$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json) Hash identifier: G9gfD/laMYWgIY8uRS6NtWLZG4YzpAj7rThPV+zIWKg= Subject key identifier: 30:05:34:6B:CB:F8:7A:7A:60:25:EB:67:4E:7B:43:F1:49:2A:57:1B Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 036A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft Manifest number: 02DC Signing time: Sun 19 May 2024 04:01:21 +0000 Manifest this update: Sun 19 May 2024 04:01:21 +0000 Manifest next update: Sun 26 May 2024 04:01:21 +0000 Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 44adJF+/Ploi+/Z/2ZU+8Uuo6/CXc2WUB3ibFQoDcGE=) 2: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: jmi1JZjzehR3yePlMUTZutphDwDUThMcgz51EkckL2c=) 3: 1C7F3C8A7EA711EE9C448073C4F9AE02.roa (hash: N6DJRcb0SjnSIyTeiruNRar8brYnzHfOY/5Qmm+3hno=) 4: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: sHaHg9/ZEy3FERUEfrG4jIGoDgh8jdysF5zBd2/CKb8=) 5: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 4ers2wprTN+JJmazhN9QYuHdjF3IelqkxZc6uQfuvg4=) 6: 57009BC0E4FE11EE8B097A79C4F9AE02.roa (hash: OwETguEfEvG/dWuG5wsUlMAo/UY27Q8IMcr+unH4nas=) 7: 16BF6942E73D11EE8DEA7557C4F9AE02.roa (hash: mEden+ZL6AprpGBwQdsicZV5E+5pVyJeJDiZk89o9PY=) 8: 86EB79708F1011EE9F013A61C4F9AE02.roa (hash: PFvirkze092+A2fSWCZLyrdNbDRpoINf3y4pSF8csaI=) 9: D1BA7FEECA3B11EE8D7CEE5CC4F9AE02.roa (hash: aRgm5zgnsHFIXtP+yBcTahvHh5UAq+FydVbLV5yb3hc=) 10: F16906BE625611EEBA45F77CC4F9AE02.roa (hash: dgDZLoAzcazveqHHtAj6qR7dsw1O4iVW5y2mGZ2E860=) 11: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: jMpeqZzda4Tlk/0o2YLAEWGmXqhyM7sTgyqPU+OleOk=) 12: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: SoCQctOLjZY4cy0M3zbgvSzieCF+rw9JdVfCkJg1AcI=) 13: E011A1CE9F0911EE80908323C4F9AE02.roa (hash: 9VphZWM+pP4iVWC4TX37ejJaMHbcM4Ll0ZUv37yLJrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: May 19 04:01:21 2024 GMT Not After : May 26 04:01:21 2024 GMT Subject: CN=66497991-15f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f5:3f:52:d0:25:7b:2f:85:79:c4:68:49:81: 9d:fa:1e:5a:97:5b:05:8e:c9:b4:a9:17:c3:ef:42: ae:f4:ed:c6:89:ce:11:74:88:14:b1:ac:76:15:52: eb:bf:a3:cd:97:8e:6f:ff:c4:d4:27:b0:f9:90:99: 29:ab:e4:51:b1:63:61:54:cf:e0:a0:b2:67:bf:6d: 25:d4:ca:2e:46:50:bd:96:6c:93:08:92:5a:92:ba: 48:b5:3e:2b:d6:1c:51:3e:02:5d:a2:59:14:3b:e1: cf:1a:06:da:5c:04:03:bd:5a:28:dc:66:ee:1b:b9: c5:50:8c:db:ea:f2:ad:d2:cd:38:f0:c5:71:b1:86: 38:87:e0:d8:0f:78:97:c5:c3:73:e7:4c:bb:44:03: b0:04:27:4a:52:59:e5:2f:10:01:5a:c7:0e:7b:a6: c8:dc:46:e5:bf:e6:8b:ee:e3:b7:6f:e0:e1:ae:41: 94:22:1d:78:cd:53:a7:57:93:e5:01:cc:a0:6d:d5: 33:a7:92:45:bd:80:3f:5a:81:0e:35:04:07:67:3c: cd:dd:0c:81:cf:70:eb:24:77:f3:05:17:06:72:d6: 28:ad:74:b2:38:2f:13:13:fe:6a:af:3a:36:b9:49: 73:4a:b6:1c:ac:a9:98:1d:82:c1:da:df:cd:32:b1: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:05:34:6B:CB:F8:7A:7A:60:25:EB:67:4E:7B:43:F1:49:2A:57:1B X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a7:b8:b5:41:59:6a:35:ba:57:36:11:27:29:1a:e1:26:55: a7:dd:2c:1e:71:b6:f8:0a:27:1e:5e:27:ca:80:df:80:fc:a2: 05:e8:00:67:15:a1:9e:1e:af:2b:f4:d7:de:86:db:90:55:4b: e5:a8:62:fd:c9:16:86:62:95:4c:e0:ad:4a:19:72:58:fe:94: 09:58:cd:e9:b6:e2:40:ae:31:b6:44:a6:24:2b:c2:e3:fa:21: 6f:d0:39:ca:ed:21:f7:55:dd:d6:d9:e2:bc:da:06:0d:94:6b: 05:4b:a0:0d:a7:e1:d1:08:97:b1:08:e9:9a:ff:91:52:9f:02: cb:c2:b9:0d:d1:9f:32:1e:44:ff:b8:30:c1:a3:8e:b0:9b:46: 63:d7:7a:d2:72:c5:81:a9:ed:00:47:e4:c9:19:25:32:a9:53: e6:cd:d2:11:e0:53:6f:91:e1:c1:19:e8:b5:d0:02:3b:6f:07: 46:42:9b:59:83:9a:8c:0e:c2:0a:7b:c1:7c:59:3e:0e:c0:e0: 7e:c9:a1:a7:9a:83:ae:af:6a:98:11:85:ad:50:d1:68:bd:b1: db:7d:46:20:6f:f2:cb:b2:ef:51:7a:a1:df:d9:0a:21:87:ca: c5:b1:91:a3:6f:04:0f:10:c7:fb:49:d5:04:6e:1c:66:e9:d1: ca:ec:62:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjQwNTE5MDQwMTIxWhcNMjQwNTI2MDQwMTIxWjAYMRYwFAYD VQQDEw02NjQ5Nzk5MS0xNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fU/UtAley+FecRoSYGd+h5al1sFjsm0qRfD70Ku9O3Gic4RdIgUsax2FVLr v6PNl45v/8TUJ7D5kJkpq+RRsWNhVM/goLJnv20l1MouRlC9lmyTCJJakrpItT4r 1hxRPgJdolkUO+HPGgbaXAQDvVoo3GbuG7nFUIzb6vKt0s048MVxsYY4h+DYD3iX xcNz50y7RAOwBCdKUlnlLxABWscOe6bI3Eblv+aL7uO3b+DhrkGUIh14zVOnV5Pl AcygbdUzp5JFvYA/WoEONQQHZzzN3QyBz3DrJHfzBRcGctYorXSyOC8TE/5qrzo2 uUlzSrYcrKmYHYLB2t/NMrFbrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAFNGvL +Hp6YCXrZ057Q/FJKlcbMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnp7i1QVlqNbpXNhEnKRrhJlWn3Swecbb4CiceXifKgN+A/KIF6ABn FaGeHq8r9NfehtuQVUvlqGL9yRaGYpVM4K1KGXJY/pQJWM3ptuJArjG2RKYkK8Lj +iFv0DnK7SH3Vd3W2eK82gYNlGsFS6ANp+HRCJexCOma/5FSnwLLwrkN0Z8yHkT/ uDDBo46wm0Zj13rScsWBqe0AR+TJGSUyqVPmzdIR4FNvkeHBGei10AI7bwdGQptZ g5qMDsIKe8F8WT4OwOB+yaGnmoOur2qYEYWtUNFovbHbfUYgb/LLsu9ReqHf2Qoh h8rFsZGjbwQPEMf7SdUEbhxm6dHK7GLB -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org