$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: 539tLUGtcQzH0EBebqjq9bq6diDHcDu9lpljerf2Ai4= Subject key identifier: 18:A0:0F:0B:6E:78:FC:FB:1F:C0:98:66:F2:FA:90:4E:6B:94:63:88 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 17DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 1596 Signing time: Sun 26 May 2024 17:33:38 +0000 Manifest this update: Sun 26 May 2024 17:33:38 +0000 Manifest next update: Sun 02 Jun 2024 17:33:38 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 71Oe8dKQ2MYGf5nsPTddzOLXWxij/+mmu5Au1uZRORo=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: uTH4DdnkHvUCoP3voYzyx8m9UxRezv60J9sATz8UShU=) 3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: +pWu5uw9xjDAeg9sOYWF+9gmrwo9NbIlliG3GcgxTeE=) 4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: HbzRdIs3KuV/WLcwtWC1hb/c2HWLxUc2yZDreu1apGM=) 5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: 59pY/EzDVxdAKRkl477DnesloWwKNbY2A4TWt1wm+Hk=) 6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: 0e7s2VX4IOKAD09bdsuYVHs8PnbwS+oaZ8v6sVdfh0s=) 7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: TXxipvWYdHmo+yYnHI7mxR0Ldfec2TqLDPpiUwEXPl4=) 8: E756D48AB7A911EBB5A9A810C4F9AE02.roa (hash: xTtn/tFypxeRL2x4WUeHhca8V7kf2TvsALHvGkxyqtA=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: 6RPn1a+rWd2NLisQdeM9L8BHTz2fD0+yCLXi5mKnbws=) 10: 158452F2D30711EAB97DCF1CC4F9AE02.roa (hash: d988sIelj3e6rRj0YsLFn5M1V0lYtvmuaC0kvd1NcXE=) 11: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: r6ib9/db7Uzs6OwRGIIIO3AR9xUdnpzwielA/LB94vA=) 12: 3BFCBEC06D0111ECA5893B2BC4F9AE02.roa (hash: ZAxawS5keAR/cas7xBdMQ1/7WXkje/rC63OIfHEeY1I=) 13: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: NI+PprOlP5jlHG06h5RV+CypYbwybUF+B8HHASYAzBk=) 14: 4541F37888E911EEB007942FC4F9AE02.roa (hash: Ka8SlP6B1dTpsHfyohju7nfGn1pFutWCXxb81re3CLM=) 15: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: nL6wEW9pLomfYHclEU8sPpPRG0B+AMu68rYHS2BYRDE=) 16: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: eBFGO12oDTyqo1p6145sG6wYHSIxsBjmKQNKXZiPJ/4=) 17: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: Vjf7rkp8KyMZGDhNVi0wiawcIT6VPm4cT58TPwnuxPs=) 18: FA56E57A538711EA81ECEB2EC4F9AE02.roa (hash: UEwGajDr+kJEBYgkqInYcTN0QwvP7QjsdYAGf8jgaPQ=) 19: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: BT3CHYNvTTOU0gvsA7uRhKP5bTXucEk4bef2nc7ZJw4=) 20: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: D1KjUMFofudRUwWJUdVjvjvnmajrctF+9yB2FinXDPs=) 21: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: fpNRdknQbM5LVmihuBMCm1u/UUdLBno06I/tLl9VVqY=) 22: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: wFJyDSA5bve8q453PoeDdrgwvukF88huEeIw8fjT0YQ=) 23: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: juFSe29RPYnRSz5XE5IgcrXbYaR8HBC4GX2YxM6Tzzk=) 24: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: 4X5x/3ec+V05enTyEyghP4l5VMbIiRW4BtGu3szunNA=) 25: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: eppiGU0Ikrp76OEav4S55XpXg/bdFzMm0ZF3JrhrakI=) 26: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: IfrvGQR6EZnxKh/ee5nDvGjpbZn9NQYw1QY+cCWCkhM=) 27: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: /cYlUkny1IQKuDP/jKnNDzmTJRWVUTKZHhg+6p55ztY=) 28: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: wCnwV3IknWg2UI9wgIAczXf1nfZYYJA94t1tvzalvT0=) 29: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: a4R69zqfuBXEkLHoeraLc0Jk3N5of8fejTinTcqxDOM=) 30: 64506472C4DC11EA878BB82DC4F9AE02.roa (hash: +dDn6MvB4AgnmvSQf3tzFrAm4zi2R1GBEKp5G+KvMUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 17:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6108 (0x17dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: May 26 17:33:38 2024 GMT Not After : Jun 2 17:33:38 2024 GMT Subject: CN=66537272-4d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:d5:35:63:58:40:89:2e:6a:8e:fc:98:7c: 5f:b5:b3:3f:b0:76:66:05:70:68:e3:49:5c:9d:c4: 7c:f2:22:6c:bd:7e:0e:18:3b:c5:ea:e4:b6:01:51: 6b:d9:0c:f1:bf:ac:fb:bd:bf:cc:de:ab:66:39:34: d6:d0:46:d3:20:cd:5a:d7:02:61:3d:02:d6:9d:31: 5c:bb:c5:52:fd:09:25:ae:8b:9c:f6:eb:b8:92:f8: b0:a8:75:99:57:01:48:7b:08:d5:05:47:dc:56:f9: f7:d3:e8:58:78:63:e8:fa:9c:a6:a5:52:0c:db:8f: 5d:1a:77:9f:f1:ef:56:82:47:3a:9a:53:c5:63:b8: bf:be:09:e2:e2:9c:6b:b3:b8:30:59:4f:df:44:b9: 57:9e:5a:c9:45:9c:51:ff:8b:79:de:5b:e8:41:93: c1:df:b4:1a:c9:30:79:c7:2d:d5:53:d2:c8:d0:14: 0c:19:03:74:f4:59:2d:21:88:a9:94:ba:97:5d:50: be:b8:58:49:2f:f3:91:d1:0b:bd:53:f2:86:c7:b2: 9e:0f:eb:4b:22:a1:97:8a:65:73:35:fc:9a:e3:b1: fc:03:ff:ef:54:9e:49:96:e4:89:5e:d2:2c:06:7a: 63:34:26:64:a0:87:c0:90:18:6a:56:87:95:fb:87: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A0:0F:0B:6E:78:FC:FB:1F:C0:98:66:F2:FA:90:4E:6B:94:63:88 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e9:b3:6a:3d:ea:4e:57:23:44:38:8f:c3:fa:b9:f3:12:c6: 9b:8c:1d:88:1d:df:39:3b:dd:b7:3f:c4:cf:e4:cd:f0:22:07: 6c:22:b9:bd:f0:b5:6a:5d:65:35:f4:35:75:2e:34:a9:1d:a4: 88:80:9f:ae:8e:7a:2b:96:7d:5a:58:7f:e0:de:80:13:c2:25: 92:ab:79:78:b0:ca:5e:d4:a8:95:f7:40:cc:3d:73:d4:64:20: 3e:70:44:cf:6d:0c:4e:c9:8e:93:8f:56:b0:cc:fc:2b:0c:26: a7:f8:f4:15:01:49:cc:05:97:77:86:4a:03:94:03:22:f2:35: fb:a4:c1:0a:d5:c8:1e:c4:67:a1:fc:9d:bc:1b:a6:38:a9:d9: 10:ba:67:28:86:9d:8f:63:8e:ae:9f:d1:2d:43:ff:17:6f:12: 4f:0b:74:fb:98:20:c4:76:8b:1d:a9:c9:c7:ac:6f:dc:fb:e6: 32:0d:7e:8c:0f:81:20:5c:97:c5:c7:36:1c:e3:fb:b5:76:85: e8:90:14:50:30:64:21:6c:e8:95:6e:07:fe:8c:dd:54:90:7f: bb:14:64:1c:a4:87:7e:7b:85:03:05:ed:c4:2f:18:88:b2:f0: e5:c9:d1:c2:f1:a5:6c:9a:38:6c:c9:3d:dd:be:58:e8:b2:f4: 23:ac:3b:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjQwNTI2MTczMzM4WhcNMjQwNjAyMTczMzM4WjAYMRYwFAYD VQQDEw02NjUzNzI3Mi00ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRTVNWNYQIkuao78mHxftbM/sHZmBXBo40lcncR88iJsvX4OGDvF6uS2AVFr 2Qzxv6z7vb/M3qtmOTTW0EbTIM1a1wJhPQLWnTFcu8VS/Qklrouc9uu4kviwqHWZ VwFIewjVBUfcVvn30+hYeGPo+pympVIM249dGnef8e9Wgkc6mlPFY7i/vgni4pxr s7gwWU/fRLlXnlrJRZxR/4t53lvoQZPB37QayTB5xy3VU9LI0BQMGQN09FktIYip lLqXXVC+uFhJL/OR0Qu9U/KGx7KeD+tLIqGXimVzNfya47H8A//vVJ5JluSJXtIs BnpjNCZkoIfAkBhqVoeV+4cQLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBigDwtu ePz7H8CYZvL6kE5rlGOIMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg6bNqPepOVyNEOI/D+rnzEsabjB2IHd85O923P8TP5M3wIgdsIrm9 8LVqXWU19DV1LjSpHaSIgJ+ujnorln1aWH/g3oATwiWSq3l4sMpe1KiV90DMPXPU ZCA+cETPbQxOyY6Tj1awzPwrDCan+PQVAUnMBZd3hkoDlAMi8jX7pMEK1cgexGeh /J28G6Y4qdkQumcohp2PY46un9EtQ/8XbxJPC3T7mCDEdosdqcnHrG/c++YyDX6M D4EgXJfFxzYc4/u1doXokBRQMGQhbOiVbgf+jN1UkH+7FGQcpId+e4UDBe3ELxiI svDlydHC8aVsmjhsyT3dvljosvQjrDtj -----END CERTIFICATE-----Generated at Sun May 26 19:11:45 2024 by rpki-client on console-ams.rpki-client.org