDv7GPHFEoPKVmUHbvbwZR oorgIcyOnXzKSAU9Hg8yBWNNpIlPrTKT -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org