$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: KcrjHwIVWUieVoJpMiUqBG2HxoyfuGloFm6dt3vFCag= Subject key identifier: 15:88:F3:2B:6D:08:DF:D0:00:77:EC:0B:70:A3:E7:4B:6E:98:6C:8D Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: 0125 Signing time: Sat 23 Nov 2024 02:54:33 +0000 Manifest this update: Sat 23 Nov 2024 02:54:32 +0000 Manifest next update: Sat 30 Nov 2024 02:54:32 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: 4v8E4qZzv+1PR9qA823RabZw/PQ+/jNCIzkFfW2k+Qg=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: XG0ognbrHuDFVvw75BGHMdtpiHu/beUvd7TsChbHkCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: Nov 23 02:54:32 2024 GMT Not After : Nov 30 02:54:32 2024 GMT Subject: CN=674143e9-c6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:a6:36:0e:cf:62:7f:77:ae:69:42:f9:17: 2c:e3:7c:11:a6:1e:b5:d6:b5:9b:30:0b:cf:29:04: 23:3e:58:0a:53:0e:85:4b:a7:2f:2d:b8:97:17:d3: 9e:ec:cb:b0:2a:85:4b:cf:d7:0b:01:15:7b:3f:88: e9:c9:db:1c:81:8c:ed:24:ef:d7:aa:54:85:bc:bf: 7a:73:91:b7:5c:71:43:ca:cf:c7:e4:71:14:66:c5: a2:df:c3:14:e9:51:26:26:57:3d:fd:b1:f6:9a:41: d4:72:a2:75:12:1a:e5:5d:29:34:6f:39:74:f9:76: d4:b9:aa:ad:65:8a:45:fe:ef:58:4b:15:85:d0:92: 02:87:d2:0d:8d:89:bc:b6:57:fc:23:de:29:8a:5c: 56:1e:5a:3a:ec:37:00:3a:83:e7:3c:e0:ab:a6:ff: fc:64:5b:1e:6f:52:f1:4d:90:04:2e:dc:d3:04:04: bc:28:0c:cf:0f:a5:96:d9:bf:0d:63:e7:81:f1:92: a8:2b:78:62:ce:70:cc:03:be:14:2b:46:93:d3:d1: 85:e7:46:96:3f:03:06:90:5f:4e:55:ed:6f:07:64: f8:dc:72:0c:3a:51:3a:47:a8:98:27:a1:82:83:82: a9:71:81:b3:26:1c:ec:9f:8e:5c:7f:61:29:6c:33: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:88:F3:2B:6D:08:DF:D0:00:77:EC:0B:70:A3:E7:4B:6E:98:6C:8D X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:98:56:f1:35:22:98:8d:b3:03:a4:1b:b5:29:48:eb:44:2a: af:15:2d:3a:04:21:a6:06:8a:9d:54:d7:6c:06:d5:be:ed:58: b6:4b:a4:9d:78:26:f7:d7:76:37:30:82:3e:09:7e:2c:a3:5b: 89:8d:02:d9:47:16:84:84:a6:00:b9:f9:65:bc:3d:25:ea:62: 36:dd:3e:d8:ca:05:29:ba:13:db:63:07:1f:73:40:27:f8:f9: a5:1f:7f:0a:7b:c5:cd:c3:da:a4:54:40:a7:09:60:ff:a0:96: c0:87:d8:d5:5a:45:96:0e:24:31:5f:c6:f8:bf:5e:c4:74:79: 29:f4:c8:3a:12:77:bb:bb:96:b7:05:10:ff:ef:43:2f:76:50: 3c:d1:6b:43:7b:62:15:9f:e0:ae:b2:39:10:ff:17:a0:1b:93: 38:88:c7:b3:74:ad:c4:c8:e7:a9:73:e9:d0:78:ad:72:60:20: 94:a9:e6:a8:a4:8b:55:19:8b:db:ac:e2:7c:32:fd:31:77:88: 5b:64:81:9a:d6:7b:12:93:b5:c2:9d:b2:56:30:cb:7b:17:1d: 80:5d:1e:dd:4f:50:59:09:13:dc:8d:9e:e4:dd:23:e9:3d:93: 86:58:dd:13:01:1a:20:bb:98:30:a3:6b:06:e4:a7:bb:e1:e3: 23:7c:f9:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjQxMTIzMDI1NDMyWhcNMjQxMTMwMDI1NDMyWjAYMRYwFAYD VQQDEw02NzQxNDNlOS1jNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtICmNg7PYn93rmlC+Rcs43wRph611rWbMAvPKQQjPlgKUw6FS6cvLbiXF9Oe 7MuwKoVLz9cLARV7P4jpydscgYztJO/XqlSFvL96c5G3XHFDys/H5HEUZsWi38MU 6VEmJlc9/bH2mkHUcqJ1EhrlXSk0bzl0+XbUuaqtZYpF/u9YSxWF0JICh9INjYm8 tlf8I94pilxWHlo67DcAOoPnPOCrpv/8ZFseb1LxTZAELtzTBAS8KAzPD6WW2b8N Y+eB8ZKoK3hiznDMA74UK0aT09GF50aWPwMGkF9OVe1vB2T43HIMOlE6R6iYJ6GC g4KpcYGzJhzsn45cf2EpbDPEvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWI8ytt CN/QAHfsC3Cj50tumGyNMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWmFbxNSKYjbMDpBu1KUjrRCqvFS06BCGmBoqdVNdsBtW+7Vi2S6Sd eCb313Y3MII+CX4so1uJjQLZRxaEhKYAufllvD0l6mI23T7YygUpuhPbYwcfc0An +PmlH38Ke8XNw9qkVECnCWD/oJbAh9jVWkWWDiQxX8b4v17EdHkp9Mg6Ene7u5a3 BRD/70MvdlA80WtDe2IVn+CusjkQ/xegG5M4iMezdK3EyOepc+nQeK1yYCCUqeao pItVGYvbrOJ8Mv0xd4hbZIGa1nsSk7XCnbJWMMt7Fx2AXR7dT1BZCRPcjZ7k3SPp PZOGWN0TARogu5gwo2sG5Ke74eMjfPmU -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org