$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: ZkACCv7o4tPZaVKqZCYOeN/ivaJGM3hrKZ3YcREu7jc= Subject key identifier: 56:43:37:09:E0:87:E1:F3:4B:F2:31:52:31:9C:0A:73:C2:98:2D:07 Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: BE Signing time: Tue 07 May 2024 06:21:46 +0000 Manifest this update: Tue 07 May 2024 06:21:46 +0000 Manifest next update: Tue 14 May 2024 06:21:46 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: 0AKZUkmw1nt42Pg6t9BAM+HojPyMi/hxLpMK4IPF0fo=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: CoKnNc54/VeytMmktqv2kfN/WwlhB2L0E4UvZyRPfKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: May 7 06:21:46 2024 GMT Not After : May 14 06:21:46 2024 GMT Subject: CN=6639c87a-bdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:b0:9d:25:4a:60:93:48:8f:0b:04:62:9e: c5:7a:c5:cd:3c:9d:41:94:f0:4d:b9:fb:b1:15:a7: 41:51:66:83:2d:81:83:f1:9d:1e:53:7b:04:7f:fd: 87:c2:99:e2:a4:87:97:cd:8d:d5:78:fc:0d:19:9f: 7f:ea:63:91:a0:97:5c:da:63:35:9e:70:11:5d:5f: 52:01:b0:d2:0e:15:d6:d6:20:1e:98:fc:54:28:76: 86:e7:f9:b3:c1:38:84:91:a8:12:64:15:0e:fc:da: 15:fd:bb:60:e5:b6:f3:17:3c:98:71:c8:41:b4:ef: e7:c2:c9:ee:2e:57:43:df:ef:0f:72:82:cf:08:e5: bd:71:a4:6d:a0:2c:7b:77:c0:1e:58:53:92:99:b9: 20:3e:06:4c:65:4c:c3:86:0d:5e:bb:08:13:d2:59: f4:1a:21:3c:5a:f3:62:28:b2:59:4f:69:51:79:ac: d2:d0:5d:2c:c1:d6:51:c9:5c:e3:e0:49:de:4d:12: f8:70:b4:d8:c6:91:62:db:e2:e1:cb:40:a7:ad:44: 80:3c:e1:bf:1b:d4:93:4e:0c:fd:75:5c:da:d5:fc: c1:8b:78:8b:b5:70:f5:16:5a:13:fb:a7:9a:39:2b: 2c:b9:75:6a:d6:da:4f:9e:e9:ec:0f:35:03:d1:11: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:37:09:E0:87:E1:F3:4B:F2:31:52:31:9C:0A:73:C2:98:2D:07 X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8a:d0:b7:98:32:87:2f:28:c4:d8:04:a8:c5:21:4f:93:a9: 43:71:cd:7e:1e:b9:5b:22:af:0b:61:90:5f:74:ad:0c:10:7e: 35:16:8e:7d:c0:9c:dd:c3:24:3a:16:9a:68:96:d7:55:36:88: 75:8e:fd:26:9d:03:19:4d:70:93:2a:7f:de:39:ff:44:36:5f: 45:9d:0b:bc:c0:91:05:98:37:c9:95:05:bc:12:dd:7d:75:57: e9:09:2c:d7:cc:aa:22:27:1d:2c:ed:eb:b0:cc:be:b8:a3:29: b4:ac:04:f3:3d:2f:9b:28:e9:c2:d8:bf:13:36:b9:c8:26:85: 49:31:23:19:31:9a:6e:ee:73:ec:c9:5a:f7:54:cf:4b:ba:c9: 10:26:9a:0c:02:34:ff:bf:cb:cf:a8:61:9e:f3:45:5a:40:ff: 01:9d:0a:06:d0:0a:b9:96:b9:d4:8b:70:15:a9:8c:09:ec:dc: b9:95:b4:af:04:76:b8:9f:3e:43:c5:4c:95:bd:2d:6f:27:1b: 65:a9:87:1b:79:30:be:28:66:3f:84:e5:c0:d2:6f:b8:71:93: 3e:9a:a8:63:29:ae:d6:91:19:84:6b:e1:e7:52:5e:7d:55:0a: c0:bf:ab:94:8d:74:82:37:18:8f:76:93:b6:7b:d3:70:0b:95: d8:64:82:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjQwNTA3MDYyMTQ2WhcNMjQwNTE0MDYyMTQ2WjAYMRYwFAYD VQQDEw02NjM5Yzg3YS1iZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweCwnSVKYJNIjwsEYp7FesXNPJ1BlPBNufuxFadBUWaDLYGD8Z0eU3sEf/2H wpnipIeXzY3VePwNGZ9/6mORoJdc2mM1nnARXV9SAbDSDhXW1iAemPxUKHaG5/mz wTiEkagSZBUO/NoV/btg5bbzFzyYcchBtO/nwsnuLldD3+8PcoLPCOW9caRtoCx7 d8AeWFOSmbkgPgZMZUzDhg1euwgT0ln0GiE8WvNiKLJZT2lReazS0F0swdZRyVzj 4EneTRL4cLTYxpFi2+Lhy0CnrUSAPOG/G9STTgz9dVza1fzBi3iLtXD1FloT+6ea OSssuXVq1tpPnunsDzUD0RHFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZDNwng h+HzS/IxUjGcCnPCmC0HMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRitC3mDKHLyjE2ASoxSFPk6lDcc1+HrlbIq8LYZBfdK0MEH41Fo59 wJzdwyQ6FppoltdVNoh1jv0mnQMZTXCTKn/eOf9ENl9FnQu8wJEFmDfJlQW8Et19 dVfpCSzXzKoiJx0s7euwzL64oym0rATzPS+bKOnC2L8TNrnIJoVJMSMZMZpu7nPs yVr3VM9LuskQJpoMAjT/v8vPqGGe80VaQP8BnQoG0Aq5lrnUi3AVqYwJ7Ny5lbSv BHa4nz5DxUyVvS1vJxtlqYcbeTC+KGY/hOXA0m+4cZM+mqhjKa7WkRmEa+HnUl59 VQrAv6uUjXSCNxiPdpO2e9NwC5XYZIIL -----END CERTIFICATE-----Generated at Tue May 7 07:01:21 2024 by rpki-client on console-fra.rpki-client.org