$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft File: 4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json) Hash identifier: b47VEPN5hIpXhoBxJQ2IgxZJaNYUGNEw4RePYUWeHP8= Subject key identifier: 21:5E:B3:E4:48:1A:C7:0D:E2:0F:43:9F:15:B9:5B:AD:60:C5:55:B1 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft Manifest number: 3446 Signing time: Mon 06 May 2024 14:32:23 +0000 Manifest this update: Mon 06 May 2024 14:32:23 +0000 Manifest next update: Mon 13 May 2024 14:32:23 +0000 Files and hashes: 1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: DaQB1Ynr7RMNtZa9BjKTTeleOZ7Zc3aagbpSdLULYVw=) 2: BCE3D86CDBE411EE8DA9F14CC4F9AE02.roa (hash: h47EuM989aelSWICzqHc3zwWb8aVR+bAyOitn7SjtNA=) 3: 94472FA8459511EDA982510FC4F9AE02.roa (hash: lc7QP2wuQ6TkdZEncYNgK6lSuybLy33Aiar3VG+IY9g=) 4: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: Wl95wm3SY3Y1dODx6FTJD+myIUBbRn30Sw754YRIsHQ=) 5: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: smlZD/jyuRBspD70MoDwtTzARKipVkt+GABequXsGvg=) 6: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: O7+wL16PkaDPTmmO1kr24PckWZJCzfq+Ou1e0aJN24I=) 7: 315775B015F811ECB52DA912C4F9AE02.roa (hash: xrgbLdHRzwoGftBTTSTlHguSp9Ffp3+zedCUArj3Bow=) 8: 747C7164462C11ED90035452C4F9AE02.roa (hash: Lro8D6x3xVVafWlhiAu5hCzfI8d6Lr2Jg/Jvm/36HR8=) 9: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: a9dYbM6PRySh/wpYDCAxdmcyUXl39piUj1we43Hheak=) 10: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: SolStzehLi4Fx24yWN3IvLEDZ2Q8AlVhTSaM80w+Xd0=) 11: A3238958DBF411EEA5544352C4F9AE02.roa (hash: /ZFxZZe083y1jsVzvfohYa+x6pLpDT6LkxFN5MPyWWM=) 12: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: qBBR9dmkBys+mNWoct5X1vZ+ByGYqRW5vrY2YJRCnPc=) 13: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: YoyH3ZoMx2OF/jBhkqABGReX+Tg6yfKiSUc9C0ShoA4=) 14: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: wzFWDA2s6b8tq77ZQk/7rkz5+kZmA9WXosMim0W/5/4=) 15: 20068130702111EABA90E923C4F9AE02.roa (hash: klXDKYT+Diyzs3UwDrfLwBlLTOabtuGGcpE7Ra7QhQM=) 16: F7292614459D11EDB62F422FC4F9AE02.roa (hash: EvNO4h52Bu50CNoNbBs8jWuY6YETCwoLC3lQ0lNp0uc=) 17: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: 1v4XFWcNDsWIxPuOAnttq8qU3oAsIpaBL5p3861M5ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: May 6 14:32:23 2024 GMT Not After : May 13 14:32:23 2024 GMT Subject: CN=6638e9f7-b5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:f2:a9:a4:66:74:0a:e8:7f:3e:26:d8:78: d8:f8:d6:f4:b6:73:73:00:83:6f:d6:fc:6c:d4:9c: 91:00:93:7d:50:e5:74:b1:ff:85:08:b9:c4:25:51: 7e:b3:15:b9:fb:c7:7b:5e:40:ef:6d:45:f7:c8:84: b9:cc:45:1b:36:80:ed:10:3e:f6:b9:04:6d:77:a4: 3f:d4:bd:22:0f:3f:27:00:ed:5f:f3:30:12:5f:1c: 40:34:63:8e:e8:f9:a0:0f:e2:e1:30:ff:11:b9:31: f8:61:9e:a3:e5:b8:c8:5d:c4:91:68:54:94:22:2c: c5:f3:9b:dd:9d:d7:0c:ac:85:cb:eb:16:79:6b:f4: d8:e7:37:4f:97:1a:9c:8b:4b:f1:81:89:85:8c:ea: 72:4b:47:2e:94:03:d4:d8:b4:11:aa:44:03:ec:19: a2:f2:68:ab:3c:9d:48:e8:1b:6a:e1:15:e7:f5:fe: a0:3f:3c:f3:97:03:90:f1:71:ee:07:b3:2c:21:87: d2:58:7b:26:1d:90:e1:2c:22:9f:07:28:99:63:fc: a9:b7:9d:e4:91:d5:2c:df:32:b3:21:58:75:19:3f: 84:13:11:b0:50:c2:af:f7:61:e1:23:fc:79:3e:9a: dd:f2:3d:dd:cd:7c:dc:a7:97:b1:d4:cc:40:e3:a5: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:B3:E4:48:1A:C7:0D:E2:0F:43:9F:15:B9:5B:AD:60:C5:55:B1 X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:28:61:c3:40:b7:05:e2:65:12:dc:b0:30:a4:e5:c1:b3:2a: 9b:17:8f:ae:79:14:7b:70:35:db:d4:d7:34:3c:7d:7d:54:da: c0:cf:44:89:f5:67:a4:cf:23:48:99:cf:8b:c5:a3:e1:23:33: 7b:9b:be:29:7a:79:94:75:cd:5a:19:70:6d:24:90:5d:6f:44: 73:e1:15:f4:71:b4:52:20:af:79:12:c7:14:ea:b6:e0:9b:a2: 00:14:ab:48:8e:3f:a4:2c:b5:fc:39:e5:38:04:9f:87:91:03: a4:78:dd:36:29:8e:03:ff:86:bc:24:2c:3a:98:6d:13:71:c4: 43:56:77:65:7e:41:25:41:5f:94:1b:ba:84:4b:83:b1:9c:e8: 48:6b:de:80:b0:a1:47:50:6f:4a:ae:5b:a4:f8:18:72:8a:70: 14:84:15:15:c8:e5:23:2e:db:d2:6c:95:22:44:2c:3d:f3:c3: c4:d1:f8:68:f1:05:9c:b0:65:f3:86:88:ff:06:28:23:ca:fc: 64:c2:bf:ea:20:db:c2:e5:3a:95:7e:6d:6c:87:93:60:04:09: ec:c2:44:10:6c:2a:7e:ca:00:80:04:79:0e:78:8a:55:f2:d1: c1:a3:95:14:d0:e3:65:6a:f7:a8:34:c1:79:ba:4b:d2:6c:74: ad:3f:7f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjQwNTA2MTQzMjIzWhcNMjQwNTEzMTQzMjIzWjAYMRYwFAYD VQQDEw02NjM4ZTlmNy1iNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfzyqaRmdArofz4m2HjY+Nb0tnNzAINv1vxs1JyRAJN9UOV0sf+FCLnEJVF+ sxW5+8d7XkDvbUX3yIS5zEUbNoDtED72uQRtd6Q/1L0iDz8nAO1f8zASXxxANGOO 6PmgD+LhMP8RuTH4YZ6j5bjIXcSRaFSUIizF85vdndcMrIXL6xZ5a/TY5zdPlxqc i0vxgYmFjOpyS0culAPU2LQRqkQD7Bmi8mirPJ1I6Btq4RXn9f6gPzzzlwOQ8XHu B7MsIYfSWHsmHZDhLCKfByiZY/ypt53kkdUs3zKzIVh1GT+EExGwUMKv92HhI/x5 Pprd8j3dzXzcp5ex1MxA46VfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFes+RI GscN4g9DnxW5W61gxVWxMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTBBRC84QjVFNzVGRTFEODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dU MnFDOVpIbDY2ZHZlc0pJbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaKGHDQLcF4mUS3LAwpOXBsyqbF4+ueRR7cDXb1Nc0PH19VNrAz0SJ 9WekzyNImc+LxaPhIzN7m74penmUdc1aGXBtJJBdb0Rz4RX0cbRSIK95EscU6rbg m6IAFKtIjj+kLLX8OeU4BJ+HkQOkeN02KY4D/4a8JCw6mG0TccRDVndlfkElQV+U G7qES4OxnOhIa96AsKFHUG9Krluk+BhyinAUhBUVyOUjLtvSbJUiRCw988PE0fho 8QWcsGXzhoj/Bigjyvxkwr/qINvC5TqVfm1sh5NgBAnswkQQbCp+ygCABHkOeIpV 8tHBo5UU0ONlaveoNMF5ukvSbHStP38l -----END CERTIFICATE-----Generated at Mon May 6 17:35:38 2024 by rpki-client on console-fra.rpki-client.org