$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: K9ukCII/ylneS+B3PKgyVH/jZWTdS91D8jJGxecep/M= Subject key identifier: 46:14:5A:6F:20:A7:DB:A3:73:8E:7E:33:85:A1:D1:24:7A:64:5B:AB Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 26B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 244C Signing time: Thu 18 Apr 2024 16:12:14 +0000 Manifest this update: Thu 18 Apr 2024 16:12:14 +0000 Manifest next update: Thu 25 Apr 2024 16:12:14 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: qeoJvHfvrrALkmb+45Da8RRAzWw+4fdLkuIT40WuVCM=) 2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: 4qI2WUUHm8+dcoyB7U3qYqYYb9g/5slAkhQLxcA06nE=) 3: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: UCVs4XYqNQJC/nfD2RmyD3m/VU3GEKBV0v/33LcSJcs=) 4: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: bf1jaGSVQJslfBa+5r4lXb8DSx7SXnGxXRybRrv6RyE=) 5: F04860C28C5611E792848B4AC4F9AE02.roa (hash: prYbbDK25Bc1CFA5URm+axMyGXHqHfx/q5USvn4UHzA=) 6: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: T5LqovqjFACRGWR8vxXr532Rbx7YNjQyJG4PxgQlQMo=) 7: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: 1ThofXwtJDa0er1G9OhUMcBj7ScXSoWzJ/pOejR8jU0=) 8: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 76yAF/AKtZv8rbStVVkcFHmGYw1FMk7DIHQy7aN2Zjk=) 9: F688FE388C5611E792848B4AC4F9AE02.roa (hash: cte7A2h9jLVlV8SfTGir4YQNSb45IiEg8uru+aQWy7s=) 10: F1475E928C5611E792848B4AC4F9AE02.roa (hash: JGj5dfjS19FaPEAJ8kPdZuODptnMExlvE4BaAlPEYVU=) 11: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: mrGJzAbW37pPvsvk8/sNvAoE/DrsQDtBp4BLxlB8Gkc=) 12: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: qc/yszFnU55fDmuhOitWa9LJKPZEEuEUFsIGs/2d0cA=) 13: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: A8cVqh62DLZnoSJe37qhi9qHAi8ZuF04y0Qg3Srhi7w=) 14: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: BdiehjDEvV0WKRQjURsPtAE6tjynwD/JIOJhJo1OvBQ=) 15: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: qHs+fqBU5YlcSjsUhX8kCEmEa4luPEv25Vk2i2sM2HA=) 16: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: P8DR/P8EbPg/wjMIKFCDnr5SO8UMSMfzw3cYR/SN8aM=) 17: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: t3XBKJTQSBYqiGHST30gvx8Sv6Y9Vi19doDF/V8I5SA=) 18: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: 2oNbSuNtMrRZhuDFKF7wvA8tGJ7a062T3BnrjVnTxgI=) 19: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: z0TbP/uJcntbcykS17didMVv1I6kJuivV3YyPDvb5Qk=) 20: 5366509AC63511EAAC843455C4F9AE02.roa (hash: sZIeVS4EzNY7xGT9g8wGT7ZJ5Ha157jK1HmygHHXLCQ=) 21: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: Rn7Jy0X7+XW4A3zgtQl81Fu2aYAjwpARLeE6XBDTgZA=) 22: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 0O96aUBFnF3g+jtqdQw88vGeNoOwCzLEisDKXvjAw3U=) 23: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: Y93y000PyFusN9av2g725nIEbc+v2zkO/Skb0ZY14h0=) 24: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: UfYQ+WWf4FFjCPuP2mbYoA7YL9U5XlfHaY09FM1ptoA=) 25: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: D78XSgWinPRl6rjut3BmM27VQL+84X13crl9IciHOTE=) 26: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: HJwIxd4p8f4eT4e8lMS53Ug2rtvcBgI8YglBxHZrJXM=) 27: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: w5phrKsuXRjMj+Oq65+3ElGQHP7VKWZA9pF0ugIRM9g=) 28: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: UIz2gPGkTqx3wwDO61C1xAMrlc0SkMhFS3UMTgHXbUo=) 29: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: E7J2EE4Iw2nztwDHOazaLxPeQrBXYkfo/CwcOcaXIpo=) 30: 543386248C5811E782F42951C4F9AE02.roa (hash: 5EJvxSG52Q0omsSTU0w25Epc1lEmIaeLZWBNDFGGpl0=) 31: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: kR9spEW1is0jBJfLnTc/5df7T7vuoq4ZZYVArAg5qFU=) 32: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: hsZwD3Tp7iprkEZyMrEzcTV4AWmWILnDiDx8ZUXHNsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 16:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9909 (0x26b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 18 16:12:14 2024 GMT Not After : Apr 25 16:12:14 2024 GMT Subject: CN=6621465e-984e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:e8:51:bd:5b:ea:d3:04:4d:35:78:6e:87: fb:52:e3:66:fa:e4:cb:5f:4c:3b:b9:d4:b1:c1:fa: a5:5b:41:08:9a:fd:ef:5d:d8:62:b8:2f:27:4e:d0: 91:c5:8e:4e:dc:23:6d:ab:2c:0e:3a:9c:87:47:a1: 78:17:89:20:46:a2:73:ce:88:b3:53:38:71:70:0b: 40:12:75:f2:d2:f2:c5:ec:c9:67:87:29:d3:14:91: b4:61:2e:df:9e:46:8d:7e:0e:61:7f:12:b8:4a:e1: 68:1e:52:af:45:56:26:10:06:df:ca:ef:ed:d8:b1: 3a:77:77:a8:88:bd:92:8c:c4:c7:f8:51:bf:d6:8f: 10:4a:4a:20:d3:b2:4c:49:7c:17:58:49:a7:3f:24: 6a:fb:00:9d:33:4a:2a:50:ed:fd:8c:49:ba:64:23: d3:b4:75:7e:33:78:7c:5a:8d:2b:be:23:d0:64:98: ce:2c:a0:11:1a:e0:53:65:ab:a9:64:cb:ba:20:78: 32:fb:f8:6d:71:4f:84:79:b6:28:f5:a7:36:72:37: 32:89:d5:c8:96:9a:ba:58:1a:3c:2f:88:ae:53:0a: b7:d9:1a:94:fc:6f:9f:79:f6:df:b2:d9:3f:0a:88: 1b:22:b5:d6:e1:13:1b:f5:15:e3:46:52:d6:ad:6c: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:14:5A:6F:20:A7:DB:A3:73:8E:7E:33:85:A1:D1:24:7A:64:5B:AB X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:dc:a1:dd:b6:ce:8e:4f:aa:23:d1:cf:c7:31:37:f4:33:a8: 10:b8:23:d9:29:36:ee:b9:a9:56:90:b5:8b:73:c9:e5:69:63: 36:c7:c1:dd:5f:c4:a0:fb:fa:8a:8a:f1:54:53:8e:54:40:1d: b5:23:b8:3d:be:27:d4:46:6f:42:35:cc:df:c7:c9:d2:20:47: 0d:a5:52:f6:8f:28:f2:19:1e:40:01:8b:62:27:f4:ea:f4:2c: b3:6f:34:10:3f:a1:9e:15:4d:72:d8:44:8b:c6:73:6f:75:92: 6e:c2:bd:9e:75:0d:b4:b8:8d:05:aa:11:2a:99:f0:0e:1d:07: 3d:72:df:56:e0:d8:43:c4:59:d2:2f:3d:01:bb:9c:e6:56:77: cb:68:6d:e1:32:a7:39:7a:44:08:44:29:60:94:e1:66:ba:67: 7e:c4:ae:2d:81:d5:3d:75:e6:57:d9:01:3f:34:a5:ca:d3:0b: 6d:9c:b6:81:4b:58:22:9c:2f:97:c6:03:ad:95:2d:95:b6:ba: 2a:88:ff:c7:ca:9c:1e:d5:40:2d:93:36:3e:3e:9b:22:71:51: 18:9e:65:5e:7d:94:6e:74:34:3a:ef:6e:90:96:19:85:b0:1f: 86:d1:68:12:02:e8:a1:c6:ed:68:87:af:0f:ab:a6:06:cf:06: b5:6a:63:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjQwNDE4MTYxMjE0WhcNMjQwNDI1MTYxMjE0WjAYMRYwFAYD VQQDEw02NjIxNDY1ZS05ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+DoUb1b6tMETTV4bof7UuNm+uTLX0w7udSxwfqlW0EImv3vXdhiuC8nTtCR xY5O3CNtqywOOpyHR6F4F4kgRqJzzoizUzhxcAtAEnXy0vLF7MlnhynTFJG0YS7f nkaNfg5hfxK4SuFoHlKvRVYmEAbfyu/t2LE6d3eoiL2SjMTH+FG/1o8QSkog07JM SXwXWEmnPyRq+wCdM0oqUO39jEm6ZCPTtHV+M3h8Wo0rviPQZJjOLKARGuBTZaup ZMu6IHgy+/htcU+EebYo9ac2cjcyidXIlpq6WBo8L4iuUwq32RqU/G+fefbfstk/ CogbIrXW4RMb9RXjRlLWrWwbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYUWm8g p9ujc45+M4Wh0SR6ZFurMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB53KHdts6OT6oj0c/HMTf0M6gQuCPZKTbuualWkLWLc8nlaWM2x8Hd X8Sg+/qKivFUU45UQB21I7g9vifURm9CNczfx8nSIEcNpVL2jyjyGR5AAYtiJ/Tq 9CyzbzQQP6GeFU1y2ESLxnNvdZJuwr2edQ20uI0FqhEqmfAOHQc9ct9W4NhDxFnS Lz0Bu5zmVnfLaG3hMqc5ekQIRClglOFmumd+xK4tgdU9deZX2QE/NKXK0wttnLaB S1ginC+XxgOtlS2VtroqiP/Hypwe1UAtkzY+PpsicVEYnmVefZRudDQ6726QlhmF sB+G0WgSAuihxu1oh68Pq6YGzwa1amMs -----END CERTIFICATE-----Generated at Thu Apr 18 17:44:23 2024 by rpki-client on console-ams.rpki-client.org