$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: beCAXPBmapDczoJzZ7YduyKVaGC8Emf5JIqk3EAQriM= Subject key identifier: 5A:DD:32:91:11:E9:68:1F:55:B0:C5:58:53:C9:08:05:5D:01:5A:CC Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 0131 Signing time: Sat 23 Nov 2024 02:48:15 +0000 Manifest this update: Sat 23 Nov 2024 02:48:14 +0000 Manifest next update: Sat 30 Nov 2024 02:48:14 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: QPmLq3Pen+0lOQ0eyexV+t/o8bB7HBHJtmqBwhx7bbI=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: 9kQKFEDsx84E4CpywA7tSIWQG3TRzqIWi8CdC1zIoK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Nov 23 02:48:14 2024 GMT Not After : Nov 30 02:48:14 2024 GMT Subject: CN=6741426e-f2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:03:da:ae:79:62:d1:61:63:1f:8f:36:d8: 3f:81:d5:b2:97:82:25:82:cb:80:fa:76:d5:d2:51: 50:c8:f9:af:b5:77:b6:7b:f8:e7:3c:d0:be:51:59: 74:cd:6d:e9:06:f9:c0:48:f7:69:79:24:3e:f6:6f: 99:96:ae:19:14:4b:d4:dd:a8:23:9f:56:43:67:30: 20:5b:00:a7:33:b8:f4:8b:d1:89:9d:f0:ff:4b:a9: b2:67:cc:87:4e:31:04:81:c4:0e:e0:99:fa:8b:5a: 25:b4:82:df:4d:b8:36:33:5c:1d:5c:24:9b:a9:71: b9:e4:de:f2:7d:44:13:4b:1d:17:a2:df:cc:a8:93: 1b:30:0b:ac:e0:21:96:a1:56:17:1c:89:ab:df:8d: 57:11:af:42:e7:80:97:e0:68:0f:f7:ce:78:3b:13: 98:c6:9a:77:8f:fb:b5:32:c9:da:fc:bd:b5:43:3b: ba:67:fa:e8:1e:59:8c:f7:82:c9:36:11:d7:d5:96: ac:40:38:f3:c8:bc:27:2b:d4:84:db:bc:92:b5:b0: a8:02:fe:cb:c6:97:73:f6:30:58:f1:4e:3c:a7:cc: 0d:9e:b6:39:e8:58:12:e1:19:d2:7a:9c:04:38:5e: d3:0b:80:a2:4e:7b:df:e0:3a:69:4a:1f:91:b5:5d: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DD:32:91:11:E9:68:1F:55:B0:C5:58:53:C9:08:05:5D:01:5A:CC X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a2:66:7d:f0:a5:4b:38:76:74:31:00:7e:79:6d:e8:62:33: 1a:52:18:83:db:36:58:9d:36:fc:29:38:17:28:1f:19:32:a0: 1e:4d:5b:d7:24:3e:80:76:b2:31:dd:88:bd:07:98:bb:9e:55: ae:6d:12:be:a2:f9:f2:20:a8:1b:a9:36:c4:4e:a4:b5:5b:a5: dc:26:fc:8e:d7:e1:a0:eb:e0:31:5a:06:b2:95:79:87:5e:f6: 0d:91:e3:37:b3:4e:a2:13:4d:5f:82:de:18:3a:e7:07:e0:c2: 68:ce:49:3b:a9:00:71:e7:c4:13:18:39:af:bf:4e:be:de:79: d2:07:38:47:4d:d8:52:a3:04:65:8b:67:ba:4d:cb:8c:17:5c: fd:56:36:f4:bd:4c:33:75:74:3c:ec:1c:10:ea:31:cf:e6:09: c6:4c:4b:40:d0:a4:50:cc:f4:e2:14:18:bc:cb:4d:38:2c:0b: 57:57:5d:5a:70:ad:71:84:ab:29:b0:6c:39:96:8e:01:f4:6b: 6c:0d:73:7a:0c:75:fd:0b:60:2a:bc:93:f4:9e:a3:5e:5a:c2: 02:67:af:87:98:ea:4b:35:61:e0:26:59:25:c0:dc:a9:80:12: 6e:5c:a8:96:b1:6b:e7:74:fc:ac:0b:1f:4e:df:a1:5b:64:0e: ff:e4:49:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjQxMTIzMDI0ODE0WhcNMjQxMTMwMDI0ODE0WjAYMRYwFAYD VQQDEw02NzQxNDI2ZS1mMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQQD2q55YtFhYx+PNtg/gdWyl4IlgsuA+nbV0lFQyPmvtXe2e/jnPNC+UVl0 zW3pBvnASPdpeSQ+9m+Zlq4ZFEvU3agjn1ZDZzAgWwCnM7j0i9GJnfD/S6myZ8yH TjEEgcQO4Jn6i1oltILfTbg2M1wdXCSbqXG55N7yfUQTSx0Xot/MqJMbMAus4CGW oVYXHImr341XEa9C54CX4GgP9854OxOYxpp3j/u1Msna/L21Qzu6Z/roHlmM94LJ NhHX1ZasQDjzyLwnK9SE27yStbCoAv7Lxpdz9jBY8U48p8wNnrY56FgS4RnSepwE OF7TC4CiTnvf4DppSh+RtV0jqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrdMpER 6WgfVbDFWFPJCAVdAVrMMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkomZ98KVLOHZ0MQB+eW3oYjMaUhiD2zZYnTb8KTgXKB8ZMqAeTVvX JD6AdrIx3Yi9B5i7nlWubRK+ovnyIKgbqTbETqS1W6XcJvyO1+Gg6+AxWgaylXmH XvYNkeM3s06iE01fgt4YOucH4MJozkk7qQBx58QTGDmvv06+3nnSBzhHTdhSowRl i2e6TcuMF1z9Vjb0vUwzdXQ87BwQ6jHP5gnGTEtA0KRQzPTiFBi8y004LAtXV11a cK1xhKspsGw5lo4B9GtsDXN6DHX9C2AqvJP0nqNeWsICZ6+HmOpLNWHgJlklwNyp gBJuXKiWsWvndPysCx9O36FbZA7/5ElZ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org