$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: Ld2sFpZ15RbMHzQGm8X3eBydH+pLjFkOaJKVN66Ygyk= Subject key identifier: DB:F6:A6:86:C6:F7:29:B6:9E:03:7A:38:1B:86:4C:98:A4:16:BD:E7 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 069C Signing time: Thu 16 May 2024 23:41:16 +0000 Manifest this update: Thu 16 May 2024 23:41:16 +0000 Manifest next update: Thu 23 May 2024 23:41:16 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: otD4k3By8UoLwOpXw8WLfjYlZVJMMONbIr8sgTio8pA=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: ZbXoPDNwwN43S46joX0bgDKRbx5TOpa5VuxWwX3a8DM=) 3: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: poFmJ0FtSdjknkvhbTPMxSLNtd422YdP9YDzIcZoH4g=) 4: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: VhPZ3Dze/+8PJDx8/8yHKIFT6fKdLh/CUt60a+sweXw=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: 7HNUvZFAwQ7Cd0I9COINEjh6qWhul5DciDiZ3SRlNVc=) 6: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: bUSE0gUZMQuQSO65Czv3NWH/el/tbBx+Kis8SIWiAkc=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: QPx3/rmNUFkb/EoTXS7rHyvmcwb2sc1WP5ySio1N2pw=) 8: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: iU+dm7+nLQRZzFMHQxkAgltXoZ5D3RNCl5X3OGdssIA=) 9: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: YVWTCiNnBwXTmSWz0wXkWBYArWlOINqNCodDvC44VN8=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: 2oKhfzZJX1bMpFhHSdvZyq1vJEYqTdqIY/bPIqbUw8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: May 16 23:41:16 2024 GMT Not After : May 23 23:41:16 2024 GMT Subject: CN=6646999c-e0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:2c:1a:1a:ab:58:76:17:7c:eb:50:ba:58: 54:02:87:d0:e8:22:99:cd:d9:0b:fa:b6:34:2e:78: f0:dd:63:81:6a:71:43:ff:57:64:5f:a8:08:51:77: 53:87:81:68:b4:b9:ea:2d:d1:c5:b0:f4:81:83:21: 7a:4a:ae:7d:66:60:91:a6:28:0c:a9:8e:e7:ed:37: 3b:f0:a4:7f:8d:a7:35:ce:59:a6:26:c7:52:16:0d: 91:e8:00:4d:31:d9:66:ed:e0:48:cf:41:98:bf:e5: 59:11:83:7f:da:20:17:f4:ed:8a:ee:50:f0:c1:d3: 20:c8:31:b6:79:f8:4e:66:b4:8f:29:c4:dc:e3:76: 25:b6:36:7c:07:9d:93:55:93:93:7c:b5:90:47:c7: b7:96:a4:40:c2:5f:ad:44:62:f0:46:4d:2a:73:e5: 76:f1:f3:f5:2b:57:82:83:fb:86:23:21:3c:4b:71: b8:a9:a7:cc:54:1f:0f:30:ed:57:3f:63:00:bd:89: 40:d7:d5:5c:f0:d0:db:3e:e5:f3:38:92:fb:4a:74: c9:b0:43:93:15:f7:36:96:14:87:00:2f:91:e7:ee: 17:67:2d:d6:a7:35:86:2b:cc:a8:d7:6f:83:20:03: bb:d3:33:2f:93:b8:97:92:8d:47:49:28:ad:33:77: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F6:A6:86:C6:F7:29:B6:9E:03:7A:38:1B:86:4C:98:A4:16:BD:E7 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:db:a6:eb:45:0f:6e:6f:42:d9:46:53:1d:f9:dd:fc:66:36: 11:f7:9e:98:28:5f:42:ae:ca:19:41:1f:b8:41:04:2f:0d:bd: 68:d8:68:67:b4:6a:96:42:f4:0b:9a:e9:19:e0:26:09:23:4e: a4:a1:ea:1d:c3:fc:80:94:a1:2d:47:c5:3e:3d:a5:a5:3c:c3: 81:98:c7:ce:e2:56:62:6d:bf:30:f7:30:f2:77:5a:47:3f:b9: 1f:25:55:96:7d:7c:1a:fa:c7:6c:9f:05:ea:c7:f5:8d:20:37: 56:b2:ca:33:72:25:12:bf:73:27:bc:ce:a3:fc:49:8a:13:c0: fc:13:1b:16:28:30:5e:33:76:54:aa:1e:41:e7:1d:20:f3:cb: 59:57:2f:8a:cf:b2:f6:73:5c:7f:ed:50:e1:7c:6d:82:f9:93: 9c:6e:1f:67:5f:ce:1b:26:20:0d:af:f3:50:86:f8:92:45:41: 47:87:cc:d8:86:73:ab:6f:38:e2:79:3a:24:2e:92:86:aa:6a: c4:7f:a4:6b:0a:4a:c7:39:65:3d:3e:b6:9a:1c:d4:48:9d:c7: 7c:6a:1e:28:25:53:5a:b9:48:cb:0e:0b:d6:7b:96:f0:ac:91: 38:ee:97:76:9d:90:39:b0:7b:35:bb:ee:82:a1:e6:2b:74:73: 06:93:97:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjQwNTE2MjM0MTE2WhcNMjQwNTIzMjM0MTE2WjAYMRYwFAYD VQQDEw02NjQ2OTk5Yy1lMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMMsGhqrWHYXfOtQulhUAofQ6CKZzdkL+rY0Lnjw3WOBanFD/1dkX6gIUXdT h4FotLnqLdHFsPSBgyF6Sq59ZmCRpigMqY7n7Tc78KR/jac1zlmmJsdSFg2R6ABN Mdlm7eBIz0GYv+VZEYN/2iAX9O2K7lDwwdMgyDG2efhOZrSPKcTc43YltjZ8B52T VZOTfLWQR8e3lqRAwl+tRGLwRk0qc+V28fP1K1eCg/uGIyE8S3G4qafMVB8PMO1X P2MAvYlA19Vc8NDbPuXzOJL7SnTJsEOTFfc2lhSHAC+R5+4XZy3WpzWGK8yo12+D IAO70zMvk7iXko1HSSitM3c3FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNv2pobG 9ym2ngN6OBuGTJikFr3nMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg26brRQ9ub0LZRlMd+d38ZjYR956YKF9CrsoZQR+4QQQvDb1o2Ghn tGqWQvQLmukZ4CYJI06koeodw/yAlKEtR8U+PaWlPMOBmMfO4lZibb8w9zDyd1pH P7kfJVWWfXwa+sdsnwXqx/WNIDdWssozciUSv3MnvM6j/EmKE8D8ExsWKDBeM3ZU qh5B5x0g88tZVy+Kz7L2c1x/7VDhfG2C+ZOcbh9nX84bJiANr/NQhviSRUFHh8zY hnOrbzjieTokLpKGqmrEf6RrCkrHOWU9PraaHNRIncd8ah4oJVNauUjLDgvWe5bw rJE47pd2nZA5sHs1u+6CoeYrdHMGk5dA -----END CERTIFICATE-----Generated at Fri May 17 00:19:44 2024 by rpki-client on console-ams.rpki-client.org