$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json) Hash identifier: p8ccpAlsk2WsNEDM+eGF7x2D1Nn+6acHqCAGlADiBcs= Subject key identifier: 6F:09:89:F4:5E:A1:AC:A2:55:65:AF:A8:C4:3B:57:32:76:6A:BE:67 Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft Manifest number: 0200 Signing time: Sun 05 May 2024 04:18:43 +0000 Manifest this update: Sun 05 May 2024 04:18:43 +0000 Manifest next update: Sun 12 May 2024 04:18:43 +0000 Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: eehdeciM41fJ9G5xXs1oJLg5iBelma4A04iqO21U6Gc=) 2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: eAuiHz95OnsqMbafdwqxvw/kZ1YaOXM/w2y2Dchm1aU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Validity Not Before: May 5 04:18:43 2024 GMT Not After : May 12 04:18:43 2024 GMT Subject: CN=663708a3-24cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:20:dc:28:0f:21:49:52:93:10:a3:fd:3a:63: 51:73:f0:53:00:ad:a0:99:37:7e:54:d7:34:d4:ee: da:6a:47:6a:a7:6f:24:60:d5:28:8e:68:28:bf:d5: 9c:54:97:8d:55:1b:2a:a3:ff:b2:2e:4a:b4:54:33: d8:27:71:b0:5e:42:a6:5c:ee:ec:6b:5d:8c:d2:85: d7:14:09:7d:c6:cd:c0:23:8e:59:9d:43:62:89:57: 2f:91:93:5d:1b:03:1e:dc:87:f4:a1:0a:f3:d3:15: c9:c4:26:e3:25:eb:d8:21:51:71:55:85:5d:87:3e: 14:53:43:07:5f:5f:e5:03:c6:43:29:09:bf:9f:9e: a6:b8:ec:90:1b:fa:00:06:55:12:5e:ac:c5:a7:7c: c3:68:be:4c:92:e5:a0:fd:61:4e:c5:69:a2:eb:ad: af:4f:00:5e:eb:24:47:e3:66:0a:fb:a0:b6:ac:d8: 28:0f:41:99:46:8a:0b:1b:5c:27:c2:a4:7b:9b:53: ce:8f:ed:93:a5:c1:3b:b4:d9:b1:07:7d:11:45:c8: 6d:e7:f3:04:25:71:71:9a:32:3a:19:b2:4a:0d:e5: b6:b7:67:83:18:b8:6f:da:4b:7e:72:80:a1:ab:67: 82:6b:0b:bf:73:7c:f9:f1:cd:d6:76:84:21:71:cc: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:89:F4:5E:A1:AC:A2:55:65:AF:A8:C4:3B:57:32:76:6A:BE:67 X509v3 Authority Key Identifier: keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b9:8a:06:6a:8e:01:b6:8b:0f:0f:29:0a:42:3b:16:f7:52: 06:e7:2e:2c:de:26:2d:09:73:4f:fe:26:0f:a9:f4:30:a8:54: 5c:7b:dc:c8:f0:3b:4b:c3:0e:25:2b:17:b3:9e:05:03:51:c7: 62:23:d7:05:f2:04:a9:e4:01:0f:05:55:ce:55:27:a8:bb:dd: d0:03:df:bf:d3:d5:a4:e0:b5:79:94:e5:95:aa:1f:39:c2:96: b4:a9:58:47:1f:1b:1a:37:9a:4d:82:f8:e8:3f:71:e0:e0:e5: d3:77:80:cc:7c:7d:c6:e8:94:2f:06:74:28:c9:9f:a4:eb:cd: ae:b5:6e:ec:87:79:42:0e:7e:ec:9a:27:c2:d1:84:88:40:49: fd:b7:b6:ea:da:6b:af:70:a2:c1:72:1d:92:0e:d8:ce:1d:b1: 30:e9:b9:e4:b0:67:0a:a7:5f:4e:e2:db:8c:21:f6:9f:36:ab: 03:56:78:65:a1:90:b8:72:f1:2e:af:b4:3f:10:fa:ab:e5:20: 6a:7c:7a:6f:f1:28:06:b1:53:92:26:78:43:62:4b:4b:ab:82: e5:36:88:09:e7:cb:f0:cd:77:d1:d8:07:e0:33:44:30:f1:06: cf:93:7e:c1:e5:75:d7:14:f9:c7:57:09:17:a3:f0:5b:f7:ad: cf:44:99:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB OEIwNDY2RDUwHhcNMjQwNTA1MDQxODQzWhcNMjQwNTEyMDQxODQzWjAYMRYwFAYD VQQDEw02NjM3MDhhMy0yNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+SDcKA8hSVKTEKP9OmNRc/BTAK2gmTd+VNc01O7aakdqp28kYNUojmgov9Wc VJeNVRsqo/+yLkq0VDPYJ3GwXkKmXO7sa12M0oXXFAl9xs3AI45ZnUNiiVcvkZNd GwMe3If0oQrz0xXJxCbjJevYIVFxVYVdhz4UU0MHX1/lA8ZDKQm/n56muOyQG/oA BlUSXqzFp3zDaL5MkuWg/WFOxWmi662vTwBe6yRH42YK+6C2rNgoD0GZRooLG1wn wqR7m1POj+2TpcE7tNmxB30RRcht5/MEJXFxmjI6GbJKDeW2t2eDGLhv2kt+coCh q2eCawu/c3z58c3WdoQhccy8zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8JifRe oayiVWWvqMQ7VzJ2ar5nMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzE3NC9CMTMxRjg5Q0VFQ0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBn UHYxcl9lcnVKb3Fvc0VadFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfuYoGao4BtosPDykKQjsW91IG5y4s3iYtCXNP/iYPqfQwqFRce9zI 8DtLww4lKxezngUDUcdiI9cF8gSp5AEPBVXOVSeou93QA9+/09Wk4LV5lOWVqh85 wpa0qVhHHxsaN5pNgvjoP3Hg4OXTd4DMfH3G6JQvBnQoyZ+k682utW7sh3lCDn7s mifC0YSIQEn9t7bq2muvcKLBch2SDtjOHbEw6bnksGcKp19O4tuMIfafNqsDVnhl oZC4cvEur7Q/EPqr5SBqfHpv8SgGsVOSJnhDYktLq4LlNogJ58vwzXfR2AfgM0Qw 8QbPk37B5XXXFPnHVwkXo/Bb963PRJmf -----END CERTIFICATE-----Generated at Sun May 5 05:30:51 2024 by rpki-client on console-ams.rpki-client.org