$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: BCzHMQoW+TDjCviQlNiOugFtqDveMmLqjFNjWZhkF08= Subject key identifier: 99:12:3F:D1:DC:50:11:B6:E7:36:FF:38:F4:17:EB:64:88:1C:DB:26 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 0338 Signing time: Sun 05 May 2024 03:13:40 +0000 Manifest this update: Sun 05 May 2024 03:13:40 +0000 Manifest next update: Sun 12 May 2024 03:13:40 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: psHmOYYUjKf2/VUZM3Ifu7Fwo4i3zSqCg0mpXAzZFvA=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: 8KtiWKOE+f6CmnRLcL50w77UQzV0t3NNmPGCD+UiN2Y=) 3: 5A83C666350211EEB33A9B71C4F9AE02.roa (hash: 5hXuLPUl1oznYiZYUW2nmt4xTeI47MtrNRFOzwu+lXg=) 4: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: 2EXYCICBvAeJltk6VH8XYxe2JtqWcKEjv0iqiczQGfw=) 5: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7CVfnyqnIiLW71WuBjnEZ7aaTtwRTAZvuVVY0lHLWVc=) 6: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: e7+o0oFCUhzzHHgIWSNACl9jZuC2f8qoowBsWPxw+Fs=) 7: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: KeTueCm3z2LBug4KnXXzF4iTTZQ8It6Q070daguo0jI=) 8: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: P0OlJRLvIMDdrF/RijM8YcE19SRlKeRCGV8u4qFW30s=) 9: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: b/gp19EaEtfqCK263TvkCdJtfuwUtevQan/MP233wis=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: EMqyfxPHhDkEirOZ3LxPHg+w+AohZeB5bS2RIkYA/qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: May 5 03:13:40 2024 GMT Not After : May 12 03:13:40 2024 GMT Subject: CN=6636f964-c289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:cd:ff:79:43:12:79:2b:26:aa:7b:26:1e: 8d:9d:68:20:c9:57:d5:fd:76:9f:b4:c6:50:19:5a: 7d:63:9b:42:40:07:93:52:ba:04:d1:da:c2:9d:9a: e0:7a:f1:1f:0d:0b:8f:50:f5:ae:11:52:63:d4:41: 55:c0:85:dd:a3:e7:46:eb:b7:51:39:3e:b4:b6:04: e0:17:5f:b4:75:5a:62:5c:a2:53:54:1f:ee:61:f6: cf:72:8c:c6:d0:79:d5:e7:71:9f:44:96:b0:48:dd: 9f:b1:9a:cd:bb:89:20:b6:dc:48:40:81:e7:ec:d8: 98:e4:af:d7:7a:96:12:7a:95:53:ac:9a:32:a1:10: 3a:78:7c:0c:33:72:7b:93:0f:0b:b6:55:97:d9:79: 56:1c:1f:f9:c8:37:02:ec:8e:ab:f6:a8:f2:40:74: 54:53:73:21:27:0f:21:03:b5:69:a1:d5:91:a6:ed: 25:cb:86:3a:e2:a4:d1:8e:f0:5c:a1:3a:af:40:a0: 9d:52:49:76:9f:98:93:a9:e9:b0:08:dd:35:d2:46: a2:b7:49:e3:bc:0e:ec:3c:ff:87:a9:d9:03:50:77: eb:be:c6:ee:24:93:33:67:17:0b:1f:f4:d7:39:6e: 8a:3e:8b:80:20:21:6b:ff:28:ae:d0:b3:a3:09:8e: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:3F:D1:DC:50:11:B6:E7:36:FF:38:F4:17:EB:64:88:1C:DB:26 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:fb:01:7d:b5:92:be:e5:3e:0a:20:5d:c5:bd:a1:67:9f: 33:5c:da:46:20:56:18:a6:4c:52:52:0d:42:b5:7a:c0:fe:e4: ba:92:50:26:03:ba:e4:82:37:01:55:e0:76:a7:5b:40:09:02: bd:c1:cc:5a:8a:55:3f:d2:bb:69:10:6b:7b:16:25:85:e3:d7: 32:c2:30:ad:c0:29:71:01:35:55:a4:a6:7b:77:8d:66:ad:92: ad:a8:a9:74:d8:df:9a:72:fd:85:6e:0f:d6:b6:ed:27:7c:01: 21:83:30:be:5d:d3:ea:eb:6d:d0:01:0c:cc:c4:77:02:39:b2: 64:dd:02:14:94:82:5e:01:3e:ca:29:80:aa:e7:d6:4e:a1:07: 90:f3:a0:ac:98:64:33:5a:c1:34:dc:08:f5:e6:cd:e0:6c:02: f0:1b:97:54:eb:d3:e2:01:54:fc:13:95:74:2b:cb:8c:34:ab: 20:e9:d2:7e:73:7c:e7:be:62:01:55:73:bc:af:40:54:af:88: 6c:c4:d3:09:5f:ef:39:c3:d0:64:4a:8f:e3:2c:74:af:e8:b1: 89:68:76:d5:dc:8c:c9:2e:71:b9:66:85:32:b4:8b:ab:61:5a: 9c:da:34:1d:f2:e5:34:0f:0c:09:de:e2:c9:07:4c:db:1d:7c: cd:22:0e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjQwNTA1MDMxMzQwWhcNMjQwNTEyMDMxMzQwWjAYMRYwFAYD VQQDEw02NjM2Zjk2NC1jMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2XN/3lDEnkrJqp7Jh6NnWggyVfV/XaftMZQGVp9Y5tCQAeTUroE0drCnZrg evEfDQuPUPWuEVJj1EFVwIXdo+dG67dROT60tgTgF1+0dVpiXKJTVB/uYfbPcozG 0HnV53GfRJawSN2fsZrNu4kgttxIQIHn7NiY5K/XepYSepVTrJoyoRA6eHwMM3J7 kw8LtlWX2XlWHB/5yDcC7I6r9qjyQHRUU3MhJw8hA7VpodWRpu0ly4Y64qTRjvBc oTqvQKCdUkl2n5iTqemwCN010kait0njvA7sPP+HqdkDUHfrvsbuJJMzZxcLH/TX OW6KPouAICFr/yiu0LOjCY5JywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkSP9Hc UBG25zb/OPQX62SIHNsmMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUx/sBfbWSvuU+CiBdxb2hZ58zXNpGIFYYpkxSUg1CtXrA/uS6klAm A7rkgjcBVeB2p1tACQK9wcxailU/0rtpEGt7FiWF49cywjCtwClxATVVpKZ7d41m rZKtqKl02N+acv2Fbg/Wtu0nfAEhgzC+XdPq623QAQzMxHcCObJk3QIUlIJeAT7K KYCq59ZOoQeQ86CsmGQzWsE03Aj15s3gbALwG5dU69PiAVT8E5V0K8uMNKsg6dJ+ c3znvmIBVXO8r0BUr4hsxNMJX+85w9BkSo/jLHSv6LGJaHbV3IzJLnG5ZoUytIur YVqc2jQd8uU0DwwJ3uLJB0zbHXzNIg5v -----END CERTIFICATE-----Generated at Sun May 5 03:52:21 2024 by rpki-client on console-ams.rpki-client.org