$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: ZzahjPXyOg2qYHaTEIbQiXzqsTNUoai4XIgGxBA88jk= Subject key identifier: 77:23:1A:12:DA:30:1B:01:C9:59:77:CC:0F:5E:83:82:15:2E:32:FC Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 06FE Signing time: Wed 20 Nov 2024 21:40:53 +0000 Manifest this update: Wed 20 Nov 2024 21:40:52 +0000 Manifest next update: Wed 27 Nov 2024 21:40:52 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: hT6svOyQrhyoZTlw/GT67WXEArdwNSPCcknBXT8gLaw=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: SgUApaKrz3I+VB8AtKHyQ8VOd7m+ovVx9xgf8pErYlU=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: mxB3yjYGB13RAoosj8FX8EoTGGWkUSin7w4er+g4SEM=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: JKRkAuL9yffO/Fe1PSsX5t/Ot6ARnJ9I/G6iI6zoO/g=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: siwf/BRs/2qjsSqYe1YNo8fuooHbA+PHr0NQC6IUKoY=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: hyIj/oH1UbDGdOUj+NMHphg7x96naMtPuDiIW9PmlFc=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: 7ARnOa15SPNUaY70Cimy+c5qoh+iIO5hu8LoR0cj8rc=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: i6QopCT3wMyI5V4oS5AOopBe2SziRTgfYrO+6jKs/XA=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: pyTKRU9BUUR54eL45xj3zBjeNm0ArDMdCQGdgijd2ls=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: zgVRs+6F7DXZL1anc6K7thLZ91kSFqktNq+7bQzMe3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Nov 20 21:40:52 2024 GMT Not After : Nov 27 21:40:52 2024 GMT Subject: CN=673e5764-35c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:51:51:40:28:47:2b:2e:b7:71:9a:af:65: 1e:2b:d5:a8:7f:84:ff:b8:41:9f:33:ec:0a:23:49: 20:a2:b4:75:ac:4f:02:72:af:28:9a:bb:6e:af:68: 9e:62:16:f7:f6:89:c4:5a:c0:47:03:92:3b:9f:ad: 27:5d:fd:4b:07:1f:59:b3:a4:f3:02:fc:ad:ea:37: c1:83:b3:bd:f1:dc:01:8c:fe:5b:c9:97:67:d1:74: f3:62:7b:42:83:da:ab:38:aa:6e:ad:0f:b1:e9:46: f6:fd:d7:cb:b7:1f:82:fe:ab:1b:3c:b4:71:28:59: 81:b8:fd:fb:4f:03:6b:2b:b2:36:76:0c:66:be:73: fa:ad:cf:2f:85:79:ca:22:e2:55:81:5f:b3:10:f5: 4d:03:4b:c4:7c:47:28:82:8e:27:4b:d2:3e:b2:08: 44:7e:94:7e:0a:66:0d:75:54:83:dd:cf:ae:d3:82: 2e:30:ce:41:ec:a9:aa:57:93:ee:93:be:c5:a4:c8: 52:0b:03:2a:f5:b8:73:5a:bf:cc:24:0a:e7:88:42: 94:a5:4b:3d:80:3c:93:71:97:37:da:bb:94:48:c6: 5c:61:72:09:eb:f4:20:bf:64:b9:42:97:ff:22:fd: 5d:84:e5:a3:eb:d4:20:12:e5:8e:b8:fd:6e:f7:f2: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:23:1A:12:DA:30:1B:01:C9:59:77:CC:0F:5E:83:82:15:2E:32:FC X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:84:55:cc:9a:3f:ba:c2:e9:03:e7:2d:e7:18:ff:bd:1c:05: 36:40:50:3c:d0:07:5b:61:4c:bc:b9:f8:16:d5:c5:d3:4e:07: 5b:91:67:94:84:7c:4f:10:6b:1c:81:f7:46:9c:2b:20:85:64: aa:27:dc:3c:fb:79:ba:1c:04:63:d3:4b:92:83:53:98:cb:82: de:57:56:6d:55:43:69:7d:63:e0:72:e0:27:7f:1c:d3:cd:95: 4e:1b:38:cc:8c:b5:d5:5a:96:26:22:67:1b:3a:5d:cf:8d:cb: d4:dc:8f:5d:b4:59:9d:4a:01:7b:07:8f:41:4f:e6:dd:82:cc: 8a:52:3e:ca:3f:c4:0a:32:a7:91:04:3d:d2:0c:b6:83:84:5a: 06:9b:23:2a:85:11:f5:a0:da:97:e8:5d:cf:3e:67:a1:b7:f9: ed:79:4e:cf:1b:79:11:03:8e:9d:c6:d1:d5:35:1b:e3:31:87: c9:ed:76:5c:78:a5:e9:ed:51:8b:a1:b8:bc:f3:57:2e:be:04: 36:05:5f:a1:24:70:a6:e3:e1:c9:d2:cb:52:09:57:9d:ba:9c: 75:e8:ad:81:fb:22:e9:0e:a5:5c:d7:5a:11:69:b6:a9:48:20: e0:11:54:ca:79:82:cb:e0:9d:46:f6:2d:4e:15:6d:b6:c1:6a: 13:e1:f5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjQxMTIwMjE0MDUyWhcNMjQxMTI3MjE0MDUyWjAYMRYwFAYD VQQDEw02NzNlNTc2NC0zNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hNRUUAoRysut3Gar2UeK9Wof4T/uEGfM+wKI0kgorR1rE8Ccq8omrtur2ie Yhb39onEWsBHA5I7n60nXf1LBx9Zs6TzAvyt6jfBg7O98dwBjP5byZdn0XTzYntC g9qrOKpurQ+x6Ub2/dfLtx+C/qsbPLRxKFmBuP37TwNrK7I2dgxmvnP6rc8vhXnK IuJVgV+zEPVNA0vEfEcogo4nS9I+sghEfpR+CmYNdVSD3c+u04IuMM5B7KmqV5Pu k77FpMhSCwMq9bhzWr/MJArniEKUpUs9gDyTcZc32ruUSMZcYXIJ6/Qgv2S5Qpf/ Iv1dhOWj69QgEuWOuP1u9/KB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcjGhLa MBsByVl3zA9eg4IVLjL8MB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCshFXMmj+6wukD5y3nGP+9HAU2QFA80AdbYUy8ufgW1cXTTgdbkWeU hHxPEGscgfdGnCsghWSqJ9w8+3m6HARj00uSg1OYy4LeV1ZtVUNpfWPgcuAnfxzT zZVOGzjMjLXVWpYmImcbOl3PjcvU3I9dtFmdSgF7B49BT+bdgsyKUj7KP8QKMqeR BD3SDLaDhFoGmyMqhRH1oNqX6F3PPmeht/nteU7PG3kRA46dxtHVNRvjMYfJ7XZc eKXp7VGLobi881cuvgQ2BV+hJHCm4+HJ0stSCVedupx16K2B+yLpDqVc11oRabap SCDgEVTKeYLL4J1G9i1OFW22wWoT4fVo -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:45 2024 by rpki-client on console-fra.rpki-client.org