$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: D5/V7G1m6fCgu6ZP5LIVqsdp/kFxwSxjkAaJZfCuYq4= Subject key identifier: 80:62:4E:20:B6:BC:73:D6:EE:3C:E2:54:D7:D3:FA:71:0A:DE:64:A5 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 02E4 Signing time: Thu 21 Nov 2024 18:57:09 +0000 Manifest this update: Thu 21 Nov 2024 18:57:09 +0000 Manifest next update: Thu 28 Nov 2024 18:57:09 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: 3XlDmX+tMwktvUYW1MJccuWqibxU6LDieVBm6uejeaI=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: Vm6eiRV2m0h3o2+tYd1FGFjgp9pdQts4H72lNl2Xi7I=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: rkgFtN+easpfj80zyIh12NHa5YIf9/kqUBTz88A9U+0=) 4: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: M/8mU5tu1PDehqyIIfEx5AYfNXgF7DfZkAdJsClKh+E=) 5: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: VDDXKbmYyHiDMEmj/oJ4TvJLlQHLiEO+FJwD/8ZvU6g=) 6: 7CCE329266F711EF86880681C4F9AE02.roa (hash: EW0QjHa3f/l7itSF2nJAhlAqPXddC/qNYI4p2ArGlrs=) 7: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: 62eTjhzKKDQnWJh0GyzAO6zcuQ50THYJAAnB/eSa0lE=) 8: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: cnWBWlYvUnH20i9EZRcahtVtdBdKx0j0wv6eUp45kns=) 9: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: bP0i0QbndVMqRZ4Mv5nqCwuWNS0FREH9OqWOj8GCqK8=) 10: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: m4mGRpOEYOVe+6oiKGj+nK4AgwsmVEPed7LrVSPSa4M=) 11: 66B96D9EA83A11EFA4FE4D0CC4F9AE02.roa (hash: tCPK4SFEKr5SOGiSiILaz9pf0fbHhhY8rNfPQGofUaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 18:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Nov 21 18:57:09 2024 GMT Not After : Nov 28 18:57:09 2024 GMT Subject: CN=673f8285-78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:aa:f0:91:96:97:43:37:84:7a:f2:8a:20: 3c:b8:1f:fc:23:fc:e2:42:8c:e4:07:d3:55:79:ff: b3:55:2f:36:1c:c9:77:0b:c2:18:19:d8:e4:a5:82: 69:75:93:43:dd:e2:6e:a0:f7:e5:48:c7:a8:f3:db: 95:82:9d:97:43:18:04:df:fe:1f:15:0c:7f:0f:2e: 5b:0b:bb:d9:1e:9d:95:10:15:8a:a5:fe:eb:ae:2b: 84:28:a2:d4:b8:dd:4b:db:84:35:f5:0d:6e:ea:2b: 58:81:a4:27:d3:c8:f5:83:74:65:22:32:5c:ba:de: a5:93:81:38:75:6e:4d:5b:12:ec:84:5f:c9:c6:3d: 79:a0:ac:84:6b:e5:16:f5:b8:4b:24:14:bb:07:08: cb:5c:d8:54:4c:fe:30:30:91:f2:e7:32:52:1d:df: 24:22:88:67:cf:98:7e:58:74:97:14:70:03:cd:79: f5:b6:d1:ad:85:44:18:33:a7:42:1d:cd:96:3e:24: 32:53:26:9b:dd:c0:71:31:cd:19:bc:e5:f0:3f:5f: 15:ff:75:d5:14:d5:48:9f:8f:75:5b:84:8e:b8:71: f8:6f:80:f3:e3:80:9d:d9:5b:4d:42:e2:43:fb:51: 44:2a:71:33:ec:2f:fa:cc:36:53:fc:f4:2e:d8:0b: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:62:4E:20:B6:BC:73:D6:EE:3C:E2:54:D7:D3:FA:71:0A:DE:64:A5 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d1:9c:99:96:66:f8:c3:e7:68:6a:4a:a7:de:78:db:86:2a: 6a:f6:c9:da:43:a5:c7:97:7c:6b:0e:af:cd:ea:6a:7d:81:09: 6a:48:46:4c:46:02:7d:0d:52:bf:fe:22:ba:74:4e:85:26:31: a3:dd:5e:89:fa:fd:92:15:01:c0:5a:18:dd:39:45:e5:fb:5d: 3e:24:10:0a:ea:15:bd:9d:b5:b4:a2:e7:f8:4b:12:05:ff:76: bc:11:85:fe:3d:09:7c:2d:60:d7:bf:b1:89:87:a5:92:d1:af: c2:8f:e9:b9:3f:6b:e9:b7:4b:bb:fb:73:c9:5c:66:00:ce:d0: d2:ce:6e:56:22:0e:91:ca:7c:32:28:1f:45:fd:c0:c9:de:cf: 8f:ce:25:6d:9c:ae:4d:78:62:b4:d8:79:1b:7f:e0:10:12:54: 78:37:21:c6:0c:aa:3b:e9:43:f9:e3:86:dc:98:e7:0f:eb:28: ec:01:75:0e:da:53:72:30:56:cb:cc:97:27:52:77:9e:2b:25: f7:c2:23:ed:49:e1:44:7c:d2:fa:0d:d3:7c:bf:a2:ee:f9:0e: 10:b4:eb:18:18:b1:62:63:86:29:51:7f:42:ed:cc:b1:d9:2c: 6a:02:e7:43:67:f7:dd:d6:5b:cb:53:b0:32:36:99:e6:26:b9: ba:c6:8b:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQxMTIxMTg1NzA5WhcNMjQxMTI4MTg1NzA5WjAYMRYwFAYD VQQDEw02NzNmODI4NS03OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdGq8JGWl0M3hHryiiA8uB/8I/ziQozkB9NVef+zVS82HMl3C8IYGdjkpYJp dZND3eJuoPflSMeo89uVgp2XQxgE3/4fFQx/Dy5bC7vZHp2VEBWKpf7rriuEKKLU uN1L24Q19Q1u6itYgaQn08j1g3RlIjJcut6lk4E4dW5NWxLshF/Jxj15oKyEa+UW 9bhLJBS7BwjLXNhUTP4wMJHy5zJSHd8kIohnz5h+WHSXFHADzXn1ttGthUQYM6dC Hc2WPiQyUyab3cBxMc0ZvOXwP18V/3XVFNVIn491W4SOuHH4b4Dz44Cd2VtNQuJD +1FEKnEz7C/6zDZT/PQu2AsbJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBiTiC2 vHPW7jziVNfT+nEK3mSlMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx0ZyZlmb4w+doakqn3njbhipq9snaQ6XHl3xrDq/N6mp9gQlqSEZM RgJ9DVK//iK6dE6FJjGj3V6J+v2SFQHAWhjdOUXl+10+JBAK6hW9nbW0ouf4SxIF /3a8EYX+PQl8LWDXv7GJh6WS0a/Cj+m5P2vpt0u7+3PJXGYAztDSzm5WIg6Rynwy KB9F/cDJ3s+PziVtnK5NeGK02Hkbf+AQElR4NyHGDKo76UP544bcmOcP6yjsAXUO 2lNyMFbLzJcnUneeKyX3wiPtSeFEfNL6DdN8v6Lu+Q4QtOsYGLFiY4YpUX9C7cyx 2SxqAudDZ/fd1lvLU7AyNpnmJrm6xosb -----END CERTIFICATE-----Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org