$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: CXq2wVsfmkW88+WTGrOXmQjyaI/DdhVZr63ZeGuA/Aw= Subject key identifier: C2:07:66:50:50:AB:70:DC:99:9E:FB:0A:94:63:EE:25:36:35:3C:B2 Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 050D Signing time: Mon 17 Jun 2024 01:23:55 +0000 Manifest this update: Mon 17 Jun 2024 01:23:55 +0000 Manifest next update: Mon 24 Jun 2024 01:23:55 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: 2m8s2VLImhmuVhWVi092VBgnbtN1YR4FN0t0zPn+P1c=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: 1xyW+6uc2SepfUqMmBTvFglETlyT1upzSuszdihjr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 23:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Jun 17 01:23:55 2024 GMT Not After : Jun 24 01:23:55 2024 GMT Subject: CN=666f902b-85ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:8e:1f:28:49:ab:db:b1:3b:d5:72:49:b0: 91:95:e9:cd:0e:69:f0:6b:e9:3e:70:cf:08:7d:69: f7:49:e5:91:97:cd:df:8d:29:e6:1b:09:4e:d1:36: 64:bd:67:03:19:93:19:cd:a2:11:b5:9e:5e:7c:31: 2a:d9:fa:ee:cd:9c:6f:f5:2d:71:33:41:fc:cb:fe: d7:1e:13:15:a0:51:6f:ca:d0:d6:63:9d:f7:aa:d7: 6f:18:b0:37:d2:2f:93:1c:8f:38:aa:5a:69:b2:c0: 37:78:2e:6f:77:30:c6:dc:d3:58:ae:40:be:97:93: b6:57:e2:8d:a4:2a:b5:ef:13:fe:6a:87:71:6a:05: 6b:15:fa:e4:b3:47:ba:ea:44:c8:59:c7:e0:3c:0d: 6a:80:03:ec:ef:b3:f3:f8:7f:10:87:66:ee:de:6d: 50:28:a5:06:ab:ab:fb:1d:a3:11:b3:b3:46:b0:16: a9:8e:2c:dd:9a:c1:ab:f7:ba:ab:83:78:71:4d:5f: 61:52:b4:af:37:b0:3b:99:7c:cf:e1:4c:8a:71:40: 53:bd:a4:d1:50:e9:1f:90:cd:d4:4a:54:cc:f0:a6: 49:af:75:f9:19:a4:2d:dd:69:58:16:c2:51:6c:0a: 3b:09:d4:e7:a4:ec:40:80:bd:c3:17:ce:78:b8:fb: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:07:66:50:50:AB:70:DC:99:9E:FB:0A:94:63:EE:25:36:35:3C:B2 X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:df:5e:cf:88:35:3e:05:0c:7d:37:51:30:d2:b2:f2:72:5f: 88:49:ac:5a:83:1f:53:5d:65:c4:34:1b:84:ff:0f:1e:b1:5f: c8:8e:56:11:7d:ca:65:e8:9b:c0:82:93:cd:b6:32:9f:85:06: 60:62:4b:5f:fc:54:d9:b0:88:41:d4:ab:3d:2e:be:ab:41:eb: bd:7d:89:0c:95:eb:79:01:67:b4:4d:d3:42:ac:a1:5c:1d:4c: bb:3e:7c:d9:0b:38:58:a9:5c:7a:00:db:1a:fc:c3:f3:e4:ff: 55:22:bf:d9:6e:db:6e:1d:b7:a5:b4:59:73:64:91:64:c1:ec: 25:3d:74:f2:af:38:ac:1c:f4:be:6f:06:79:ac:5a:5f:b9:8a: 86:0f:57:8d:93:bc:03:a8:e3:c7:68:94:06:3c:56:72:3d:6b: 93:19:52:7c:4e:9f:94:d4:fb:10:70:eb:1d:f6:66:2c:c0:71: 63:0c:e0:9f:24:a0:e0:d2:55:29:f3:b5:f2:90:c9:7a:11:a5: 8f:33:b3:ce:09:aa:d1:87:e8:5e:7a:88:6b:53:bf:56:94:cf: 2d:ff:5c:09:3e:8c:eb:83:56:1e:08:34:c7:76:d2:d7:83:10: df:cc:51:b0:b3:15:00:13:d5:1f:a9:00:7e:f9:36:f3:9d:88: 10:d7:c5:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjQwNjE3MDEyMzU1WhcNMjQwNjI0MDEyMzU1WjAYMRYwFAYD VQQDEw02NjZmOTAyYi04NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCeOHyhJq9uxO9VySbCRlenNDmnwa+k+cM8IfWn3SeWRl83fjSnmGwlO0TZk vWcDGZMZzaIRtZ5efDEq2fruzZxv9S1xM0H8y/7XHhMVoFFvytDWY533qtdvGLA3 0i+THI84qlppssA3eC5vdzDG3NNYrkC+l5O2V+KNpCq17xP+aodxagVrFfrks0e6 6kTIWcfgPA1qgAPs77Pz+H8Qh2bu3m1QKKUGq6v7HaMRs7NGsBapjizdmsGr97qr g3hxTV9hUrSvN7A7mXzP4UyKcUBTvaTRUOkfkM3USlTM8KZJr3X5GaQt3WlYFsJR bAo7CdTnpOxAgL3DF854uPu70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIHZlBQ q3DcmZ77CpRj7iU2NTyyMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF317PiDU+BQx9N1Ew0rLycl+ISaxagx9TXWXENBuE/w8esV/IjlYR fcpl6JvAgpPNtjKfhQZgYktf/FTZsIhB1Ks9Lr6rQeu9fYkMlet5AWe0TdNCrKFc HUy7PnzZCzhYqVx6ANsa/MPz5P9VIr/ZbttuHbeltFlzZJFkwewlPXTyrzisHPS+ bwZ5rFpfuYqGD1eNk7wDqOPHaJQGPFZyPWuTGVJ8Tp+U1PsQcOsd9mYswHFjDOCf JKDg0lUp87XykMl6EaWPM7POCarRh+heeohrU79WlM8t/1wJPozrg1YeCDTHdtLX gxDfzFGwsxUAE9UfqQB++TbznYgQ18Vf -----END CERTIFICATE-----Generated at Mon Jun 17 02:12:23 2024 by rpki-client on console-ams.rpki-client.org