$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: U1VZIHLbFO4GtJnpnAPnkV06rv+f4qT8uGoYjbO/TYs= Subject key identifier: 83:D9:61:B8:BA:AC:0A:E0:19:80:D7:D0:8C:FE:B7:EA:F5:93:15:72 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 272C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 24C0 Signing time: Wed 20 Nov 2024 15:49:45 +0000 Manifest this update: Wed 20 Nov 2024 15:49:44 +0000 Manifest next update: Wed 27 Nov 2024 15:49:44 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: vJHZGTC5pwb24iFn8T7cNAcjUhnV6QP64ryY1doHGfs=) 2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: 4qI2WUUHm8+dcoyB7U3qYqYYb9g/5slAkhQLxcA06nE=) 3: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: UCVs4XYqNQJC/nfD2RmyD3m/VU3GEKBV0v/33LcSJcs=) 4: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: bf1jaGSVQJslfBa+5r4lXb8DSx7SXnGxXRybRrv6RyE=) 5: F04860C28C5611E792848B4AC4F9AE02.roa (hash: prYbbDK25Bc1CFA5URm+axMyGXHqHfx/q5USvn4UHzA=) 6: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: T5LqovqjFACRGWR8vxXr532Rbx7YNjQyJG4PxgQlQMo=) 7: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: 1ThofXwtJDa0er1G9OhUMcBj7ScXSoWzJ/pOejR8jU0=) 8: F688FE388C5611E792848B4AC4F9AE02.roa (hash: cte7A2h9jLVlV8SfTGir4YQNSb45IiEg8uru+aQWy7s=) 9: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 76yAF/AKtZv8rbStVVkcFHmGYw1FMk7DIHQy7aN2Zjk=) 10: F1475E928C5611E792848B4AC4F9AE02.roa (hash: JGj5dfjS19FaPEAJ8kPdZuODptnMExlvE4BaAlPEYVU=) 11: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: mrGJzAbW37pPvsvk8/sNvAoE/DrsQDtBp4BLxlB8Gkc=) 12: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: qc/yszFnU55fDmuhOitWa9LJKPZEEuEUFsIGs/2d0cA=) 13: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: A8cVqh62DLZnoSJe37qhi9qHAi8ZuF04y0Qg3Srhi7w=) 14: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: BdiehjDEvV0WKRQjURsPtAE6tjynwD/JIOJhJo1OvBQ=) 15: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: qHs+fqBU5YlcSjsUhX8kCEmEa4luPEv25Vk2i2sM2HA=) 16: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: P8DR/P8EbPg/wjMIKFCDnr5SO8UMSMfzw3cYR/SN8aM=) 17: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: t3XBKJTQSBYqiGHST30gvx8Sv6Y9Vi19doDF/V8I5SA=) 18: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: 2oNbSuNtMrRZhuDFKF7wvA8tGJ7a062T3BnrjVnTxgI=) 19: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: z0TbP/uJcntbcykS17didMVv1I6kJuivV3YyPDvb5Qk=) 20: 5366509AC63511EAAC843455C4F9AE02.roa (hash: sZIeVS4EzNY7xGT9g8wGT7ZJ5Ha157jK1HmygHHXLCQ=) 21: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: /wWuVpCPNe4CJwTIQ7NxUOlPcFrAGBgP0omithp9fcQ=) 22: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: Rn7Jy0X7+XW4A3zgtQl81Fu2aYAjwpARLeE6XBDTgZA=) 23: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 0O96aUBFnF3g+jtqdQw88vGeNoOwCzLEisDKXvjAw3U=) 24: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: Y93y000PyFusN9av2g725nIEbc+v2zkO/Skb0ZY14h0=) 25: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: UfYQ+WWf4FFjCPuP2mbYoA7YL9U5XlfHaY09FM1ptoA=) 26: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: D78XSgWinPRl6rjut3BmM27VQL+84X13crl9IciHOTE=) 27: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: HJwIxd4p8f4eT4e8lMS53Ug2rtvcBgI8YglBxHZrJXM=) 28: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: w5phrKsuXRjMj+Oq65+3ElGQHP7VKWZA9pF0ugIRM9g=) 29: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: UIz2gPGkTqx3wwDO61C1xAMrlc0SkMhFS3UMTgHXbUo=) 30: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: E7J2EE4Iw2nztwDHOazaLxPeQrBXYkfo/CwcOcaXIpo=) 31: 543386248C5811E782F42951C4F9AE02.roa (hash: 5EJvxSG52Q0omsSTU0w25Epc1lEmIaeLZWBNDFGGpl0=) 32: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: kR9spEW1is0jBJfLnTc/5df7T7vuoq4ZZYVArAg5qFU=) 33: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: /DhWeAf5i2vFdPMkcJFQOvH9T/sM8ZkhHIPukebgP0Y=) 34: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: hsZwD3Tp7iprkEZyMrEzcTV4AWmWILnDiDx8ZUXHNsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10028 (0x272c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Nov 20 15:49:44 2024 GMT Not After : Nov 27 15:49:44 2024 GMT Subject: CN=673e0518-9afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:89:6f:40:06:5e:df:92:01:39:26:00:a7: e6:ef:12:76:f3:11:d0:a3:ad:98:43:c0:e0:02:6e: 80:9b:56:46:95:63:55:c3:63:f4:bb:66:c8:81:51: 55:5b:35:cb:3f:0a:a9:f3:31:84:ff:db:5b:ec:d4: b8:a7:0a:d2:62:d1:98:af:e0:89:72:dd:20:73:2b: 82:e3:db:fc:8e:df:29:85:ce:bd:c2:6a:43:28:8c: 8d:3b:d5:66:5c:8e:dd:42:87:8f:9e:f1:0e:5a:ed: e2:e5:d3:de:75:35:e1:08:b1:57:ae:50:9b:4d:fe: 97:5a:65:14:16:10:35:59:44:95:0a:e8:98:3c:fa: db:87:c3:57:83:fd:2f:13:02:9d:c8:f6:fd:49:f0: 1d:0b:b1:01:69:29:1b:db:3c:88:b8:b4:35:78:83: bb:a5:47:a5:01:6c:97:08:12:8c:7f:b5:5e:6b:46: 4f:35:10:f8:de:00:29:bc:a9:3b:87:2b:d3:d7:53: b7:b4:68:0d:12:88:66:1c:41:da:ce:52:0d:9d:97: 33:24:bc:95:34:3b:66:eb:ce:45:76:00:4c:6d:5d: 9e:86:17:d1:3e:e7:22:4d:b0:23:8a:4f:e6:a8:2a: b4:e0:a4:05:67:7f:1f:49:4e:e8:52:27:50:6e:95: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D9:61:B8:BA:AC:0A:E0:19:80:D7:D0:8C:FE:B7:EA:F5:93:15:72 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5a:59:98:18:9e:7c:5a:31:50:0d:29:2e:11:1a:99:0b:07: 6e:3a:a5:68:dd:08:90:f3:e3:43:62:64:66:03:ed:6d:96:b2: 45:f2:46:58:a8:b1:91:bb:b5:16:b6:ca:36:eb:90:68:f5:8e: 09:1a:29:13:e9:36:bc:3f:10:5e:66:93:66:80:ec:14:ea:bd: da:00:d4:34:4d:3d:c3:ec:59:3a:4e:d1:63:01:49:dd:0f:4e: 21:b2:8e:63:5d:9e:25:d9:c3:92:cb:c7:3b:1f:b8:6e:dc:28: 29:9f:19:5c:09:6b:f8:bf:8a:98:ad:71:d8:31:a9:9a:19:34: 1f:ff:79:e3:7f:98:23:aa:96:d3:3a:4f:d5:e9:ce:e5:94:0c: 11:9d:11:67:21:6c:2c:ff:c2:f8:15:a7:6b:dd:a3:f2:9c:1d: fd:02:db:a6:74:ea:40:d4:3e:0a:93:03:f5:18:7a:74:95:a7: 5d:1a:64:2a:7e:05:ea:5f:38:71:2a:af:fa:a3:18:ec:2f:71: ad:6a:28:76:85:57:ad:91:b7:32:0d:8c:16:04:86:3e:64:9e: 0c:d5:ba:bc:4c:20:ae:dd:bf:4f:6f:73:ba:53:83:d5:0a:d0: a4:98:7f:85:f0:93:84:eb:8f:a6:76:6c:9a:fe:52:f3:31:c0: f5:91:b5:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjQxMTIwMTU0OTQ0WhcNMjQxMTI3MTU0OTQ0WjAYMRYwFAYD VQQDEw02NzNlMDUxOC05YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9yJb0AGXt+SATkmAKfm7xJ28xHQo62YQ8DgAm6Am1ZGlWNVw2P0u2bIgVFV WzXLPwqp8zGE/9tb7NS4pwrSYtGYr+CJct0gcyuC49v8jt8phc69wmpDKIyNO9Vm XI7dQoePnvEOWu3i5dPedTXhCLFXrlCbTf6XWmUUFhA1WUSVCuiYPPrbh8NXg/0v EwKdyPb9SfAdC7EBaSkb2zyIuLQ1eIO7pUelAWyXCBKMf7Vea0ZPNRD43gApvKk7 hyvT11O3tGgNEohmHEHazlINnZczJLyVNDtm685FdgBMbV2ehhfRPuciTbAjik/m qCq04KQFZ38fSU7oUidQbpV7BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPZYbi6 rArgGYDX0Iz+t+r1kxVyMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAWlmYGJ58WjFQDSkuERqZCwduOqVo3QiQ8+NDYmRmA+1tlrJF8kZY qLGRu7UWtso265Bo9Y4JGikT6Ta8PxBeZpNmgOwU6r3aANQ0TT3D7Fk6TtFjAUnd D04hso5jXZ4l2cOSy8c7H7hu3CgpnxlcCWv4v4qYrXHYMamaGTQf/3njf5gjqpbT Ok/V6c7llAwRnRFnIWws/8L4Fadr3aPynB39AtumdOpA1D4KkwP1GHp0laddGmQq fgXqXzhxKq/6oxjsL3Gtaih2hVetkbcyDYwWBIY+ZJ4M1bq8TCCu3b9Pb3O6U4PV CtCkmH+F8JOE64+mdmya/lLzMcD1kbXf -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:09 2024 by rpki-client on console-ams.rpki-client.org