$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: PMNZMkNcON+xKDRyeZ2r6eQgp4ceJtvcJkekUGAWO6o= Subject key identifier: EC:D5:14:9A:86:D5:3B:9A:62:D9:2A:6B:2B:03:5E:47:6D:87:C4:A6 Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 3420 Signing time: Sat 18 May 2024 15:01:08 +0000 Manifest this update: Sat 18 May 2024 15:01:07 +0000 Manifest next update: Sat 25 May 2024 15:01:07 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: 5L7bSGRbvgWDzNUrsrprtlXSxuhK8Yqe6N3M5rWi0Oc=) 2: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: xpjctOic9ALUbvMpVasWFZFNE3OfU+88qrN9oKY4+Dw=) 3: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 5S03I75+hNJBuUJ5fNzxs9YO5CLy34Di8bLlb2dNGpY=) 4: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: GdpPqk3j46qrhM/D3Q+zjZqlqm9OzVhbyylENAX11Ng=) 5: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 5arC7pafcKh/AcWsnn6ZMn4yInbZRBna+RKiehfd8iA=) 6: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: LZzUQOcRmtmL+1vVju87h7++WY3DSavtT2Wpvh36ohE=) 7: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: syWvSLG7GaKla/rfCIba4Fb9KHufM9emZCvug3k1Tm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: May 18 15:01:07 2024 GMT Not After : May 25 15:01:07 2024 GMT Subject: CN=6648c2b3-f6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:15:c3:84:0f:03:7b:f8:b9:28:8f:88:09: d4:61:ed:01:64:b9:41:62:37:e0:da:b8:47:3d:cf: 4f:ae:68:f9:05:76:af:81:6a:85:cc:fc:9e:10:90: 26:96:cb:9c:fa:75:27:8d:06:99:e3:02:95:5a:77: ff:32:4c:a8:b4:e2:eb:39:cb:65:63:14:13:ae:58: 22:82:eb:04:1f:38:04:e0:a6:cd:f3:8f:8e:ba:3c: e6:88:24:12:2b:82:4e:af:d9:27:18:c6:69:f7:60: 47:34:56:a1:da:e9:7b:d5:03:63:00:db:ab:d2:bd: 62:37:c9:d9:e5:0a:85:9f:8f:3b:31:f9:41:24:83: 6a:a4:a4:f7:a9:5d:49:36:ce:75:de:52:9d:e7:30: 05:1e:3d:a9:a1:a5:51:f1:23:3a:ef:3e:61:0c:7f: a5:be:c6:2c:11:1c:b8:ad:3a:98:47:0b:c5:38:ce: dc:9b:58:99:61:4e:4f:73:2b:e4:af:dc:0d:1b:ce: 7b:8e:1b:f5:d3:b5:3e:7f:69:9c:0d:a8:09:59:09: 6b:31:ee:b6:ec:1e:92:e7:c1:d8:66:de:9f:19:4d: 43:a5:f6:67:f3:e1:9f:cf:af:fe:0a:04:82:f5:6b: 6d:23:c8:a0:95:f9:a9:5c:a0:26:cf:53:d7:95:8e: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D5:14:9A:86:D5:3B:9A:62:D9:2A:6B:2B:03:5E:47:6D:87:C4:A6 X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f8:73:a5:1e:4a:0d:f4:c7:b1:e7:3c:74:99:21:38:74:1b: 55:ff:99:10:7d:4a:69:af:9c:4e:b6:da:06:dd:ea:11:f2:b4: 22:a2:dc:51:99:7e:f4:d8:0a:dd:43:a1:a2:38:a1:bd:57:fb: fa:31:68:11:e1:71:27:a8:59:9c:d0:96:08:a5:fa:f7:d8:cc: 01:52:9e:fe:a3:19:ae:e6:6d:53:d4:06:83:fa:93:9b:8e:f6: fe:af:0b:96:73:1a:98:45:18:b0:cf:4f:7e:66:62:86:20:62: bd:31:a0:0f:41:08:a6:21:58:10:35:62:79:c7:ef:b0:b3:76: 5d:44:1b:f0:aa:b0:f4:24:b0:88:5b:15:81:a6:6f:9d:9c:f4: 4f:0e:74:4c:da:4b:ad:87:d9:e6:5e:ea:41:07:fa:cb:b3:c5: d0:6c:1e:14:9c:cb:c1:d8:9f:f8:f1:cf:84:40:33:75:a1:e2: 6c:e2:9c:60:b1:d8:1a:af:9f:ca:13:4c:5f:4c:8c:31:8f:1f: 50:39:a3:b1:5d:b1:c9:21:9d:45:72:b6:23:55:e5:3f:16:39: 00:d1:15:0f:5b:91:61:5e:31:06:5b:3a:76:4e:0e:2c:d6:fc: 2e:ff:0c:03:a3:c0:4d:32:50:3f:2f:c3:04:99:3c:61:f4:c8: e7:56:5c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjQwNTE4MTUwMTA3WhcNMjQwNTI1MTUwMTA3WjAYMRYwFAYD VQQDEw02NjQ4YzJiMy1mNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJoVw4QPA3v4uSiPiAnUYe0BZLlBYjfg2rhHPc9Prmj5BXavgWqFzPyeEJAm lsuc+nUnjQaZ4wKVWnf/MkyotOLrOctlYxQTrlgigusEHzgE4KbN84+OujzmiCQS K4JOr9knGMZp92BHNFah2ul71QNjANur0r1iN8nZ5QqFn487MflBJINqpKT3qV1J Ns513lKd5zAFHj2poaVR8SM67z5hDH+lvsYsERy4rTqYRwvFOM7cm1iZYU5Pcyvk r9wNG857jhv107U+f2mcDagJWQlrMe627B6S58HYZt6fGU1DpfZn8+Gfz6/+CgSC 9WttI8iglfmpXKAmz1PXlY5XFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzVFJqG 1TuaYtkqaysDXkdth8SmMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh+HOlHkoN9Mex5zx0mSE4dBtV/5kQfUppr5xOttoG3eoR8rQiotxR mX702ArdQ6GiOKG9V/v6MWgR4XEnqFmc0JYIpfr32MwBUp7+oxmu5m1T1AaD+pOb jvb+rwuWcxqYRRiwz09+ZmKGIGK9MaAPQQimIVgQNWJ5x++ws3ZdRBvwqrD0JLCI WxWBpm+dnPRPDnRM2kuth9nmXupBB/rLs8XQbB4UnMvB2J/48c+EQDN1oeJs4pxg sdgar5/KE0xfTIwxjx9QOaOxXbHJIZ1FcrYjVeU/FjkA0RUPW5FhXjEGWzp2Tg4s 1vwu/wwDo8BNMlA/L8MEmTxh9MjnVly6 -----END CERTIFICATE-----Generated at Sat May 18 15:58:26 2024 by rpki-client on console-ams.rpki-client.org