$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: vi/8PAeHOFpcXY+U8D01N8bcPvz6V8Db/FnY35qhVvQ= Subject key identifier: 50:8A:02:76:20:23:0A:24:F8:13:35:D0:C0:CC:69:1A:50:C9:58:AE Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: CA Signing time: Fri 03 May 2024 06:20:46 +0000 Manifest this update: Fri 03 May 2024 06:20:46 +0000 Manifest next update: Fri 10 May 2024 06:20:46 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: JqXdeKp2W1LCnqnSsSiWHliDnPj1elKhnSARIZ7zT6I=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: 9kQKFEDsx84E4CpywA7tSIWQG3TRzqIWi8CdC1zIoK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: May 3 06:20:46 2024 GMT Not After : May 10 06:20:46 2024 GMT Subject: CN=6634823e-8784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:95:11:5d:07:d6:b6:a9:51:e3:29:50:92: 81:46:59:e2:59:7b:db:54:a9:e7:02:6f:da:e1:9c: a4:f1:d7:24:60:22:63:0c:6d:10:43:66:e5:7c:9e: 33:0a:ef:b4:60:19:b0:72:15:80:23:fc:9d:d4:72: 1b:a4:49:9f:66:67:71:db:4e:a3:9f:db:15:af:81: b8:28:93:0c:96:b6:d5:49:56:27:de:32:d9:64:0c: 00:0b:f2:d4:4f:88:ac:a2:78:a9:ae:1b:d9:34:02: fe:4f:9f:18:ab:66:68:1f:a2:59:ea:73:dd:38:98: 32:81:a8:9c:e3:4f:ab:c7:1d:8c:62:fd:ea:bb:4d: da:c9:cf:b7:97:ed:1d:55:ca:07:12:7a:f5:33:de: 57:ea:9d:ab:73:e5:fe:81:a2:9b:95:39:18:db:14: 1e:29:3a:bf:68:e2:28:c9:42:79:2d:c0:67:f5:20: 2f:7a:0c:5d:ef:67:ba:e2:00:77:93:ff:c1:d3:ed: 93:94:a7:07:25:5b:d9:04:bb:ed:5b:33:bc:6e:3d: 62:b1:a9:62:b8:3e:4f:c5:45:5a:12:e0:2d:93:3f: fd:97:5a:db:da:db:d6:93:fc:ed:77:f3:dc:90:46: 32:10:07:dd:5c:e1:2d:83:e2:a7:0c:75:f7:b7:24: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8A:02:76:20:23:0A:24:F8:13:35:D0:C0:CC:69:1A:50:C9:58:AE X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0e:11:e4:27:8c:6e:e1:a6:4a:7c:97:ff:e5:48:7a:9b:8c: 15:b9:a9:cb:9a:60:df:59:a1:a9:52:56:d7:89:76:e4:59:a7: f1:a7:0a:49:46:06:32:a5:c4:12:40:9d:2e:f3:e2:9a:70:ba: 40:81:10:e2:71:77:b9:91:b3:3d:5d:58:f6:1f:a5:3a:3b:f4: da:9c:10:3b:4e:8e:31:16:84:83:fa:97:da:a2:fb:a2:e0:bb: 64:fb:5f:a4:ff:b5:9e:00:a9:ef:3f:a6:4a:60:c9:7d:0b:03: 61:f0:c0:eb:e7:38:6a:e4:c7:36:81:1e:bd:c2:7a:de:80:40: cf:6d:b7:5c:10:76:74:fe:ce:66:2f:22:c9:d4:63:a7:c7:7f: 2a:48:bc:29:15:05:16:8f:4a:41:52:53:96:a1:78:90:b6:2b: 54:cd:2c:c0:fb:a8:84:da:ba:18:ae:9e:a4:b6:92:a8:78:1b: 3e:a8:f0:47:ca:50:f0:46:c8:55:0e:64:d9:31:4f:22:bf:ff: 1b:90:4c:50:65:3a:aa:fb:39:fe:d0:57:4d:ac:63:1d:e4:73: 24:89:01:99:84:93:5e:a6:2b:3d:f0:75:58:3e:65:ce:eb:bf: b6:2f:72:9f:1b:03:4e:b9:e4:63:fb:47:46:67:55:ac:dd:80: 80:9a:a0:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjQwNTAzMDYyMDQ2WhcNMjQwNTEwMDYyMDQ2WjAYMRYwFAYD VQQDEw02NjM0ODIzZS04Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xSVEV0H1rapUeMpUJKBRlniWXvbVKnnAm/a4Zyk8dckYCJjDG0QQ2blfJ4z Cu+0YBmwchWAI/yd1HIbpEmfZmdx206jn9sVr4G4KJMMlrbVSVYn3jLZZAwAC/LU T4isoniprhvZNAL+T58Yq2ZoH6JZ6nPdOJgygaic40+rxx2MYv3qu03ayc+3l+0d VcoHEnr1M95X6p2rc+X+gaKblTkY2xQeKTq/aOIoyUJ5LcBn9SAvegxd72e64gB3 k//B0+2TlKcHJVvZBLvtWzO8bj1isaliuD5PxUVaEuAtkz/9l1rb2tvWk/ztd/Pc kEYyEAfdXOEtg+KnDHX3tyQ7dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCKAnYg Iwok+BM10MDMaRpQyViuMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5DhHkJ4xu4aZKfJf/5Uh6m4wVuanLmmDfWaGpUlbXiXbkWafxpwpJ RgYypcQSQJ0u8+KacLpAgRDicXe5kbM9XVj2H6U6O/TanBA7To4xFoSD+pfaovui 4Ltk+1+k/7WeAKnvP6ZKYMl9CwNh8MDr5zhq5Mc2gR69wnregEDPbbdcEHZ0/s5m LyLJ1GOnx38qSLwpFQUWj0pBUlOWoXiQtitUzSzA+6iE2roYrp6ktpKoeBs+qPBH ylDwRshVDmTZMU8iv/8bkExQZTqq+zn+0FdNrGMd5HMkiQGZhJNepis98HVYPmXO 67+2L3KfGwNOueRj+0dGZ1Ws3YCAmqD/ -----END CERTIFICATE-----Generated at Fri May 3 08:21:40 2024 by rpki-client on console-ams.rpki-client.org