$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: yp3CgRB/rRqoQi4hjUAETQhBV49XejjUjRzlTp+4R60= Subject key identifier: 1F:AF:0E:18:36:7E:92:AF:B4:3C:98:1E:F7:7E:7D:D3:59:FF:E5:07 Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 03C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 03BF Signing time: Sat 27 Apr 2024 02:23:26 +0000 Manifest this update: Sat 27 Apr 2024 02:23:26 +0000 Manifest next update: Sat 04 May 2024 02:23:25 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: SYyeKvV2/u/yVpu/BXvDipcx0QpOr9C6JTox/iGtGh0=) 2: 3DDAFD5EA2B811ED8FED0B6EC4F9AE02.roa (hash: itkg46kHl4+jUEx99hCfUiMMAkbk0/z6DJEUosAyuao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Apr 27 02:23:26 2024 GMT Not After : May 4 02:23:25 2024 GMT Subject: CN=662c619e-2fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ad:6a:ed:2c:5e:53:e5:0d:4d:4d:a2:42:fb: 7b:64:80:c6:77:bf:1e:b5:7f:c1:8d:64:17:5a:a6: 40:11:33:c4:30:9a:08:d5:33:cd:f9:4e:fc:6e:22: 91:b7:ab:4b:3f:63:bc:4a:37:85:e3:3a:98:06:a6: ec:46:4e:4b:67:3c:3a:82:93:48:c7:7c:c9:05:ac: 6c:bd:26:4d:4c:4b:75:8f:58:44:7c:47:3b:e6:0a: a6:ca:ec:14:ab:0f:1c:0b:0f:13:59:21:88:70:74: 30:3c:c9:e1:85:2e:f8:3f:69:f7:dd:3a:22:49:26: 53:28:07:a8:f4:fe:98:10:3d:ea:8d:35:91:3b:9b: 25:53:56:42:ab:e5:14:f8:82:58:aa:98:e9:04:3c: 44:60:71:ec:bc:f9:8d:b4:c3:4e:af:33:83:c2:d7: df:4c:c4:9b:e6:23:b7:b2:44:2d:75:9b:07:41:53: c6:76:82:dc:7c:e5:5a:13:11:cd:b4:18:da:b7:b1: 2c:96:db:0f:f2:b1:a2:82:0a:32:c9:a8:a9:e3:c2: 55:94:43:72:32:4b:93:89:f6:45:30:c0:7a:37:05: 48:b4:b4:9f:02:5a:ca:6c:66:7c:0e:af:de:82:f2: 61:05:9e:c5:e9:93:36:23:99:60:07:33:f3:2d:57: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:0E:18:36:7E:92:AF:B4:3C:98:1E:F7:7E:7D:D3:59:FF:E5:07 X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8e:19:23:a3:42:b9:d3:58:13:88:2a:19:73:59:01:9c:cd: a1:e7:67:62:b3:b3:04:0b:48:79:da:1a:32:2b:46:f9:d0:84: 26:4d:87:8c:70:a7:06:d8:ef:78:39:d3:82:d7:c7:b1:f7:a4: 71:a6:83:45:b0:ce:00:da:00:40:44:76:60:2e:35:3a:f4:3a: 07:14:07:af:6f:36:1e:a0:fe:b7:69:41:0c:0d:d8:c0:df:d5: b1:2c:f7:42:47:8c:f2:ec:3c:a4:51:91:c6:e7:fd:6f:a6:4b: 3a:52:f4:2d:0a:0a:c9:38:dc:f9:54:e2:bc:4d:e7:4b:79:01: 10:0d:2c:23:f1:13:0b:66:4d:1c:0a:94:e7:f7:5b:e1:f1:0a: 02:0f:ef:a5:8e:eb:eb:f6:ad:4a:f9:55:e6:5e:3a:62:2c:c0: ba:fb:65:ab:d4:0c:9b:df:ba:77:51:fd:85:3b:f0:23:7d:f6: 08:14:5f:b5:a2:e9:3e:fb:49:f6:1f:89:e0:d6:8d:9c:d4:42: d8:b5:6b:99:fc:d9:bd:ce:b6:33:a6:fb:50:04:79:0d:f1:f9: 75:2f:8e:41:22:ff:8c:21:3e:a4:b3:6f:8a:ab:71:6d:26:64: 9f:40:8d:8d:a0:b0:94:5c:cb:ff:2c:e0:c7:1a:c8:f3:8b:04: 6c:81:54:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjQwNDI3MDIyMzI2WhcNMjQwNTA0MDIyMzI1WjAYMRYwFAYD VQQDEw02NjJjNjE5ZS0yZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9q1q7SxeU+UNTU2iQvt7ZIDGd78etX/BjWQXWqZAETPEMJoI1TPN+U78biKR t6tLP2O8SjeF4zqYBqbsRk5LZzw6gpNIx3zJBaxsvSZNTEt1j1hEfEc75gqmyuwU qw8cCw8TWSGIcHQwPMnhhS74P2n33ToiSSZTKAeo9P6YED3qjTWRO5slU1ZCq+UU +IJYqpjpBDxEYHHsvPmNtMNOrzODwtffTMSb5iO3skQtdZsHQVPGdoLcfOVaExHN tBjat7EsltsP8rGiggoyyaip48JVlENyMkuTifZFMMB6NwVItLSfAlrKbGZ8Dq/e gvJhBZ7F6ZM2I5lgBzPzLVflhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+vDhg2 fpKvtDyYHvd+fdNZ/+UHMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqjhkjo0K501gTiCoZc1kBnM2h52dis7MEC0h52hoyK0b50IQmTYeM cKcG2O94OdOC18ex96RxpoNFsM4A2gBARHZgLjU69DoHFAevbzYeoP63aUEMDdjA 39WxLPdCR4zy7DykUZHG5/1vpks6UvQtCgrJONz5VOK8TedLeQEQDSwj8RMLZk0c CpTn91vh8QoCD++ljuvr9q1K+VXmXjpiLMC6+2Wr1Ayb37p3Uf2FO/AjffYIFF+1 ouk++0n2H4ng1o2c1ELYtWuZ/Nm9zrYzpvtQBHkN8fl1L45BIv+MIT6ks2+Kq3Ft JmSfQI2NoLCUXMv/LODHGsjziwRsgVQT -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:44 2024 by rpki-client on console-ams.rpki-client.org