$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json) Hash identifier: e+oNM43ktGC4FUugJY4d3Ek2xR5Swaar5BZuAEnO94E= Subject key identifier: DB:03:23:A2:D3:54:CE:63:08:F8:DD:3D:89:AA:CF:EA:6F:1B:A2:AF Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft Manifest number: D0 Signing time: Sat 05 Apr 2025 05:07:26 +0000 Manifest this update: Sat 05 Apr 2025 05:07:25 +0000 Manifest next update: Sat 12 Apr 2025 05:07:25 +0000 Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: SXcGAP0f8zD+hkLnB7WPc++WPdJQO17mBqlf2YL4IXc=) 2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: ZfM8fwEWg7Cl4U2TTJqmh5c5IOhoGVnknztqF/uNSss=) 3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: Jctjnz4ZAWmlvP4Z4MtmplLYI/qLXEuNRoWhVRUxKcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849 Validity Not Before: Apr 5 05:07:25 2025 GMT Not After : Apr 12 05:07:25 2025 GMT Subject: CN=67f0ba8e-b9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:31:a6:bf:a1:80:2b:bc:44:7d:cd:e1:b9: 09:28:aa:d4:a8:5d:e4:ba:cc:55:9b:6c:ce:4b:9a: c8:72:aa:63:07:bb:26:cf:1e:b9:dc:4b:c6:20:b5: c4:eb:03:8e:35:e1:33:f7:06:6a:3f:84:e4:0c:9e: d8:c6:3f:c7:37:5e:11:9a:3e:d8:4d:70:ee:76:d5: 13:30:8e:35:3d:e5:66:39:cc:6a:54:f6:95:3f:c8: 36:a1:00:cd:69:6e:34:37:57:79:0c:7c:1a:df:73: 80:4b:19:ea:5b:eb:8e:ec:a2:b5:b8:59:23:55:fa: a4:c8:84:f5:a4:50:1e:43:90:96:92:cc:9c:b4:e2: 0f:92:68:2b:21:b3:32:a8:7c:62:07:3a:5d:64:21: 52:9e:82:5d:91:ec:af:d6:24:1d:09:1e:eb:f9:73: 08:7f:7b:fb:b1:25:8d:b3:4f:12:4f:5c:75:40:2d: 88:b3:cb:d8:27:04:e7:85:23:43:66:49:3f:b8:21: e8:55:bf:ad:a0:5a:76:22:17:d2:3b:35:93:6d:a0: 5b:01:5d:d6:13:97:cb:c6:3d:b7:a7:0f:93:07:43: 75:0a:42:92:f9:9a:2c:03:29:af:d5:36:da:96:46: 01:45:7b:71:50:1f:30:40:23:2a:3f:e0:15:98:23: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:03:23:A2:D3:54:CE:63:08:F8:DD:3D:89:AA:CF:EA:6F:1B:A2:AF X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fc:3f:f9:42:de:0a:f5:0b:30:ae:a3:a6:d1:bc:94:de:aa: d6:11:37:05:32:61:c5:21:4a:9d:3c:ab:e0:5a:8e:33:ad:7a: 01:fa:f1:4c:32:5f:93:69:9a:e0:e2:54:54:0e:7a:19:df:93: 7e:c9:4f:5f:88:b2:24:86:c9:39:4f:5a:8b:16:4c:b4:0d:13: 17:0c:a6:a3:d7:c5:51:e3:8d:4c:51:77:10:ed:c4:71:19:47: c3:14:77:5f:f9:59:eb:6a:44:e3:df:e1:f2:13:a2:fc:a2:7f: f5:ce:52:c3:2b:63:c0:79:9c:e4:70:39:a7:3f:a6:45:20:a3: 31:e4:db:ba:91:09:62:df:90:fd:d8:7a:94:97:77:14:e9:69: 50:66:62:f1:9c:f8:7b:3a:8e:1f:50:14:b1:0f:e0:94:aa:cd: fb:eb:60:17:2d:a5:8c:40:81:f9:70:fc:44:fe:24:23:14:fe: 27:01:34:b4:b6:bd:e1:97:b2:35:4b:78:ae:2b:1c:d4:ce:5d: fa:3c:15:aa:07:9f:e9:86:fd:96:cf:30:89:42:26:bf:f8:b7: c4:a6:e4:4b:f0:ff:16:75:43:29:26:2b:1a:b5:ff:e2:3e:25: 7a:06:08:16:9b:67:fa:9a:90:f6:aa:91:b0:cb:d8:4d:cc:d7: 81:de:a1:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4 MDg2OEZCRDkwHhcNMjUwNDA1MDUwNzI1WhcNMjUwNDEyMDUwNzI1WjAYMRYwFAYD VQQDEw02N2YwYmE4ZS1iOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n8xpr+hgCu8RH3N4bkJKKrUqF3kusxVm2zOS5rIcqpjB7smzx653EvGILXE 6wOONeEz9wZqP4TkDJ7Yxj/HN14Rmj7YTXDudtUTMI41PeVmOcxqVPaVP8g2oQDN aW40N1d5DHwa33OASxnqW+uO7KK1uFkjVfqkyIT1pFAeQ5CWksyctOIPkmgrIbMy qHxiBzpdZCFSnoJdkeyv1iQdCR7r+XMIf3v7sSWNs08ST1x1QC2Is8vYJwTnhSND Zkk/uCHoVb+toFp2IhfSOzWTbaBbAV3WE5fLxj23pw+TB0N1CkKS+ZosAymv1Tba lkYBRXtxUB8wQCMqP+AVmCP2kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsDI6LT VM5jCPjdPYmqz+pvG6KvMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2 NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb/D/5Qt4K9QswrqOm0byU3qrWETcFMmHFIUqdPKvgWo4zrXoB+vFM Ml+TaZrg4lRUDnoZ35N+yU9fiLIkhsk5T1qLFky0DRMXDKaj18VR441MUXcQ7cRx GUfDFHdf+VnrakTj3+HyE6L8on/1zlLDK2PAeZzkcDmnP6ZFIKMx5Nu6kQli35D9 2HqUl3cU6WlQZmLxnPh7Oo4fUBSxD+CUqs3762AXLaWMQIH5cPxE/iQjFP4nATS0 tr3hl7I1S3iuKxzUzl36PBWqB5/phv2WzzCJQia/+LfEpuRL8P8WdUMpJisatf/i PiV6BggWm2f6mpD2qpGwy9hNzNeB3qGd -----END CERTIFICATE-----Generated at Sun Apr 6 22:21:55 2025 by rpki-client