$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: 8USix9/OHXRdeTVG0ZK82YNGMOd+W6OCvc1DijCi68Y= Subject key identifier: 11:A2:74:C8:61:DC:B5:12:3D:2E:B1:8C:14:93:71:58:A7:9D:8D:69 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 10D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 1061 Signing time: Wed 20 Nov 2024 17:22:30 +0000 Manifest this update: Wed 20 Nov 2024 17:22:29 +0000 Manifest next update: Wed 27 Nov 2024 17:22:29 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: h6FqtZNzsbwX/R9w3zuMnQy9c9Odtaz/WENLlu7qbmo=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 0hHBEEm/HjKSHJ/c4EXw8v/RaaEISVOgCOoGPVnERWM=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: QIvHx1lGnmXU4nP1voDiDEApQWHWZM1DlOchOnP3WOw=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: WxZPI2oPHz7gN6E65pAyKQEG7K9nNAiq+cLE8EnqxTo=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: HF1+RDAS1FlFEU58BjvwPd+WQDRYReOKZwjB4KX5zdY=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: UQYK8juqwFeTX1mHIM8DFtTw3S8uGHJwSP9wa1sR0D8=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: FNiise5HlPMqJU88Oo2OfD6hA2hia5LOkeE3rDOQyAY=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: mWBAiapeYfnVND9Po9P8sDo86htKY8o5XvxxC+Goraw=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: 1Pv3exbH92FT9rIA1u787Oh2A+4UHd934ih4tmuh6mI=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 3MSFHXUSgf0AKKXZWKrpEa1VTfu7VTdMazqelLMvGYM=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: ySlmtl2wcCW6gEkXb9JScRCk7KmQx2Og/ntmePBVts4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4312 (0x10d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Nov 20 17:22:29 2024 GMT Not After : Nov 27 17:22:29 2024 GMT Subject: CN=673e1ad5-d330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:ea:52:ee:7f:5a:24:73:4f:a1:60:d0:68: 15:08:bc:9a:98:c7:63:5c:ac:59:5f:b3:1e:f6:03: 7a:fa:94:67:c6:90:a1:5b:8e:a9:02:e5:80:14:a6: cf:66:93:a2:9d:35:73:4e:05:9d:8b:ea:2e:49:b6: 78:d4:eb:cd:57:b6:89:26:b1:f5:f2:19:aa:ec:6f: 0f:99:a9:cb:f0:06:d2:07:11:21:a9:44:8a:e8:4d: 04:f3:e6:db:70:c8:08:12:52:20:38:97:1a:0d:96: 4b:3e:fa:19:53:30:1f:a4:69:9c:c9:c7:e1:d5:d8: 74:b4:35:fe:83:96:5c:d8:62:ff:cf:00:0a:a7:2b: b3:51:57:c1:32:de:a0:09:fc:e9:3a:63:c8:91:05: 90:db:50:48:e0:f3:fd:0b:d2:eb:78:45:7a:f7:09: 44:f4:91:5d:8e:91:e6:5d:82:cd:f6:6a:46:30:01: 45:8e:c4:8e:38:ba:72:61:b0:40:61:14:e0:a0:c1: 38:ad:aa:95:c6:eb:56:e1:83:a1:c3:41:00:bb:6a: 48:2f:2a:3e:26:21:fe:4a:b4:56:7f:5f:b2:ba:7f: 07:19:d7:4d:1f:fa:76:ae:f0:62:90:b9:2b:b9:4c: 1d:ce:cd:8f:25:3d:b2:44:08:b7:66:85:e0:81:6e: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:74:C8:61:DC:B5:12:3D:2E:B1:8C:14:93:71:58:A7:9D:8D:69 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2c:2b:01:6f:64:d0:73:cf:ea:47:88:6b:8b:29:96:a6:d2: 0d:fa:e5:a6:a1:63:e0:1f:ae:9d:20:31:eb:d1:e1:a1:be:5d: a1:09:6b:fe:03:eb:91:31:93:d8:a2:88:6e:82:7b:c4:45:9f: 84:ac:69:24:5e:c4:34:5f:1d:8d:95:c9:37:c3:9a:27:bb:da: 56:fd:32:2a:cc:69:82:0c:14:7f:1b:a8:7b:8d:3c:56:58:ab: 44:a3:83:f4:bd:fd:f7:d3:58:65:74:d0:ae:11:07:20:0e:a4: 2b:aa:67:f9:58:f3:a5:37:fc:48:62:86:00:b9:c7:4b:8d:93: eb:bf:05:fe:dc:65:22:29:18:e4:ae:0e:9f:fc:7d:e6:a6:a9: 6c:92:59:42:07:79:65:89:5d:c8:06:be:f9:39:fb:33:27:2a: d0:f4:16:2d:93:b1:eb:d0:09:1f:e0:48:19:bb:1d:87:f7:e4: b2:e7:fd:c6:69:69:97:a2:c1:a8:66:68:ef:b8:33:6e:9d:d7: bd:c2:b6:4f:98:87:37:8e:0a:6a:d7:cb:62:61:4b:01:0c:38: 16:4d:c6:28:40:94:e1:eb:1f:cd:1c:68:6a:98:c3:10:d7:2a: 2b:66:7b:ea:69:b0:09:69:cf:e5:05:ee:e7:e7:1a:99:4f:58: 61:62:12:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjQxMTIwMTcyMjI5WhcNMjQxMTI3MTcyMjI5WjAYMRYwFAYD VQQDEw02NzNlMWFkNS1kMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyHqUu5/WiRzT6Fg0GgVCLyamMdjXKxZX7Me9gN6+pRnxpChW46pAuWAFKbP ZpOinTVzTgWdi+ouSbZ41OvNV7aJJrH18hmq7G8PmanL8AbSBxEhqUSK6E0E8+bb cMgIElIgOJcaDZZLPvoZUzAfpGmcycfh1dh0tDX+g5Zc2GL/zwAKpyuzUVfBMt6g CfzpOmPIkQWQ21BI4PP9C9LreEV69wlE9JFdjpHmXYLN9mpGMAFFjsSOOLpyYbBA YRTgoME4raqVxutW4YOhw0EAu2pILyo+JiH+SrRWf1+yun8HGddNH/p2rvBikLkr uUwdzs2PJT2yRAi3ZoXggW61RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGidMhh 3LUSPS6xjBSTcVinnY1pMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0LCsBb2TQc8/qR4hriymWptIN+uWmoWPgH66dIDHr0eGhvl2hCWv+ A+uRMZPYoohugnvERZ+ErGkkXsQ0Xx2Nlck3w5onu9pW/TIqzGmCDBR/G6h7jTxW WKtEo4P0vf3301hldNCuEQcgDqQrqmf5WPOlN/xIYoYAucdLjZPrvwX+3GUiKRjk rg6f/H3mpqlskllCB3lliV3IBr75OfszJyrQ9BYtk7Hr0Akf4EgZux2H9+Sy5/3G aWmXosGoZmjvuDNunde9wrZPmIc3jgpq18tiYUsBDDgWTcYoQJTh6x/NHGhqmMMQ 1yorZnvqabAJac/lBe7n5xqZT1hhYhJt -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:07 2024 by rpki-client on console-ams.rpki-client.org