$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: CpxWfOiI75KjDGjR4YHu+7o71vSEiWTyEIiifyVzZ3Y= Subject key identifier: 65:4E:52:87:3B:DF:C7:AF:D3:51:7C:17:32:BC:19:C9:69:F0:70:1D Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 0134 Signing time: Fri 17 May 2024 05:05:14 +0000 Manifest this update: Fri 17 May 2024 05:05:14 +0000 Manifest next update: Fri 24 May 2024 05:05:14 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: 99MvwZxkR2zur4wsYLRWCoX6RAazP3Tu+71QEoFFqHA=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: B0B4rBaB7RDR5K24splQuuNnMljYu/PH9jfvEV4r1Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: May 17 05:05:14 2024 GMT Not After : May 24 05:05:14 2024 GMT Subject: CN=6646e58a-7629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:3f:4d:01:4c:02:9a:62:36:5a:e8:57:46: b2:e2:c2:bd:f7:bb:79:a2:01:58:9d:20:33:2b:0e: 03:70:1c:ef:f7:e9:69:0a:7b:62:f8:be:aa:f0:aa: 3c:bf:66:67:8c:62:eb:17:71:ac:a6:7d:e6:61:60: a5:74:e9:f9:9b:12:13:69:5a:a2:4b:3b:82:95:19: ff:24:75:bf:52:e7:59:85:5b:22:dd:94:9b:15:82: b2:8c:aa:30:74:a9:c6:4f:64:09:be:66:6c:b4:fe: 8f:88:61:a5:2d:93:64:ce:cd:e6:14:cf:94:41:d5: f0:60:12:d5:de:53:5a:4a:62:ab:45:4a:14:48:ff: c7:72:4b:5d:b1:d7:dc:79:df:b9:83:df:e0:70:4e: a4:59:12:0a:0c:2c:bb:40:8c:9a:de:cd:1f:0b:2e: 1d:4a:9c:48:56:f2:48:45:79:c6:87:74:00:00:ea: df:4c:03:01:51:b4:41:97:d6:be:a5:e9:82:6d:16: bb:05:de:67:8f:98:20:2d:74:64:fe:73:35:3b:5a: 92:33:0c:0e:a7:7b:cd:eb:e9:17:36:10:e1:cf:6d: c6:7c:eb:43:d8:dc:36:57:76:da:7d:2f:bb:17:ef: aa:2b:a5:c8:ad:e1:28:8c:5c:20:9c:21:fe:3d:ad: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:52:87:3B:DF:C7:AF:D3:51:7C:17:32:BC:19:C9:69:F0:70:1D X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:0e:70:9d:45:18:04:4c:4f:a0:65:50:f2:90:4d:5f:a5: 46:a6:b3:64:ee:07:38:fc:0a:2c:df:87:51:fb:e8:23:f2:38: d0:50:13:e8:8b:7b:c5:08:b2:64:25:f2:43:1c:27:d3:01:4e: 2d:48:1d:c1:f1:f2:b5:41:81:a1:24:b7:eb:15:14:db:3c:32: a9:eb:d4:14:3d:6c:fa:2b:63:db:a1:b8:e3:de:d6:c6:5e:48: 0f:69:5a:26:af:93:73:9f:ca:5d:9e:29:54:37:1f:f2:60:37: 13:05:86:92:01:44:f5:0d:f2:07:0b:49:5b:56:f1:97:1d:c8: 45:28:ba:f1:af:b8:11:b4:cc:0c:a3:6d:b9:59:e7:ed:6f:35: 35:37:0e:4b:66:4d:fe:a5:21:98:57:06:8b:f2:c6:ff:6c:f3: fd:11:58:1e:9e:40:2f:1f:10:09:b8:9d:3c:64:70:55:63:3c: cb:f4:61:37:c5:39:64:99:6c:86:2d:fb:8a:c3:5f:45:9f:8a: 66:c4:e0:ca:0f:60:4b:77:09:43:e2:2c:c7:22:a0:57:88:2f: a8:39:ba:4c:36:06:b5:fa:42:4b:fc:53:3f:30:94:1e:c5:a8: 68:79:69:64:5d:be:8e:e8:dd:76:59:3c:69:27:1f:0d:e5:44: a0:c0:30:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjQwNTE3MDUwNTE0WhcNMjQwNTI0MDUwNTE0WjAYMRYwFAYD VQQDEw02NjQ2ZTU4YS03NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJw/TQFMAppiNlroV0ay4sK997t5ogFYnSAzKw4DcBzv9+lpCnti+L6q8Ko8 v2ZnjGLrF3Gspn3mYWCldOn5mxITaVqiSzuClRn/JHW/UudZhVsi3ZSbFYKyjKow dKnGT2QJvmZstP6PiGGlLZNkzs3mFM+UQdXwYBLV3lNaSmKrRUoUSP/Hcktdsdfc ed+5g9/gcE6kWRIKDCy7QIya3s0fCy4dSpxIVvJIRXnGh3QAAOrfTAMBUbRBl9a+ pemCbRa7Bd5nj5ggLXRk/nM1O1qSMwwOp3vN6+kXNhDhz23GfOtD2Nw2V3bafS+7 F++qK6XIreEojFwgnCH+Pa3rXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVOUoc7 38ev01F8FzK8Gclp8HAdMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpoA5wnUUYBExPoGVQ8pBNX6VGprNk7gc4/Aos34dR++gj8jjQUBPo i3vFCLJkJfJDHCfTAU4tSB3B8fK1QYGhJLfrFRTbPDKp69QUPWz6K2Pbobjj3tbG XkgPaVomr5Nzn8pdnilUNx/yYDcTBYaSAUT1DfIHC0lbVvGXHchFKLrxr7gRtMwM o225WeftbzU1Nw5LZk3+pSGYVwaL8sb/bPP9EVgenkAvHxAJuJ08ZHBVYzzL9GE3 xTlkmWyGLfuKw19Fn4pmxODKD2BLdwlD4izHIqBXiC+oObpMNga1+kJL/FM/MJQe xahoeWlkXb6O6N12WTxpJx8N5USgwDD0 -----END CERTIFICATE-----Generated at Fri May 17 06:46:27 2024 by rpki-client on console-ams.rpki-client.org