$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: 5LHuwN0DTb9p7w/IX97UmZjkiH6pHDyzh1Zo2JjLAEU= Subject key identifier: 33:4D:7B:1A:6F:79:E6:21:E9:FC:8C:6A:42:0E:A2:45:3F:D1:BA:43 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0265 Signing time: Sat 27 Apr 2024 03:59:54 +0000 Manifest this update: Sat 27 Apr 2024 03:59:54 +0000 Manifest next update: Sat 04 May 2024 03:59:54 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: cTKPcX6I4po4iuJdjP0C7RXzIeqHt6V5Pk1nUnSDd4A=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: HGsw47Eyy33IkITnV4BpmwQ6KAd6fu39iALp83GshW0=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: 4NIACvjNcfKtnaihwDPuUC4SGakJt2r6BITRR+LH4A0=) 4: BCD1B792ED3011EE9B8FE115C4F9AE02.roa (hash: DSwy9njppPWVdrRqIQbwRsBnswJVbIVpqvNNTg3ZDPY=) 5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: JN73h6no+4pACkGVEXk4iDP7S0llbAYyM/K2mIpktn8=) 6: 67DE34666F4811ED92CB5C4BC4F9AE02.roa (hash: rNFuc6i3HSAXbtaMR2XJOOlprv+a2Uv2rj0SLIzZiF8=) 7: F0A6C2D0A55311EE9D25B829C4F9AE02.roa (hash: BfdZWwitQHkgL4h6Zq9ibmtFQQ/5o8yDnpUHC/N2uJA=) 8: 8EF9AD126E8711EDB407C430C4F9AE02.roa (hash: jm9H6ds7laBX7TxaxDAqEupPnz0aDrdQ+VAKFbcbz9Q=) 9: 689A48866F4811ED92CB5C4BC4F9AE02.roa (hash: ZYLzAIdpBWfGyRuQfZHgxpCQNTzJNwZap7zl5+ESr9A=) 10: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: nEDFyS/HIGXZKDPNBDfKYocWNoy10Mn/fwBBYTQP9ZY=) 11: DB5C4650ED3011EEB4F92916C4F9AE02.roa (hash: wbmKlz7JuWdizjlv/qgPJn2eE2B+Uw8bD0D4pnz83gQ=) 12: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: UydOy1AH7ZlsJSPFIYmWRIRxNJDitCuq3+9qR+mppfM=) 13: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: 5tmXHnDKvPKa7MCUXMqq1gg4TUOVz2uFWa+oUpRjwzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Apr 27 03:59:54 2024 GMT Not After : May 4 03:59:54 2024 GMT Subject: CN=662c783a-ef9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:7f:6e:3f:8c:db:78:36:b9:b0:97:0b:75: 49:03:b3:19:05:8e:56:ec:93:ac:74:25:a6:c3:66: 70:73:75:17:16:c4:60:86:f0:64:0f:86:d8:89:ac: 3d:3b:b9:c1:fa:6f:ce:67:4a:d8:44:53:ed:4e:a0: b2:66:10:e7:da:92:71:ed:58:bb:4b:e6:40:cd:20: 5d:52:5b:ca:2d:9c:26:cf:f3:fd:d1:d1:c2:2d:1b: 93:bb:e5:8f:e1:23:63:d6:2a:f1:d4:d6:6a:40:62: 8b:23:77:31:1c:30:e9:33:c9:13:40:98:92:ca:70: 94:9a:07:0b:e6:bb:e9:ce:42:24:fc:98:ea:7f:ee: 9e:d3:39:19:f3:4b:ff:82:da:08:0d:77:2e:39:88: 94:5f:d8:08:69:fb:46:05:86:e1:bf:79:7b:89:dd: cb:f4:73:8e:59:c3:e3:a2:bf:14:65:33:03:9a:c9: 3f:37:ae:b8:8f:51:fb:ed:c2:61:61:50:af:02:1f: 10:70:5f:a2:82:e9:ed:b3:a7:03:19:31:a1:c1:3c: 1e:b9:5a:3e:8b:f4:5a:db:22:76:54:52:b5:7c:0c: ca:3f:4a:3f:25:3e:d7:dd:c7:cf:17:20:1e:5c:40: cf:ca:bd:b7:a5:5e:63:9a:b4:04:04:3a:5c:07:da: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:7B:1A:6F:79:E6:21:E9:FC:8C:6A:42:0E:A2:45:3F:D1:BA:43 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ff:26:9a:1a:ed:62:28:88:63:70:3d:98:54:ca:81:fc:e7: 5e:bd:c1:f4:8d:5f:9c:1b:a9:c2:ee:a1:78:7d:7a:fb:3c:ee: f3:c4:9d:fa:fb:6c:f5:83:1f:cd:c2:40:e6:ea:72:d2:0a:12: ce:31:ab:28:cc:1e:c5:f3:ca:ab:37:48:8c:3d:30:ae:bb:41: 8d:67:3d:29:0b:e8:90:b8:b3:fd:3b:5f:cc:36:4f:60:58:3a: 17:66:e6:f7:0f:69:cc:85:67:66:ec:bd:e4:4f:45:1b:bd:d7: e6:fd:4b:01:8e:db:a1:ba:9b:ef:e5:a2:a4:3b:09:d7:ea:4f: ef:3d:3c:fd:e2:71:73:da:fb:a8:d3:2b:92:cf:dd:b3:2a:53: 11:f4:f3:a1:02:f8:bf:4e:8d:be:6c:90:27:44:f7:d9:77:a3: ba:ad:fa:a1:b6:4c:9f:58:d8:fc:fe:5c:33:d2:89:85:1a:48: c4:4e:3e:db:66:68:6c:b7:f6:0c:fd:fa:30:b7:26:4b:62:bc: 44:09:a5:07:f1:0d:b0:34:58:58:47:b8:96:da:a9:1e:f8:f7: 50:5e:f4:5d:5a:a2:47:ac:fc:5d:82:4e:34:54:64:9e:1b:be: ff:89:81:a4:36:2c:65:87:82:70:d9:d2:e0:79:58:2f:62:2f: 73:ab:46:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQwNDI3MDM1OTU0WhcNMjQwNTA0MDM1OTU0WjAYMRYwFAYD VQQDEw02NjJjNzgzYS1lZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA059/bj+M23g2ubCXC3VJA7MZBY5W7JOsdCWmw2Zwc3UXFsRghvBkD4bYiaw9 O7nB+m/OZ0rYRFPtTqCyZhDn2pJx7Vi7S+ZAzSBdUlvKLZwmz/P90dHCLRuTu+WP 4SNj1irx1NZqQGKLI3cxHDDpM8kTQJiSynCUmgcL5rvpzkIk/Jjqf+6e0zkZ80v/ gtoIDXcuOYiUX9gIaftGBYbhv3l7id3L9HOOWcPjor8UZTMDmsk/N664j1H77cJh YVCvAh8QcF+igunts6cDGTGhwTweuVo+i/Ra2yJ2VFK1fAzKP0o/JT7X3cfPFyAe XEDPyr23pV5jmrQEBDpcB9o77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNNexpv eeYh6fyMakIOokU/0bpDMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8/yaaGu1iKIhjcD2YVMqB/OdevcH0jV+cG6nC7qF4fXr7PO7zxJ36 +2z1gx/NwkDm6nLSChLOMasozB7F88qrN0iMPTCuu0GNZz0pC+iQuLP9O1/MNk9g WDoXZub3D2nMhWdm7L3kT0Ubvdfm/UsBjtuhupvv5aKkOwnX6k/vPTz94nFz2vuo 0yuSz92zKlMR9POhAvi/To2+bJAnRPfZd6O6rfqhtkyfWNj8/lwz0omFGkjETj7b Zmhst/YM/fowtyZLYrxECaUH8Q2wNFhYR7iW2qke+PdQXvRdWqJHrPxdgk40VGSe G77/iYGkNixlh4Jw2dLgeVgvYi9zq0YV -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:12 2024 by rpki-client on console-ams.rpki-client.org