$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft File: r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json) Hash identifier: WM4ohx4bgL7smy9y5+QpxocJC6XCs/RDZPDGOemr/gc= Subject key identifier: 07:E6:CB:F1:65:5D:FE:17:1C:17:64:C7:2E:41:E1:38:BC:67:96:90 Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft Manifest number: 3481 Signing time: Sat 04 May 2024 14:24:02 +0000 Manifest this update: Sat 04 May 2024 14:24:02 +0000 Manifest next update: Sat 11 May 2024 14:24:02 +0000 Files and hashes: 1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: jl2CJRR4YhF6trZRqxQL98G2F52A5JmHhmKEh3mblX4=) 2: 2569B02206D411EF9B54220DC4F9AE02.roa (hash: Z7+E622B8DMo/yK2Z7BW8RNahF/RX8d+spDwkYurXFA=) 3: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: htayBHNq2388wzfeUk6mScgxkfdkMgscJMqhLgJbPPk=) 4: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: AbU7c2/bVL6c6dAx940xMA41YnV91Xn+5HkaRrWUjfE=) 5: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: jV1pH6FLKe91ex2rv7ovf2z0TjTlRRne5pGw/4If3IU=) 6: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: rbIIsTFyLoNHS6SSQCaCLQg8HfLMzeMJdbEth0odGak=) 7: 15CF907AA47B11E9867CBF58C4F9AE02.roa (hash: qyXwDOA6miZkkWcuF4iJ6eVi8Y2hLeA7CSxiF6VJ4y0=) 8: CF09016006A611EAA8819441C4F9AE02.roa (hash: V3wq+jWFYvbXpL5ShFlsJKYhheM/P2MQ5p51gxsFZHc=) 9: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: TaFo/D9yI96hpdPsWVoBrQVaYPp/NexAie9UH1w8UvA=) 10: 7AC0001CB95111ECB43B4F4EC4F9AE02.roa (hash: S5AsMPv8S6L87zMqQmEk6i3S8es5+Z5iVo43pHsbwFc=) 11: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: obBnGo+Ulout39pTtqHDTaINWV5bPqOWprpTAgv2ZrQ=) 12: EC1BC08001D311EF9B6B593DC4F9AE02.roa (hash: sJH00pakksSRru3oSSwzP12MhZvPSODQVakba5J3hPQ=) 13: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: 6Tse997yMjDNGG0xH5dNWorEhxfeZAxgwUua05xzjp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: May 4 14:24:02 2024 GMT Not After : May 11 14:24:02 2024 GMT Subject: CN=66364502-94c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:1d:10:9d:b2:db:be:c8:54:a1:8f:75:44: a2:82:b1:c2:67:0d:38:aa:76:cb:24:95:e3:4d:e0: b5:2c:c5:45:99:1f:6c:ba:d9:1a:87:4b:7a:0b:23: 03:be:49:b8:34:56:bf:35:6e:20:ac:8e:c0:bf:fc: bc:c3:5c:46:d9:71:24:04:b9:b5:92:06:b6:9c:73: 6b:53:1e:56:33:83:3d:b5:50:3d:53:9d:c4:60:05: 09:4e:53:6a:d8:01:76:9e:a9:b7:4c:90:dc:ef:7d: 08:b1:bb:20:79:2c:55:29:47:b1:fa:76:7e:dd:6d: 56:ba:ad:66:6c:51:96:46:54:4d:96:55:97:57:82: 2f:8b:c3:50:d9:60:84:17:b5:1f:38:a2:f5:e2:50: 5e:39:8f:fb:e4:06:53:c2:58:20:cf:52:b8:ff:2f: 98:4c:d3:bc:40:db:be:f6:ca:30:1a:92:94:35:cc: 92:f8:5f:2b:6c:d1:20:d8:23:85:09:2b:8b:b9:44: c2:ba:7e:36:3e:0c:56:13:77:6d:a8:e4:69:06:fc: 0c:1a:a7:29:07:60:91:28:51:40:18:53:6b:04:5e: 46:62:c3:11:2e:bd:e5:f2:73:ad:46:b7:51:2d:08: e0:e4:d4:4c:46:52:db:9e:b6:69:73:c1:9b:80:13: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:CB:F1:65:5D:FE:17:1C:17:64:C7:2E:41:E1:38:BC:67:96:90 X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ab:69:8a:a5:5c:71:7c:eb:b8:d1:d9:72:f6:9f:bf:56:be: 9d:66:c0:56:bf:e5:44:62:f0:cb:54:0f:47:1b:e6:22:ee:1f: 2d:39:2c:b0:61:b7:30:15:62:1d:07:e7:79:81:d0:33:95:e0: 66:64:52:49:cd:d9:86:ef:b3:cc:b2:10:e1:76:97:ce:4f:31: 96:e8:bb:c1:58:e3:65:88:0e:af:0c:c6:36:27:c8:f4:65:98: c4:0b:98:02:00:04:5e:b6:a8:52:f3:43:e4:d0:5b:ac:15:6a: 35:b3:d5:46:31:28:77:83:b5:1f:bf:cf:50:c7:24:92:2a:39: f3:db:5c:bd:03:be:d2:d5:77:6a:db:18:21:dd:f7:62:4e:90: 26:d4:20:0c:ee:71:d8:0e:fd:08:87:ec:f1:3b:2f:01:dc:43: 88:03:ff:ff:63:f4:03:7e:8c:51:fb:ac:52:52:93:c1:85:99: a8:56:ed:1d:14:ec:64:e1:23:a0:db:59:c3:c3:93:38:36:82: 4d:09:e5:89:03:54:cd:25:55:e3:ab:7f:57:d8:0f:ac:63:20: c5:11:7b:21:b0:c5:fe:04:9f:18:d3:fd:9a:fd:36:4b:ca:48: 26:85:d2:65:0f:dd:5c:b3:be:3a:18:f8:65:24:f9:67:8d:b9: 0e:d3:7a:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjQwNTA0MTQyNDAyWhcNMjQwNTExMTQyNDAyWjAYMRYwFAYD VQQDEw02NjM2NDUwMi05NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDodEJ2y277IVKGPdUSigrHCZw04qnbLJJXjTeC1LMVFmR9sutkah0t6CyMD vkm4NFa/NW4grI7Av/y8w1xG2XEkBLm1kga2nHNrUx5WM4M9tVA9U53EYAUJTlNq 2AF2nqm3TJDc730IsbsgeSxVKUex+nZ+3W1Wuq1mbFGWRlRNllWXV4Ivi8NQ2WCE F7UfOKL14lBeOY/75AZTwlggz1K4/y+YTNO8QNu+9sowGpKUNcyS+F8rbNEg2COF CSuLuUTCun42PgxWE3dtqORpBvwMGqcpB2CRKFFAGFNrBF5GYsMRLr3l8nOtRrdR LQjg5NRMRlLbnrZpc8GbgBMfCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfmy/Fl Xf4XHBdkxy5B4Ti8Z5aQMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy82OTA3QzNFMjFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19N ZkVrenhIUE5zMlJDdFFVYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKq2mKpVxxfOu40dly9p+/Vr6dZsBWv+VEYvDLVA9HG+Yi7h8tOSyw YbcwFWIdB+d5gdAzleBmZFJJzdmG77PMshDhdpfOTzGW6LvBWONliA6vDMY2J8j0 ZZjEC5gCAARetqhS80Pk0FusFWo1s9VGMSh3g7Ufv89QxySSKjnz21y9A77S1Xdq 2xgh3fdiTpAm1CAM7nHYDv0Ih+zxOy8B3EOIA///Y/QDfoxR+6xSUpPBhZmoVu0d FOxk4SOg21nDw5M4NoJNCeWJA1TNJVXjq39X2A+sYyDFEXshsMX+BJ8Y0/2a/TZL ykgmhdJlD91cs746GPhlJPlnjbkO03q/ -----END CERTIFICATE-----Generated at Sat May 4 15:55:01 2024 by rpki-client on console-ams.rpki-client.org