$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: GELI1jSiKMhiYR7V3ldsAoJEfNIyvvPZIMuG9E9KzY4= Subject key identifier: F9:C1:78:95:A6:32:15:93:4E:4B:71:93:79:F5:25:37:05:96:B0:EB Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 3515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 3474 Signing time: Sat 18 May 2024 14:26:48 +0000 Manifest this update: Sat 18 May 2024 14:26:48 +0000 Manifest next update: Sat 25 May 2024 14:26:48 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: 85Ez2S+YtjtyNaFRz2sMIlIzauUMjeCzVRMx3HBcnlU=) 2: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 7w8TQDuZrmu3C3e/zIooJnVlX1I5qMx17mzAe3kTVb0=) 3: A64BD8D8E04511EE9E52AC60C4F9AE02.roa (hash: LQbEODKiQfFdCeLcKJMKhakk7le5Ben8QVBGzibYIqM=) 4: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: GqeKSjnh2zHCe2pCCUX3QxC9/PR5M9Agse6J8/JdhuU=) 5: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: 8zWKsKYuB2/eR/K5/iiHkZOCxM0bmwvPtpkDSNP+BIE=) 6: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: XZQiCUHxbU9WbUq5AAsThn5sHBDxupklyQ+fnEc+W24=) 7: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: Ajmtfmwu5a7QngoLh2Td17YJ0cHGpi1gJ1Cq6xMZ0yo=) 8: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: QoNCxC2F1UvI8+aiOUsTGK8S+7ZkQLVuYM4NPAYbSBY=) 9: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: l7mpSKPnJ6I/x2Ycg3w1AID9sdD9xgANWmQ8t5LXOCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13589 (0x3515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: May 18 14:26:48 2024 GMT Not After : May 25 14:26:48 2024 GMT Subject: CN=6648baa8-e1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:39:6d:fd:d6:d1:a6:ed:a3:61:65:ca:cd: e9:a6:2e:99:28:43:27:5b:4b:ab:34:d0:cf:30:cb: d1:b3:4a:27:1b:10:cd:0f:22:7d:83:09:b0:1c:fd: ba:82:5c:30:a1:3d:d3:b6:2a:e1:22:62:43:9d:f6: e6:df:6b:8b:a4:e3:d7:11:eb:ac:94:89:14:ff:67: b2:bf:b3:c9:3a:70:6f:f3:6c:e1:0e:14:df:91:25: 7e:2f:00:de:f6:e8:02:d8:bd:5f:ac:04:27:91:c5: 0a:d2:1b:b5:84:8c:fa:fd:4b:b5:82:5d:18:cb:61: c2:ff:5e:60:9a:13:a1:6f:3a:06:38:df:e4:c3:8c: a6:00:e8:dd:3f:f8:ca:57:7e:63:04:97:b0:b2:70: 94:a4:2d:54:e7:c2:3d:c4:c5:a7:f4:a7:75:7f:85: 7b:c9:8a:da:37:84:2f:d4:ea:82:88:10:f7:1d:24: 76:a8:06:e4:73:32:13:7a:84:81:de:7a:34:d7:2e: 45:7c:51:19:ec:dc:76:5c:da:e5:7a:bf:e6:13:f9: dc:e2:3b:c5:33:90:ae:e4:29:bf:50:27:53:f2:38: f9:3a:fe:53:6c:0d:88:3e:57:70:2a:9f:36:d0:75: 85:98:74:a4:31:07:b5:1e:d1:93:9a:c2:82:39:83: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:78:95:A6:32:15:93:4E:4B:71:93:79:F5:25:37:05:96:B0:EB X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8b:f9:5c:2b:1b:12:d3:d3:be:e9:70:84:25:ed:8e:0e:80: 15:db:91:ee:74:35:e4:8f:cd:c1:57:ef:d4:e2:0b:d2:e3:98: 81:f9:be:82:65:78:d1:91:64:5e:a1:0f:4d:da:bb:2c:77:08: ab:82:6d:49:68:e7:cd:86:6c:e6:21:61:8e:6c:49:49:03:4c: 5e:79:f5:97:77:50:69:79:a7:6d:e0:36:ec:fe:7c:e5:fa:34: ec:29:ee:2e:45:52:97:78:27:3e:35:86:78:8d:b2:32:5b:e6: 0c:83:a0:f3:0e:f4:8c:15:71:2c:79:d9:82:c6:e0:02:f0:3f: 5a:03:f4:a4:12:57:8c:eb:b4:93:9d:ac:9a:f0:3f:c2:c7:f6: 8f:e4:46:06:61:9a:f6:56:49:a0:07:69:55:c2:21:32:8d:59: 60:bc:16:34:4b:fe:68:53:5e:d0:d7:98:81:e8:8f:69:d2:6f: db:57:58:df:77:81:cc:e6:c0:52:08:72:e2:b3:d9:68:dc:85: d1:8e:a9:e0:7b:56:93:97:3d:b3:4d:70:c0:09:b9:77:90:2c: 2e:ee:3b:0f:4c:3c:b7:4a:e1:99:ad:0a:5b:14:3a:55:d7:1c: f5:8c:ca:6c:f0:95:2e:9d:df:5a:04:64:64:35:66:86:aa:0b: 48:1c:da:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjQwNTE4MTQyNjQ4WhcNMjQwNTI1MTQyNjQ4WjAYMRYwFAYD VQQDEw02NjQ4YmFhOC1lMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdk5bf3W0abto2Flys3ppi6ZKEMnW0urNNDPMMvRs0onGxDNDyJ9gwmwHP26 glwwoT3TtirhImJDnfbm32uLpOPXEeuslIkU/2eyv7PJOnBv82zhDhTfkSV+LwDe 9ugC2L1frAQnkcUK0hu1hIz6/Uu1gl0Yy2HC/15gmhOhbzoGON/kw4ymAOjdP/jK V35jBJewsnCUpC1U58I9xMWn9Kd1f4V7yYraN4Qv1OqCiBD3HSR2qAbkczITeoSB 3no01y5FfFEZ7Nx2XNrler/mE/nc4jvFM5Cu5Cm/UCdT8jj5Ov5TbA2IPldwKp82 0HWFmHSkMQe1HtGTmsKCOYNt2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnBeJWm MhWTTktxk3n1JTcFlrDrMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7i/lcKxsS09O+6XCEJe2ODoAV25HudDXkj83BV+/U4gvS45iB+b6C ZXjRkWReoQ9N2rssdwirgm1JaOfNhmzmIWGObElJA0xeefWXd1Bpeadt4Dbs/nzl +jTsKe4uRVKXeCc+NYZ4jbIyW+YMg6DzDvSMFXEsedmCxuAC8D9aA/SkEleM67ST naya8D/Cx/aP5EYGYZr2VkmgB2lVwiEyjVlgvBY0S/5oU17Q15iB6I9p0m/bV1jf d4HM5sBSCHLis9lo3IXRjqnge1aTlz2zTXDACbl3kCwu7jsPTDy3SuGZrQpbFDpV 1xz1jMps8JUund9aBGRkNWaGqgtIHNpY -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org