$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: NLtjSSrg/qa4N+xoUw9srtixO/ywLyqmhLHn13JAOx8= Subject key identifier: EB:AD:A5:54:24:3E:A7:94:5F:51:EF:89:99:4A:FB:3E:21:A4:D6:F7 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1078 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 1001 Signing time: Thu 16 May 2024 18:13:54 +0000 Manifest this update: Thu 16 May 2024 18:13:54 +0000 Manifest next update: Thu 23 May 2024 18:13:54 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: /BCgqrky3KWZUceutwT1F1nzo/loDm+3VKlqaCaP8nU=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 0hHBEEm/HjKSHJ/c4EXw8v/RaaEISVOgCOoGPVnERWM=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: QIvHx1lGnmXU4nP1voDiDEApQWHWZM1DlOchOnP3WOw=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: WxZPI2oPHz7gN6E65pAyKQEG7K9nNAiq+cLE8EnqxTo=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: HF1+RDAS1FlFEU58BjvwPd+WQDRYReOKZwjB4KX5zdY=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: UQYK8juqwFeTX1mHIM8DFtTw3S8uGHJwSP9wa1sR0D8=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: FNiise5HlPMqJU88Oo2OfD6hA2hia5LOkeE3rDOQyAY=) 8: CE0122802D4211EA907A566EC4F9AE02.roa (hash: 1Pv3exbH92FT9rIA1u787Oh2A+4UHd934ih4tmuh6mI=) 9: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: mWBAiapeYfnVND9Po9P8sDo86htKY8o5XvxxC+Goraw=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 3MSFHXUSgf0AKKXZWKrpEa1VTfu7VTdMazqelLMvGYM=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: ySlmtl2wcCW6gEkXb9JScRCk7KmQx2Og/ntmePBVts4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4216 (0x1078) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: May 16 18:13:54 2024 GMT Not After : May 23 18:13:54 2024 GMT Subject: CN=66464ce2-4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:44:dc:0d:ec:52:78:56:d7:07:c8:86:d9: 52:70:d3:ee:47:b2:06:e6:0b:dc:49:77:97:5e:2e: ab:43:05:53:2c:73:23:f6:85:9a:0d:d1:77:fd:b3: 76:7b:33:55:e8:e7:50:ad:cb:e5:00:52:7d:6c:56: 37:bf:99:90:e7:8c:f3:2b:33:63:52:02:1f:2f:fa: 18:91:08:85:ea:cc:b9:f7:51:04:58:fe:1e:04:ee: 61:6f:5d:2f:c7:68:b8:51:85:9c:68:27:a2:0a:e9: e5:2e:2d:d1:e4:e3:e7:e6:33:e4:46:8f:e6:84:47: a4:97:38:1f:4c:6e:f5:2c:b5:bb:a1:0e:28:32:57: e3:8c:2f:81:4f:79:b7:83:6e:cb:79:e2:70:e4:72: ca:b3:e4:78:b8:77:d1:a4:9b:cf:6e:57:e5:c0:ac: 7e:b0:61:10:49:07:fe:87:0d:83:37:bf:37:43:54: b3:74:35:e7:f5:44:b9:67:b7:c8:3c:9c:15:ad:3f: 4f:65:23:a1:68:6d:91:9b:92:4f:6d:00:23:cf:44: 10:7c:c4:52:b9:bf:aa:f7:67:d9:b7:ba:6d:6a:9d: d2:b3:2e:60:95:34:cb:fd:eb:03:5a:5c:a4:e7:65: 22:4d:da:43:f5:fc:3e:67:81:33:af:2a:b0:3f:76: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AD:A5:54:24:3E:A7:94:5F:51:EF:89:99:4A:FB:3E:21:A4:D6:F7 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:80:32:e6:ce:d0:11:fb:f6:42:04:7d:24:fb:41:85:a0:c1: c3:3a:7a:c6:08:8f:a5:33:b1:9d:e9:ab:24:f1:fd:f5:8b:f5: b7:b6:8e:5b:06:0f:a1:25:57:8b:9f:66:0b:6b:e2:3b:8a:3b: bd:bb:93:84:bf:3c:52:9a:84:1f:bd:78:bf:a6:d6:3b:5d:15: 4d:c5:6d:0a:be:fa:36:d1:8a:92:68:a7:17:a6:b8:fc:5f:23: 64:a1:e1:ef:8a:96:1a:91:10:a0:30:27:50:6e:cd:c3:78:a9: d3:19:38:14:07:f0:84:8f:76:46:a5:63:e9:ba:5c:3e:60:50: ce:0c:85:75:ac:14:71:34:18:2a:7e:43:26:46:e6:79:39:9e: 5e:07:5f:02:5a:d6:87:88:25:42:94:76:c7:c7:2a:4f:c8:07: c7:09:e9:d1:f3:ec:1c:d1:0d:04:ff:43:4b:c3:5f:7e:25:74: 34:9c:1f:94:e7:b5:85:89:f7:a8:39:5d:cf:80:09:48:79:34: 7e:f0:e1:3a:cb:dd:88:1c:1e:cc:0e:82:c3:60:2f:10:c0:0c: 3b:3d:48:ea:64:fb:e0:95:14:e8:29:c3:ce:a8:dd:36:e2:48: 9c:50:1a:d4:4f:37:2a:8a:d5:48:4b:02:69:ca:02:14:03:0a: 75:8a:15:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjQwNTE2MTgxMzU0WhcNMjQwNTIzMTgxMzU0WjAYMRYwFAYD VQQDEw02NjQ2NGNlMi00Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfRE3A3sUnhW1wfIhtlScNPuR7IG5gvcSXeXXi6rQwVTLHMj9oWaDdF3/bN2 ezNV6OdQrcvlAFJ9bFY3v5mQ54zzKzNjUgIfL/oYkQiF6sy591EEWP4eBO5hb10v x2i4UYWcaCeiCunlLi3R5OPn5jPkRo/mhEeklzgfTG71LLW7oQ4oMlfjjC+BT3m3 g27LeeJw5HLKs+R4uHfRpJvPblflwKx+sGEQSQf+hw2DN783Q1SzdDXn9US5Z7fI PJwVrT9PZSOhaG2Rm5JPbQAjz0QQfMRSub+q92fZt7ptap3Ssy5glTTL/esDWlyk 52UiTdpD9fw+Z4EzryqwP3bFbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOutpVQk PqeUX1HviZlK+z4hpNb3MB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHgDLmztAR+/ZCBH0k+0GFoMHDOnrGCI+lM7Gd6ask8f31i/W3to5b Bg+hJVeLn2YLa+I7iju9u5OEvzxSmoQfvXi/ptY7XRVNxW0Kvvo20YqSaKcXprj8 XyNkoeHvipYakRCgMCdQbs3DeKnTGTgUB/CEj3ZGpWPpulw+YFDODIV1rBRxNBgq fkMmRuZ5OZ5eB18CWtaHiCVClHbHxypPyAfHCenR8+wc0Q0E/0NLw19+JXQ0nB+U 57WFifeoOV3PgAlIeTR+8OE6y92IHB7MDoLDYC8QwAw7PUjqZPvglRToKcPOqN02 4kicUBrUTzcqitVISwJpygIUAwp1ihW5 -----END CERTIFICATE-----Generated at Thu May 16 20:25:56 2024 by rpki-client on console-ams.rpki-client.org