$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: p4Q+3YMKRgyHVezIXtTAkfhgIO480QXkmL6OQP+AS4A= Subject key identifier: 72:57:D3:A4:72:DE:07:81:AE:24:5A:5F:85:3A:8C:4E:D6:5A:90:A0 Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 055D Signing time: Wed 20 Nov 2024 22:56:33 +0000 Manifest this update: Wed 20 Nov 2024 22:56:33 +0000 Manifest next update: Wed 27 Nov 2024 22:56:32 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: czz1vOjSR8/I7/dFRnALB51x93LaMdpuJWcxA25/AIA=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: 1xyW+6uc2SepfUqMmBTvFglETlyT1upzSuszdihjr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Nov 20 22:56:33 2024 GMT Not After : Nov 27 22:56:32 2024 GMT Subject: CN=673e6921-62c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:17:70:e6:0b:8b:2b:91:61:3e:8b:3a:52: 59:08:42:37:1e:10:70:20:27:a7:ca:42:95:a5:80: 66:12:c8:ca:f8:9f:25:2d:b4:9e:c4:8c:25:97:6d: ab:e8:e2:37:ef:13:40:26:80:db:ae:2f:1f:d4:41: 00:29:ca:b8:a8:d3:a8:71:54:4b:77:a5:92:8a:de: 69:b1:4c:14:90:70:d3:b5:59:5e:4d:05:23:3a:a4: 87:62:13:2a:2e:81:5d:cb:cc:d8:c6:32:70:81:17: 3d:ee:5e:e9:42:1f:d0:2e:1e:83:f9:47:9b:c7:bd: 85:89:a3:fc:29:18:16:c4:79:ed:78:2f:27:07:83: 6c:20:e2:e6:5d:08:d7:8e:61:c2:93:5e:2b:c9:b8: 09:ae:32:3f:2e:ec:d7:a6:78:ca:9d:d2:0f:5f:7f: e0:fe:90:f5:0a:d5:b6:1f:25:fb:10:aa:e8:8b:c9: 52:e0:8c:8f:04:53:97:3e:a0:19:23:80:da:b4:08: f7:6b:f9:d9:3c:ba:fd:a1:b7:a2:b7:d2:cf:af:fa: 44:0e:15:2c:94:54:be:3f:e3:f0:ea:8f:01:ef:ef: 66:0b:59:d4:b2:c4:0e:d8:51:05:df:98:45:67:64: 39:13:f6:12:29:12:2c:94:e8:81:a1:f1:06:95:8a: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:D3:A4:72:DE:07:81:AE:24:5A:5F:85:3A:8C:4E:D6:5A:90:A0 X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:77:53:b2:85:d1:1e:56:09:b3:63:88:42:4a:30:dc:fe:86: e8:b5:11:65:21:52:0f:5a:46:33:ee:f7:34:8a:da:7d:7b:bb: ca:4b:07:f5:4c:0b:ba:ce:b0:23:98:f8:5b:d2:6a:a4:59:f4: 0d:8d:96:47:69:31:de:f5:df:13:cb:40:b0:47:4e:b2:26:3e: b4:91:f4:63:ec:da:c6:82:63:93:d3:c8:5b:1a:64:5e:fc:42: ea:7d:2e:36:ee:5d:77:8c:71:21:0f:cc:b3:51:df:40:55:fa: 09:18:7c:c0:b4:56:91:22:06:6b:30:ea:6e:8b:c4:4b:1d:43: f1:da:af:74:18:a8:74:72:04:5d:b3:94:8b:81:09:8e:4f:ce: e7:69:2d:d4:55:b5:63:67:90:19:3f:bb:f6:35:f5:c3:3f:4e: 4b:bf:b6:a0:a8:3a:f9:bb:e1:2a:67:82:3b:80:50:e6:89:30: 2f:50:cc:fe:df:7f:f9:ca:bc:00:49:5d:3f:9c:b7:b2:80:33: 87:16:ec:78:bd:65:5b:25:48:54:f3:23:8e:48:31:01:bb:bb: d4:5d:7e:6a:16:20:71:e7:b3:b6:96:5a:0d:f3:5f:78:54:0b: 16:d1:8f:c9:b7:1e:51:9a:23:ea:be:5c:13:31:7e:aa:54:c0: 61:30:06:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjQxMTIwMjI1NjMzWhcNMjQxMTI3MjI1NjMyWjAYMRYwFAYD VQQDEw02NzNlNjkyMS02MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNsXcOYLiyuRYT6LOlJZCEI3HhBwICenykKVpYBmEsjK+J8lLbSexIwll22r 6OI37xNAJoDbri8f1EEAKcq4qNOocVRLd6WSit5psUwUkHDTtVleTQUjOqSHYhMq LoFdy8zYxjJwgRc97l7pQh/QLh6D+Uebx72FiaP8KRgWxHnteC8nB4NsIOLmXQjX jmHCk14rybgJrjI/LuzXpnjKndIPX3/g/pD1CtW2HyX7EKroi8lS4IyPBFOXPqAZ I4DatAj3a/nZPLr9obeit9LPr/pEDhUslFS+P+Pw6o8B7+9mC1nUssQO2FEF35hF Z2Q5E/YSKRIslOiBofEGlYpZMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJX06Ry 3geBriRaX4U6jE7WWpCgMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSd1OyhdEeVgmzY4hCSjDc/obotRFlIVIPWkYz7vc0itp9e7vKSwf1 TAu6zrAjmPhb0mqkWfQNjZZHaTHe9d8Ty0CwR06yJj60kfRj7NrGgmOT08hbGmRe /ELqfS427l13jHEhD8yzUd9AVfoJGHzAtFaRIgZrMOpui8RLHUPx2q90GKh0cgRd s5SLgQmOT87naS3UVbVjZ5AZP7v2NfXDP05Lv7agqDr5u+EqZ4I7gFDmiTAvUMz+ 33/5yrwASV0/nLeygDOHFux4vWVbJUhU8yOOSDEBu7vUXX5qFiBx57O2lloN8194 VAsW0Y/Jtx5RmiPqvlwTMX6qVMBhMAa/ -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org