$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: QMq6kfKc8x93Lx2QpWchxvS9tmmFRqYO/exisAlGxbg= Subject key identifier: 94:89:F0:5A:84:6E:22:9D:75:25:B6:D0:9D:F4:4C:13:49:E7:6B:8D Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 55 Signing time: Wed 15 May 2024 07:57:59 +0000 Manifest this update: Wed 15 May 2024 07:57:58 +0000 Manifest next update: Wed 22 May 2024 07:57:58 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: K5/W4QdOt04qvkSxBcfFmOgF0pAOUChKuCFbs6y8SyY=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: JewwegL8zF4TM37jWjT/0vufl48ueupuuJhXef1EC1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: May 15 07:57:58 2024 GMT Not After : May 22 07:57:58 2024 GMT Subject: CN=66446b06-ed50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1c:ad:cf:13:14:a3:21:e9:4d:d6:2e:7f:f4: e7:f1:db:39:d9:ab:4f:7f:bf:74:8b:99:f7:b9:7e: 83:0e:6b:aa:87:12:4f:96:65:31:46:da:20:5c:a0: 1c:a9:07:9e:e6:0c:23:fd:d2:f1:c3:51:fc:a1:74: 2a:fa:49:4a:4f:03:a5:3b:b1:eb:75:c7:b9:96:f5: 30:b3:c8:76:7c:15:a8:27:2b:6d:5f:34:c9:a2:b1: ff:e5:3a:11:ae:cb:f3:06:db:54:5d:27:22:3c:e7: 56:70:f4:3a:9b:61:48:db:1b:0c:3c:33:c3:bf:35: b0:5f:9f:5a:91:b6:f8:72:4d:2d:19:7a:2a:34:91: 1d:f8:ed:e2:98:7a:f8:fb:87:74:f5:1e:77:6a:bc: 73:83:4c:fb:b2:e4:06:0c:f3:94:0c:83:dd:48:4d: 2e:74:76:28:4c:46:9b:1c:69:3b:c0:4b:53:ef:b0: 10:14:fc:4c:fc:79:c2:86:45:7b:8f:20:de:13:e2: e4:4d:91:56:b9:a0:36:f2:17:99:ce:f9:11:d0:3d: ca:46:f4:48:f7:b3:16:4d:fd:f8:78:6f:1b:a2:54: ee:42:20:66:17:d3:14:1c:3c:d3:75:6f:f9:ff:7d: 0b:b6:64:fd:62:bc:72:e3:fb:2a:67:3f:09:52:0e: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:89:F0:5A:84:6E:22:9D:75:25:B6:D0:9D:F4:4C:13:49:E7:6B:8D X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:29:89:68:e8:b0:8a:ef:71:7c:db:d3:e5:bb:96:a0:e2:da: 8e:cb:58:0f:3f:2e:78:98:2a:0d:da:ef:14:81:a0:40:2b:b7: bd:3a:b5:5f:2f:a1:9a:54:73:a7:af:ce:cd:dc:35:54:69:5a: e7:7b:51:dc:78:89:ac:42:35:f5:1d:8f:e9:f8:3d:ef:b1:fc: 03:46:16:26:01:11:52:1f:ae:53:e4:37:dc:67:5a:1f:e7:b5: e3:1c:95:38:7e:fc:5c:83:a4:6e:05:37:45:b8:de:07:a4:0d: e4:fc:c1:20:d5:74:13:a3:b7:81:c5:8d:bf:e7:9b:60:ab:0c: d3:01:f7:d5:6c:9f:66:96:e6:83:61:d6:5d:ab:ff:2e:30:15: 8b:57:8c:5b:49:a8:f9:95:db:c4:84:3e:ab:65:00:ff:be:6c: 58:42:50:82:62:ff:a8:e4:e3:0a:ba:9b:31:c0:01:32:19:f6: dc:92:d2:66:b4:cc:df:c1:11:4c:2d:3c:00:b1:2b:c9:61:8e: 93:5b:dd:91:ce:82:67:66:8f:42:95:c1:0a:8c:78:90:0e:6f: ac:b3:67:74:32:2c:a0:9c:83:86:1c:70:4f:79:d7:cb:cc:a1: d5:16:fe:f0:59:98:e5:1b:04:f1:65:72:ab:f2:a3:bf:3b:5e: 3f:0b:6d:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEM1MzExMC8GA1UEBRMoMEE0NUM1MEUzNzIzNUEyQUEyMjNFOUYzMTMzMUY2OTQy OEUwRDk0NjAeFw0yNDA1MTUwNzU3NThaFw0yNDA1MjIwNzU3NThaMBgxFjAUBgNV BAMTDTY2NDQ2YjA2LWVkNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcHK3PExSjIelN1i5/9Ofx2znZq09/v3SLmfe5foMOa6qHEk+WZTFG2iBcoByp B57mDCP90vHDUfyhdCr6SUpPA6U7set1x7mW9TCzyHZ8FagnK21fNMmisf/lOhGu y/MG21RdJyI851Zw9DqbYUjbGww8M8O/NbBfn1qRtvhyTS0Zeio0kR347eKYevj7 h3T1HndqvHODTPuy5AYM85QMg91ITS50dihMRpscaTvAS1PvsBAU/Ez8ecKGRXuP IN4T4uRNkVa5oDbyF5nO+RHQPcpG9Ej3sxZN/fh4bxuiVO5CIGYX0xQcPNN1b/n/ fQu2ZP1ivHLj+ypnPwlSDuvHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlInwWoRu Ip11JbbQnfRME0nna40wHwYDVR0jBBgwFoAUCkXFDjcjWiqiI+nzEzH2lCjg2UYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4QzUzL0VBNkVDRTBBOTM4 MTExRUVCRkNCRkYyNEM0RjlBRTAyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2tYRkRqY2pXaXFpSS1uekV6SDJsQ2pnMlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 QzUzL0VBNkVDRTBBOTM4MTExRUVCRkNCRkYyNEM0RjlBRTAyL0NrWEZEamNqV2lx aUktbnpFekgybENqZzJVWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUpiWjosIrvcXzb0+W7lqDi2o7LWA8/LniYKg3a7xSBoEArt706tV8v oZpUc6evzs3cNVRpWud7Udx4iaxCNfUdj+n4Pe+x/ANGFiYBEVIfrlPkN9xnWh/n teMclTh+/FyDpG4FN0W43gekDeT8wSDVdBOjt4HFjb/nm2CrDNMB99Vsn2aW5oNh 1l2r/y4wFYtXjFtJqPmV28SEPqtlAP++bFhCUIJi/6jk4wq6mzHAATIZ9tyS0ma0 zN/BEUwtPACxK8lhjpNb3ZHOgmdmj0KVwQqMeJAOb6yzZ3QyLKCcg4YccE9518vM odUW/vBZmOUbBPFlcqvyo787Xj8LbQY= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org