$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: LesehgLw1VxGUk5tzwlPL+uQXmFSaFtCdOJOq342EVg= Subject key identifier: EC:85:1B:85:50:89:73:B8:42:DD:D9:F4:64:A6:83:55:C4:77:77:57 Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: C4 Signing time: Sun 19 May 2024 06:19:10 +0000 Manifest this update: Sun 19 May 2024 06:19:10 +0000 Manifest next update: Sun 26 May 2024 06:19:10 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: fomCwlMBXvBPuSgWDfeqJriq0snbEPXmhuLSrBYTDVY=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: CoKnNc54/VeytMmktqv2kfN/WwlhB2L0E4UvZyRPfKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: May 19 06:19:10 2024 GMT Not After : May 26 06:19:10 2024 GMT Subject: CN=664999de-a0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:48:67:19:06:e9:71:82:2d:5a:5e:a5:0f: f5:0e:9a:d3:e0:e3:e1:85:96:03:e8:3a:18:fd:35: f5:98:a7:48:cf:5c:34:5b:80:bc:0c:67:32:8d:18: 65:cf:26:88:8e:7f:b7:0f:5b:5d:a1:e0:a2:26:8f: df:7e:a0:84:66:9d:52:bf:ba:e1:a5:d7:ab:7f:0f: 4a:5c:72:9f:24:4b:54:1b:1b:32:ea:51:37:35:2b: 1f:c8:c1:18:12:cc:c6:54:b4:75:13:9e:ca:74:b5: 57:ac:94:42:ae:ec:1e:df:84:8a:3e:cd:79:ae:0d: c3:03:a9:96:30:0a:48:75:0a:d6:0e:51:e3:52:e9: 87:a3:db:67:33:7c:23:25:20:37:de:7d:da:e7:d6: 7a:47:bb:82:40:0c:53:9f:94:75:d8:4e:0d:01:0f: 10:4a:aa:d8:19:ad:3b:59:7a:4b:96:f8:c2:48:0d: e0:6c:30:0f:6f:d6:fe:8c:f6:1f:e0:3c:1f:1b:91: 84:20:65:e7:0a:e7:8f:c8:96:5c:da:d2:b7:3f:39: 64:64:ea:ef:00:33:34:06:eb:b0:85:77:a9:36:56: 18:42:21:4f:43:01:f8:85:4c:18:61:0d:4e:37:a9: 45:b3:fa:14:19:3e:8b:32:73:8f:ce:d9:f1:ff:38: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:85:1B:85:50:89:73:B8:42:DD:D9:F4:64:A6:83:55:C4:77:77:57 X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f2:13:44:a0:a3:05:4c:aa:a9:38:04:51:21:51:c9:bf:d6: cd:cf:f2:48:85:c9:7a:ca:fc:8a:c6:99:78:10:b1:7b:fb:b7: b3:1e:97:37:52:ea:3c:0e:da:6c:70:af:d5:2c:cf:39:86:f0: 1b:49:f0:df:bf:5a:2f:16:1c:b3:e7:64:ee:84:52:97:9f:d9: de:62:5d:d7:c9:1d:3e:85:4e:1e:ba:42:12:62:54:d9:df:26: 4b:76:03:12:69:bf:c5:23:cd:dd:a0:4c:4b:24:74:ad:1c:1c: e3:64:47:25:6c:81:2e:d0:76:e0:41:36:65:22:cb:e6:d8:c9: 7f:7c:6f:db:58:c9:e0:8a:ad:ce:d9:6e:f0:f1:33:ab:0b:7e: 10:df:a4:32:55:24:56:38:ce:12:00:3f:15:6e:9a:5a:4c:49: 35:12:cf:f7:08:56:b2:97:9a:11:84:d0:9e:d0:ae:17:2e:44: 4b:c2:a5:ab:e2:16:5a:3a:7d:23:b5:a2:44:1c:b5:ff:62:02: ba:ce:bf:5f:ab:ac:32:44:e7:94:83:67:01:12:dd:3e:da:2a: 63:d9:74:47:1a:af:ff:e8:3f:a2:7c:3b:b5:d7:ae:24:a2:c4: f9:f7:fa:b1:98:09:3d:8a:45:4b:a6:e7:0d:98:f7:a2:ff:bb: c1:42:5a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjQwNTE5MDYxOTEwWhcNMjQwNTI2MDYxOTEwWjAYMRYwFAYD VQQDEw02NjQ5OTlkZS1hMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzZIZxkG6XGCLVpepQ/1DprT4OPhhZYD6DoY/TX1mKdIz1w0W4C8DGcyjRhl zyaIjn+3D1tdoeCiJo/ffqCEZp1Sv7rhpderfw9KXHKfJEtUGxsy6lE3NSsfyMEY EszGVLR1E57KdLVXrJRCruwe34SKPs15rg3DA6mWMApIdQrWDlHjUumHo9tnM3wj JSA33n3a59Z6R7uCQAxTn5R12E4NAQ8QSqrYGa07WXpLlvjCSA3gbDAPb9b+jPYf 4DwfG5GEIGXnCuePyJZc2tK3PzlkZOrvADM0BuuwhXepNlYYQiFPQwH4hUwYYQ1O N6lFs/oUGT6LMnOPztnx/zgFUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyFG4VQ iXO4Qt3Z9GSmg1XEd3dXMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT8hNEoKMFTKqpOARRIVHJv9bNz/JIhcl6yvyKxpl4ELF7+7ezHpc3 Uuo8DtpscK/VLM85hvAbSfDfv1ovFhyz52TuhFKXn9neYl3XyR0+hU4eukISYlTZ 3yZLdgMSab/FI83doExLJHStHBzjZEclbIEu0HbgQTZlIsvm2Ml/fG/bWMngiq3O 2W7w8TOrC34Q36QyVSRWOM4SAD8VbppaTEk1Es/3CFayl5oRhNCe0K4XLkRLwqWr 4hZaOn0jtaJEHLX/YgK6zr9fq6wyROeUg2cBEt0+2ipj2XRHGq//6D+ifDu1164k osT59/qxmAk9ikVLpucNmPei/7vBQlq8 -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org