$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json) Hash identifier: zL+WLz/QuDF/KIDItEBfd2jC3Xh16GKb4Lq2mukDLFo= Subject key identifier: 2D:72:03:79:37:AB:5D:27:3D:05:56:12:8A:FF:48:18:06:F4:04:67 Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft Manifest number: 2D Signing time: Sun 19 May 2024 08:36:28 +0000 Manifest this update: Sun 19 May 2024 08:36:28 +0000 Manifest next update: Sun 26 May 2024 08:36:28 +0000 Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: Upn6poAOFDHBwEfSVBp2IKfOOl3cFBOrbTL4r6mAvYo=) 2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: ZfM8fwEWg7Cl4U2TTJqmh5c5IOhoGVnknztqF/uNSss=) 3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: Jctjnz4ZAWmlvP4Z4MtmplLYI/qLXEuNRoWhVRUxKcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: May 19 08:36:28 2024 GMT Not After : May 26 08:36:28 2024 GMT Subject: CN=6649ba0c-0ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e7:70:f9:36:c9:f5:a5:85:3f:38:2f:ef:a2: ee:88:64:ce:49:a7:dc:93:08:3e:d8:9d:69:ee:b7: 86:33:50:32:4f:dd:db:e0:a4:11:d2:52:fb:87:27: 73:76:fc:3f:81:d9:b9:27:92:e4:00:49:03:72:23: d5:31:90:be:c8:9f:43:3b:12:bf:60:ff:d6:23:57: 61:0c:01:81:ab:e9:b1:b2:c0:60:da:77:3c:e0:4a: 7f:f0:bd:7f:22:30:a3:86:bb:d5:24:b6:d2:ce:cd: 5a:37:15:44:b2:dc:71:c4:fa:67:1f:fa:fa:17:81: 5b:95:dc:7a:ae:6a:d2:3c:82:62:b9:97:40:65:5e: 61:a6:47:1a:0c:4f:01:a8:c6:ff:af:07:59:c2:1a: 3c:b8:f2:13:99:34:34:0f:3b:a7:65:5d:d0:28:86: 38:4d:77:83:54:c2:a0:68:64:ed:0b:f1:ec:70:b0: 81:21:fd:e5:66:35:ce:eb:7a:24:32:85:9e:c2:f7: 36:d7:26:9f:8a:8e:59:0e:a5:a6:8c:65:2a:8b:a5: 8e:6c:f6:4d:d1:59:c2:86:da:a2:79:f9:3c:da:54: c2:ec:01:56:d0:e7:93:78:a3:36:e1:c3:39:7a:2b: 5a:d8:83:11:12:12:93:5d:f3:08:eb:2e:36:11:2f: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:03:79:37:AB:5D:27:3D:05:56:12:8A:FF:48:18:06:F4:04:67 X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ba:77:da:80:3a:6c:26:96:bf:2a:74:bf:c0:3a:b4:fb:c3: 69:b5:fb:6e:64:b2:62:4c:7c:bd:6c:e3:30:d7:37:c5:5d:86: a9:a6:76:73:8f:d5:27:19:ca:64:98:10:9a:12:b9:93:73:8d: 30:05:28:b2:66:7e:12:0b:1a:35:66:4f:1d:dc:5e:1c:1e:74: 2e:af:32:81:9e:75:8a:d3:b0:4d:41:8d:dd:18:fe:b8:de:7c: 86:11:19:98:66:7a:b3:fd:6a:6b:03:2d:b2:00:a4:a4:e8:4c: 92:29:72:40:3f:1d:be:97:cb:8b:5a:0f:79:eb:b1:20:a3:1e: 0d:b3:12:cd:c3:a8:7c:a0:33:03:38:cb:5b:49:7a:0a:13:22: b0:fd:66:4f:ff:36:c9:e2:ab:c0:5d:58:ba:dc:ca:83:a5:a2: dc:c7:89:a4:8b:8d:ff:b0:f3:49:d1:a4:70:40:c8:be:4c:bc: 37:80:01:af:06:ce:3c:c4:bf:4c:f7:1f:21:46:95:d5:1a:4c: 51:d5:a4:66:06:e6:19:8d:70:ec:0d:91:bb:2e:1b:a2:e1:d7: 2f:f8:e4:40:1d:47:7a:39:5a:7a:27:fd:63:27:db:9b:d0:49: 94:d9:36:60:39:72:b7:d9:38:46:e2:75:08:1b:ca:d0:71:ce: dd:82:cb:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDg0OTExMC8GA1UEBRMoQjZDQzAyQTdEQjhBNERCNTMwRjExMkI2MjI0RjE5MDgw ODY4RkJEOTAeFw0yNDA1MTkwODM2MjhaFw0yNDA1MjYwODM2MjhaMBgxFjAUBgNV BAMTDTY2NDliYTBjLTBlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn53D5Nsn1pYU/OC/vou6IZM5Jp9yTCD7YnWnut4YzUDJP3dvgpBHSUvuHJ3N2 /D+B2bknkuQASQNyI9UxkL7In0M7Er9g/9YjV2EMAYGr6bGywGDadzzgSn/wvX8i MKOGu9UkttLOzVo3FUSy3HHE+mcf+voXgVuV3HquatI8gmK5l0BlXmGmRxoMTwGo xv+vB1nCGjy48hOZNDQPO6dlXdAohjhNd4NUwqBoZO0L8exwsIEh/eVmNc7reiQy hZ7C9zbXJp+KjlkOpaaMZSqLpY5s9k3RWcKG2qJ5+TzaVMLsAVbQ55N4ozbhwzl6 K1rYgxESEpNd8wjrLjYRL6vFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULXIDeTer XSc9BVYSiv9IGAb0BGcwHwYDVR0jBBgwFoAUtswCp9uKTbUw8RK2Ik8ZCAho+9kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0ODQ5LzA4N0QzRUU4RTY2 RDExRUU4QTMxQTk2MEM0RjlBRTAyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHN3Q3A5dUtUYlV3OFJLMklrOFpDQWhvLTlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 ODQ5LzA4N0QzRUU4RTY2RDExRUU4QTMxQTk2MEM0RjlBRTAyL3Rzd0NwOXVLVGJV dzhSSzJJazhaQ0Foby05ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACq6d9qAOmwmlr8qdL/AOrT7w2m1+25ksmJMfL1s4zDXN8VdhqmmdnOP 1ScZymSYEJoSuZNzjTAFKLJmfhILGjVmTx3cXhwedC6vMoGedYrTsE1Bjd0Y/rje fIYRGZhmerP9amsDLbIApKToTJIpckA/Hb6Xy4taD3nrsSCjHg2zEs3DqHygMwM4 y1tJegoTIrD9Zk//Nsniq8BdWLrcyoOlotzHiaSLjf+w80nRpHBAyL5MvDeAAa8G zjzEv0z3HyFGldUaTFHVpGYG5hmNcOwNkbsuG6Lh1y/45EAdR3o5Wnon/WMn25vQ SZTZNmA5crfZOEbidQgbytBxzt2Cy0s= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org