$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: mXj4cRR2uD+YJWS71C66enVscVvqbJWLLBv4o2rKwK4= Subject key identifier: C9:6E:B8:0C:95:39:B7:AB:0D:D8:A2:66:65:89:C8:16:46:AA:25:9C Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 0695 Signing time: Tue 30 Apr 2024 23:54:47 +0000 Manifest this update: Tue 30 Apr 2024 23:54:47 +0000 Manifest next update: Tue 07 May 2024 23:54:47 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: WltohLWV7lVTiJMJpc8LQJz8t1eAuSVSvA2uplJjAN0=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: ZbXoPDNwwN43S46joX0bgDKRbx5TOpa5VuxWwX3a8DM=) 3: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: poFmJ0FtSdjknkvhbTPMxSLNtd422YdP9YDzIcZoH4g=) 4: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: VhPZ3Dze/+8PJDx8/8yHKIFT6fKdLh/CUt60a+sweXw=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: 7HNUvZFAwQ7Cd0I9COINEjh6qWhul5DciDiZ3SRlNVc=) 6: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: bUSE0gUZMQuQSO65Czv3NWH/el/tbBx+Kis8SIWiAkc=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: QPx3/rmNUFkb/EoTXS7rHyvmcwb2sc1WP5ySio1N2pw=) 8: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: iU+dm7+nLQRZzFMHQxkAgltXoZ5D3RNCl5X3OGdssIA=) 9: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: YVWTCiNnBwXTmSWz0wXkWBYArWlOINqNCodDvC44VN8=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: 2oKhfzZJX1bMpFhHSdvZyq1vJEYqTdqIY/bPIqbUw8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Apr 30 23:54:47 2024 GMT Not After : May 7 23:54:47 2024 GMT Subject: CN=663184c7-a042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ae:52:ac:d9:fa:68:3c:a6:bf:05:93:11:2d: 22:7c:fe:42:81:ef:14:33:8f:78:a6:aa:bd:37:5b: fe:a6:9c:69:a2:e3:3b:cd:4a:47:9f:13:5f:23:50: bd:ab:72:d6:15:d8:09:c5:05:78:fd:54:0e:8e:b2: 47:8f:9e:aa:8c:22:66:b7:d2:b6:aa:cb:6d:09:a0: 4e:4c:dd:49:b4:f6:f6:fe:5a:28:58:ea:b8:8e:ea: 3b:84:06:54:db:38:aa:b0:fa:c3:dc:df:fd:3c:d2: 53:61:9e:f9:f9:ae:71:d3:32:84:4f:ea:f7:e4:76: b3:13:1b:a8:57:9b:4c:ec:0c:ba:f8:90:d0:6c:32: 18:de:71:b7:37:b4:c0:9b:85:54:4f:2a:bb:f3:0e: 3c:25:06:ed:7a:b3:62:e6:f8:1b:3c:e0:40:dc:a9: bb:fb:68:42:55:a1:d6:f9:ec:35:b1:61:01:ad:d4: fc:38:fe:3f:8c:37:0f:7c:89:52:fc:57:bf:08:52: 00:07:4e:22:79:e2:ff:78:b1:c2:56:c6:62:03:52: c9:06:e9:e1:a8:6f:9d:9e:fc:c0:d5:12:ef:25:3d: 4c:29:aa:75:36:63:3c:10:2a:6c:2e:c9:33:a5:0d: 7d:89:0b:0e:5b:58:fb:22:96:99:58:51:2b:c2:cb: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:B8:0C:95:39:B7:AB:0D:D8:A2:66:65:89:C8:16:46:AA:25:9C X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:0b:41:d1:91:f3:83:d1:b0:31:65:c8:57:14:fb:ff:6e: 57:66:72:bc:cd:8b:59:47:7d:07:81:11:7c:a3:5d:23:1e:1f: f0:07:0d:fb:00:8c:7d:ed:0a:0d:c9:18:8c:2f:34:1b:5b:d2: ce:fa:7d:81:71:74:f8:54:c8:bc:68:28:cb:e0:0f:93:47:f8: a5:ad:33:0b:1e:75:63:a6:75:a8:da:33:3c:08:f4:59:e4:f8: 72:35:e5:5d:d9:d7:10:e4:39:81:ae:37:f2:30:32:3e:11:ac: 75:79:5b:11:53:75:b1:ad:e1:27:88:e7:d7:9b:fa:5e:18:4e: 82:4e:87:65:ed:7a:72:36:3e:36:c0:4e:5a:00:b4:90:8b:ec: ff:d6:1b:e3:dd:44:4c:e1:e8:68:ca:94:af:5a:19:75:41:69: b2:20:53:7f:dc:79:da:10:6e:09:16:04:a2:9f:02:8a:17:eb: 77:bd:6a:69:99:f1:8b:f4:34:87:93:f3:98:1c:65:43:bd:3b: ff:62:fb:0a:b5:42:66:b3:70:ce:83:38:2d:12:a9:52:6d:e4: 0f:a6:df:bc:1b:fb:78:0d:7a:73:ea:ca:fb:89:e3:ae:9d:83: 07:fc:6a:d1:02:52:63:ad:07:f8:ef:4b:3a:3b:4f:d6:2c:eb: 5b:dd:ba:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjQwNDMwMjM1NDQ3WhcNMjQwNTA3MjM1NDQ3WjAYMRYwFAYD VQQDEw02NjMxODRjNy1hMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7q5SrNn6aDymvwWTES0ifP5Cge8UM494pqq9N1v+ppxpouM7zUpHnxNfI1C9 q3LWFdgJxQV4/VQOjrJHj56qjCJmt9K2qsttCaBOTN1JtPb2/looWOq4juo7hAZU 2ziqsPrD3N/9PNJTYZ75+a5x0zKET+r35HazExuoV5tM7Ay6+JDQbDIY3nG3N7TA m4VUTyq78w48JQbterNi5vgbPOBA3Km7+2hCVaHW+ew1sWEBrdT8OP4/jDcPfIlS /Fe/CFIAB04ieeL/eLHCVsZiA1LJBunhqG+dnvzA1RLvJT1MKap1NmM8ECpsLskz pQ19iQsOW1j7IpaZWFErwsv03wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMluuAyV OberDdiiZmWJyBZGqiWcMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKugtB0ZHzg9GwMWXIVxT7/25XZnK8zYtZR30HgRF8o10jHh/wBw37 AIx97QoNyRiMLzQbW9LO+n2BcXT4VMi8aCjL4A+TR/ilrTMLHnVjpnWo2jM8CPRZ 5PhyNeVd2dcQ5DmBrjfyMDI+Eax1eVsRU3WxreEniOfXm/peGE6CTodl7XpyNj42 wE5aALSQi+z/1hvj3URM4ehoypSvWhl1QWmyIFN/3HnaEG4JFgSinwKKF+t3vWpp mfGL9DSHk/OYHGVDvTv/YvsKtUJms3DOgzgtEqlSbeQPpt+8G/t4DXpz6sr7ieOu nYMH/GrRAlJjrQf470s6O0/WLOtb3bpk -----END CERTIFICATE-----Generated at Wed May 1 00:24:01 2024 by rpki-client on console-fra.rpki-client.org