$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: O89Znk/5Wpix8eIjFzaMzm33l3Lr8V+VgviPbhfoH1k= Subject key identifier: FA:FD:CA:88:61:68:97:E4:50:A6:E6:56:D4:91:8B:7F:1D:E7:5F:1E Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1071 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 0FFA Signing time: Thu 02 May 2024 18:10:01 +0000 Manifest this update: Thu 02 May 2024 18:10:01 +0000 Manifest next update: Thu 09 May 2024 18:10:01 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: emoztU5UShNdkGmejE1ROxpA0cmhvNSNHLHO11wEsJE=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 0hHBEEm/HjKSHJ/c4EXw8v/RaaEISVOgCOoGPVnERWM=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: QIvHx1lGnmXU4nP1voDiDEApQWHWZM1DlOchOnP3WOw=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: WxZPI2oPHz7gN6E65pAyKQEG7K9nNAiq+cLE8EnqxTo=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: HF1+RDAS1FlFEU58BjvwPd+WQDRYReOKZwjB4KX5zdY=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: UQYK8juqwFeTX1mHIM8DFtTw3S8uGHJwSP9wa1sR0D8=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: FNiise5HlPMqJU88Oo2OfD6hA2hia5LOkeE3rDOQyAY=) 8: CE0122802D4211EA907A566EC4F9AE02.roa (hash: 1Pv3exbH92FT9rIA1u787Oh2A+4UHd934ih4tmuh6mI=) 9: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: mWBAiapeYfnVND9Po9P8sDo86htKY8o5XvxxC+Goraw=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 3MSFHXUSgf0AKKXZWKrpEa1VTfu7VTdMazqelLMvGYM=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: ySlmtl2wcCW6gEkXb9JScRCk7KmQx2Og/ntmePBVts4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4209 (0x1071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: May 2 18:10:01 2024 GMT Not After : May 9 18:10:01 2024 GMT Subject: CN=6633d6f9-fe47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:13:1a:ec:87:15:7c:49:9c:4c:05:8a:2a: 5d:c9:9a:ab:69:f2:fd:60:f1:39:b6:d5:d9:16:19: 2a:b1:7e:21:c7:77:22:4b:d1:74:bb:94:d9:75:62: d7:b6:2c:d9:6a:e0:fb:1c:73:c7:13:53:f3:5b:06: 62:13:a2:a8:53:87:a3:5d:e0:e5:33:37:d2:86:8f: be:77:41:e2:18:59:55:cf:57:4b:d0:60:69:61:35: a0:3f:d6:82:db:3f:0c:db:e7:d6:7c:51:81:19:55: 2c:e6:11:13:4b:23:df:f0:0c:41:8b:45:1c:84:3a: 6b:e1:57:2a:25:15:8c:7c:57:f2:df:7d:f7:8f:31: 4c:b2:16:70:e6:b6:cb:78:f5:3a:a8:a7:9f:f7:ec: bb:75:cb:4d:e4:09:bf:b2:4f:41:2e:98:5c:be:0c: 9b:c9:e9:e9:29:fe:a2:08:a5:e5:0d:2c:3d:a0:c6: 31:76:b3:ab:2e:60:b3:1b:ee:20:2a:d8:86:35:e6: a3:62:d3:ac:dc:97:e3:54:aa:79:58:3a:7d:be:a6: b5:b8:6f:58:1b:86:ba:b4:25:9f:bc:30:a1:de:2e: 5b:3c:dc:4d:d9:a2:ea:12:91:e9:72:7a:f8:5f:78: ab:fd:b0:2a:87:8a:09:7e:c7:94:35:02:b1:4b:92: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FD:CA:88:61:68:97:E4:50:A6:E6:56:D4:91:8B:7F:1D:E7:5F:1E X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a8:9e:18:55:bc:29:c2:d2:49:c3:0b:dc:d8:1e:cc:d4:9b: 61:e2:3c:5d:e2:08:ef:29:a0:98:de:13:72:85:d1:30:14:f4: 16:2b:65:14:bc:b8:f4:03:3f:cc:41:e0:e4:ba:df:fb:05:ba: 46:22:69:3a:3a:4c:e6:53:17:2c:bb:ba:b2:61:b3:5e:f7:89: c8:5a:58:63:11:bf:8d:c5:08:c8:3f:d1:42:96:93:5f:86:eb: 37:8f:61:84:64:b1:98:2f:2b:d9:55:98:eb:47:dc:1d:00:2f: 23:ed:a2:37:55:6e:5d:10:3b:d2:a8:a2:56:a7:e0:c8:6a:3b: 7d:0b:0c:48:c0:c4:14:ab:8e:c8:8d:92:b5:28:69:eb:23:8f: aa:0c:9b:87:94:3b:b4:68:e0:54:69:1b:dd:bf:e9:76:f3:11: 74:cb:3b:00:e8:94:ed:29:df:d8:18:e4:d6:2a:22:3e:e2:97: e6:78:8a:8b:3a:91:ff:7c:18:d6:58:e3:73:fd:5d:27:ce:56: 4e:96:73:10:1d:aa:61:44:53:53:45:97:48:39:95:22:e9:43: 5a:da:6f:7c:c4:a5:16:cd:4d:47:90:06:15:96:7c:e6:6e:31: f5:41:9c:e4:84:0a:fb:a3:64:a0:68:f5:03:7c:e6:5f:58:81: 03:69:06:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjQwNTAyMTgxMDAxWhcNMjQwNTA5MTgxMDAxWjAYMRYwFAYD VQQDEw02NjMzZDZmOS1mZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkeUTGuyHFXxJnEwFiipdyZqrafL9YPE5ttXZFhkqsX4hx3ciS9F0u5TZdWLX tizZauD7HHPHE1PzWwZiE6KoU4ejXeDlMzfSho++d0HiGFlVz1dL0GBpYTWgP9aC 2z8M2+fWfFGBGVUs5hETSyPf8AxBi0UchDpr4VcqJRWMfFfy3333jzFMshZw5rbL ePU6qKef9+y7dctN5Am/sk9BLphcvgybyenpKf6iCKXlDSw9oMYxdrOrLmCzG+4g KtiGNeajYtOs3JfjVKp5WDp9vqa1uG9YG4a6tCWfvDCh3i5bPNxN2aLqEpHpcnr4 X3ir/bAqh4oJfseUNQKxS5JTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr9yohh aJfkUKbmVtSRi38d518eMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBqJ4YVbwpwtJJwwvc2B7M1Jth4jxd4gjvKaCY3hNyhdEwFPQWK2UU vLj0Az/MQeDkut/7BbpGImk6OkzmUxcsu7qyYbNe94nIWlhjEb+NxQjIP9FClpNf hus3j2GEZLGYLyvZVZjrR9wdAC8j7aI3VW5dEDvSqKJWp+DIajt9CwxIwMQUq47I jZK1KGnrI4+qDJuHlDu0aOBUaRvdv+l28xF0yzsA6JTtKd/YGOTWKiI+4pfmeIqL OpH/fBjWWONz/V0nzlZOlnMQHaphRFNTRZdIOZUi6UNa2m98xKUWzU1HkAYVlnzm bjH1QZzkhAr7o2SgaPUDfOZfWIEDaQZS -----END CERTIFICATE-----Generated at Thu May 2 20:50:36 2024 by rpki-client on console-fra.rpki-client.org