$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft File: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json) Hash identifier: m25OcB9Nwmy47jb7bvh525klPh9n+NISet7d0t6tRP8= Subject key identifier: E4:FE:87:66:13:75:2D:20:78:4C:DB:D0:9E:A0:F3:CD:FF:C2:DF:D3 Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft Manifest number: 0D36 Signing time: Thu 02 May 2024 18:44:19 +0000 Manifest this update: Thu 02 May 2024 18:44:18 +0000 Manifest next update: Thu 09 May 2024 18:44:18 +0000 Files and hashes: 1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: CH2iLTsxmpIDWn4QbhPUkXytYYyZqLaPC/9cGEjVXsM=) 2: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: 15crmq3nVNNj/aBK0J4PIqUDbAK0LDbctTwSm1bZbZE=) 3: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: Mwq4A/0K0OgGN7Me/2e3FBJJw/YLwnjP4Lug5N5AM54=) 4: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: LGS1S+OAS8Sv4RnG1YQo0XRLmvr4cfSylOTBxswQTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B Validity Not Before: May 2 18:44:18 2024 GMT Not After : May 9 18:44:18 2024 GMT Subject: CN=6633df02-d3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:e0:02:b5:a5:b6:ba:d9:29:cc:dc:82:a2: ee:f0:e5:5e:1b:ac:e8:ef:6d:a7:5f:46:23:e7:c9: ad:e1:d6:b9:7e:55:3f:d8:b4:b4:9b:98:ce:98:10: 64:3f:f5:9f:13:b7:ba:0b:d9:fa:eb:34:61:9b:6e: 46:3b:b5:3a:88:c7:a3:ab:55:e0:47:0e:37:47:83: 51:db:b8:fd:a1:a4:2e:82:ec:fb:1b:cf:ad:b4:7e: fa:f7:e5:35:ff:7c:8b:4e:82:fe:b9:2a:a1:5e:45: f8:5d:5c:07:b9:98:e1:78:d8:35:c6:23:c3:4e:f1: e0:b1:c2:f9:4f:42:18:b7:50:96:1e:7d:89:69:2b: 29:b0:56:ff:68:1e:60:5c:4b:43:32:c3:f8:a5:75: 5a:26:5f:21:78:4b:63:31:31:84:73:54:93:82:a4: ae:48:a4:70:b6:cf:ec:e5:f3:85:fb:6c:b0:f4:5f: 6e:1f:30:60:39:44:3a:6b:95:b5:ee:3b:db:e7:3a: 4e:0f:db:7e:ab:27:35:0e:d8:63:22:22:3b:2d:b9: 12:1b:c0:51:a0:d3:1b:48:6e:2b:cd:e2:86:6f:c4: f3:e2:02:62:89:08:4b:e0:4e:bd:14:e1:20:07:5f: 10:cf:00:40:5a:64:9a:d9:70:f1:c4:6d:92:e6:cb: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:87:66:13:75:2D:20:78:4C:DB:D0:9E:A0:F3:CD:FF:C2:DF:D3 X509v3 Authority Key Identifier: keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:73:85:83:5f:52:c1:8f:41:b9:d3:c8:85:52:85:cc:3d:5a: 6f:09:0e:35:7c:5b:57:20:8f:5b:10:17:e1:96:43:08:7c:c5: df:eb:6b:11:3b:80:52:96:e9:30:45:b6:55:5e:58:f4:cb:c0: 44:c4:bc:4a:2a:f1:79:06:9d:0d:5c:aa:a6:d6:9d:ff:8a:b9: 3d:30:8b:32:8d:4f:00:41:c0:1f:c6:5f:21:25:8c:44:a3:97: ef:57:f6:fd:3c:9b:04:a0:4d:6f:5a:3c:50:4f:76:00:89:80: ef:20:b6:78:67:1a:b5:e2:0e:e7:01:54:92:ac:a8:99:41:39: 1d:d7:68:0c:5e:94:cb:0b:ca:90:33:00:e0:19:48:9e:40:0b: 40:e9:ad:27:9a:48:9b:23:32:8a:23:09:94:f3:e6:9a:4d:4c: 6a:47:96:ee:de:c1:53:33:6a:de:4b:13:cc:6b:00:79:5c:68: a1:b5:b5:37:fa:3c:bc:c6:3b:e4:1f:61:d7:ab:db:a1:8c:f4: fb:84:aa:62:2a:d1:dd:6b:70:6a:b6:e6:cd:0b:7d:03:a2:8a: bb:0f:76:30:fd:a1:e2:72:1a:e1:63:f1:f9:14:96:83:ea:9d: 39:87:c4:ff:46:3e:7f:d0:12:fd:bc:ac:a0:ab:9e:a3:6b:c0: ff:44:cf:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMxNTMxMTAvBgNVBAUTKDQ4QzI3RkZGQjY0MjQ3MTJGQzZGQzYyODcxRDUzNkM1 MzFGRUYxOUIwHhcNMjQwNTAyMTg0NDE4WhcNMjQwNTA5MTg0NDE4WjAYMRYwFAYD VQQDEw02NjMzZGYwMi1kM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa/gArWltrrZKczcgqLu8OVeG6zo722nX0Yj58mt4da5flU/2LS0m5jOmBBk P/WfE7e6C9n66zRhm25GO7U6iMejq1XgRw43R4NR27j9oaQuguz7G8+ttH769+U1 /3yLToL+uSqhXkX4XVwHuZjheNg1xiPDTvHgscL5T0IYt1CWHn2JaSspsFb/aB5g XEtDMsP4pXVaJl8heEtjMTGEc1STgqSuSKRwts/s5fOF+2yw9F9uHzBgOUQ6a5W1 7jvb5zpOD9t+qyc1DthjIiI7LbkSG8BRoNMbSG4rzeKGb8Tz4gJiiQhL4E69FOEg B18QzwBAWmSa2XDxxG2S5sviVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT+h2YT dS0geEzb0J6g883/wt/TMB8GA1UdIwQYMBaAFEjCf/+2QkcS/G/GKHHVNsUx/vGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzE1My84NjA3Nzk4MEFE QjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4TDhiOFlvY2RVMnhUSC04 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNSl9fN1pDUnhMOGI4WW9jZFUyeFRILThacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzE1My84NjA3Nzk4MEFEQjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4 TDhiOFlvY2RVMnhUSC04WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCc4WDX1LBj0G508iFUoXMPVpvCQ41fFtXII9bEBfhlkMIfMXf62sR O4BSlukwRbZVXlj0y8BExLxKKvF5Bp0NXKqm1p3/irk9MIsyjU8AQcAfxl8hJYxE o5fvV/b9PJsEoE1vWjxQT3YAiYDvILZ4Zxq14g7nAVSSrKiZQTkd12gMXpTLC8qQ MwDgGUieQAtA6a0nmkibIzKKIwmU8+aaTUxqR5bu3sFTM2reSxPMawB5XGihtbU3 +jy8xjvkH2HXq9uhjPT7hKpiKtHda3BqtubNC30Dooq7D3Yw/aHichrhY/H5FJaD 6p05h8T/Rj5/0BL9vKygq56ja8D/RM9a -----END CERTIFICATE-----Generated at Thu May 2 20:50:18 2024 by rpki-client on console-fra.rpki-client.org