$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: reMjoAitJekJkV/gLltLBmYPTEfxywS1eKV+HTKP0hU= Subject key identifier: 31:54:C0:40:C9:2C:99:22:E0:B2:F2:11:8F:05:99:94:D4:4C:19:8D Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 03D0 Signing time: Sat 01 Jun 2024 03:28:57 +0000 Manifest this update: Sat 01 Jun 2024 03:28:56 +0000 Manifest next update: Sat 08 Jun 2024 03:28:56 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: /bE5hSvKEzcsQVmzYo4LxIKJjnN3l++eMzoaLBiZkz0=) 2: 3DDAFD5EA2B811ED8FED0B6EC4F9AE02.roa (hash: itkg46kHl4+jUEx99hCfUiMMAkbk0/z6DJEUosAyuao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Jun 1 03:28:56 2024 GMT Not After : Jun 8 03:28:56 2024 GMT Subject: CN=665a9578-cdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:fa:7f:7c:4d:21:3d:f9:50:2f:8d:98:4f: b4:8a:a9:ef:9c:23:a8:a6:b1:e0:89:41:6a:e3:75: ba:55:bd:6e:28:a0:52:ee:94:7f:e0:32:06:fe:f6: d0:d9:3e:0e:17:7d:f5:cb:af:73:c0:10:51:ac:54: 5d:aa:23:14:eb:ed:35:2f:60:28:1c:ef:6f:37:57: 2e:8c:00:b7:0d:6a:0b:e3:5d:27:b0:e7:2e:4b:04: bb:91:2e:13:78:1e:48:fa:9e:56:2c:1e:33:37:a4: 29:08:c9:58:3b:32:88:ea:06:24:86:a0:b9:05:e5: 5c:71:fa:c0:ff:42:1f:59:4a:d8:1c:d1:26:07:a7: 63:56:cc:91:02:e0:b7:d7:b5:f1:40:56:cc:e4:bd: e7:98:b0:68:f2:9f:91:fd:54:11:17:35:d4:6b:7f: e4:fc:df:80:bb:74:90:e0:8e:ad:4d:e2:ee:05:95: 4a:a0:d8:97:7c:26:55:c1:ae:31:e2:4c:94:8e:b2: ff:bf:af:e7:12:b8:bd:d1:52:54:dd:e0:68:7f:6a: e2:c7:36:c6:1a:8a:dc:1d:f1:9a:e6:7f:ec:f9:a5: 94:a7:1a:72:21:a7:44:2b:5c:7b:9c:22:70:af:e2: f7:38:72:36:59:d3:8e:02:3f:9c:2f:60:10:70:9c: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:54:C0:40:C9:2C:99:22:E0:B2:F2:11:8F:05:99:94:D4:4C:19:8D X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8f:f9:db:22:a5:a2:e7:c9:0f:f4:b6:40:c6:c8:d3:66:dc: d3:01:6a:15:cf:7d:e3:7e:be:2f:7d:50:f3:cb:a8:a8:ba:e4: 71:0b:44:ef:cf:2d:3e:4a:ef:77:4b:a9:d7:b3:6b:6d:c6:96: 73:00:08:95:4c:68:a3:7b:e0:fb:ce:c5:8d:cc:07:6b:01:57: 0e:12:db:4f:8c:03:63:6c:e5:0d:f3:60:83:9c:15:d0:4d:6e: a6:ab:24:15:e2:c8:78:16:33:dc:05:39:cb:d2:ba:ad:1b:94: 80:7e:62:9a:85:88:d1:b2:8c:51:76:c8:26:4c:b8:c6:e8:c4: 4b:6c:91:7f:e8:90:25:db:31:7f:2d:cf:0d:81:b4:77:63:c3: bb:96:92:7a:57:db:91:b3:e3:bf:44:75:8b:da:39:60:57:83: d3:ad:14:46:cb:df:77:bc:7d:dc:f2:21:c2:d3:e1:d4:55:78: bd:88:93:30:fc:78:77:6d:ff:57:9a:95:5c:88:65:63:9a:de: 64:61:ed:1a:01:31:4f:00:06:94:51:02:bd:80:9c:59:16:9d: 58:78:ed:29:5b:4f:d8:63:3a:54:07:44:2b:63:d4:bc:40:e7: 2d:aa:a1:a3:80:78:27:66:37:d3:f8:05:72:ac:ee:9e:8b:1c: 81:df:e3:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjQwNjAxMDMyODU2WhcNMjQwNjA4MDMyODU2WjAYMRYwFAYD VQQDEw02NjVhOTU3OC1jZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWj6f3xNIT35UC+NmE+0iqnvnCOoprHgiUFq43W6Vb1uKKBS7pR/4DIG/vbQ 2T4OF331y69zwBBRrFRdqiMU6+01L2AoHO9vN1cujAC3DWoL410nsOcuSwS7kS4T eB5I+p5WLB4zN6QpCMlYOzKI6gYkhqC5BeVccfrA/0IfWUrYHNEmB6djVsyRAuC3 17XxQFbM5L3nmLBo8p+R/VQRFzXUa3/k/N+Au3SQ4I6tTeLuBZVKoNiXfCZVwa4x 4kyUjrL/v6/nEri90VJU3eBof2rixzbGGorcHfGa5n/s+aWUpxpyIadEK1x7nCJw r+L3OHI2WdOOAj+cL2AQcJyjgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFUwEDJ LJki4LLyEY8FmZTUTBmNMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbj/nbIqWi58kP9LZAxsjTZtzTAWoVz33jfr4vfVDzy6iouuRxC0Tv zy0+Su93S6nXs2ttxpZzAAiVTGije+D7zsWNzAdrAVcOEttPjANjbOUN82CDnBXQ TW6mqyQV4sh4FjPcBTnL0rqtG5SAfmKahYjRsoxRdsgmTLjG6MRLbJF/6JAl2zF/ Lc8NgbR3Y8O7lpJ6V9uRs+O/RHWL2jlgV4PTrRRGy993vH3c8iHC0+HUVXi9iJMw /Hh3bf9XmpVciGVjmt5kYe0aATFPAAaUUQK9gJxZFp1YeO0pW0/YYzpUB0QrY9S8 QOctqqGjgHgnZjfT+AVyrO6eixyB3+Ps -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:14 2024 by rpki-client on console-ams.rpki-client.org