$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft File: _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json) Hash identifier: JaehP6rmhZkuCi3H2YN/P/zXSGPX0C2UPnLWp8fjBsE= Subject key identifier: C9:D2:63:EA:F3:DC:BF:CC:FA:C0:95:6A:D9:42:24:F5:C2:89:07:53 Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 Certificate issuer: /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft Manifest number: 123D Signing time: Sat 18 May 2024 19:58:14 +0000 Manifest this update: Sat 18 May 2024 19:58:13 +0000 Manifest next update: Sat 25 May 2024 19:58:13 +0000 Files and hashes: 1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: xzXdz2GrArYhKGcVDF+9rjNfHAT2iQ7o3/OytFMNxiY=) 2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: PmB16e5tnD3/IO2PrbsAz/bbTN7MoZTnyBsdpODDg0s=) 3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: 1MXsVVhWdBlk4OJjB5/CwtyIc6CTDhnlVYTEJxIbans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Validity Not Before: May 18 19:58:13 2024 GMT Not After : May 25 19:58:13 2024 GMT Subject: CN=66490856-9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:6f:01:84:99:d0:3e:76:05:05:02:98:b1: 7d:d5:de:8d:03:b8:65:c4:4b:8e:af:26:bf:30:da: e6:f3:6c:13:29:84:f2:10:63:ea:65:92:06:59:1d: 5f:f1:ac:41:75:83:b4:4a:4d:cb:ac:50:b4:40:3e: d3:ab:bf:85:e2:82:ea:ed:39:29:1a:ef:f4:e3:3d: e9:b9:c2:87:73:2a:d1:8d:12:1f:55:e7:97:35:b5: 2e:1c:35:11:01:5a:0b:d2:b6:ee:6a:83:de:d2:46: d6:be:5a:4e:b5:2d:45:b3:de:4b:4d:d1:9c:de:92: 0c:48:8c:f6:0a:91:7f:d2:f5:d2:2f:ba:3e:2d:b8: f5:c0:4c:34:ff:54:4a:bd:07:2a:40:f5:0a:b2:e6: 6e:31:d1:7c:31:e2:fa:f8:8f:d8:0c:aa:35:71:28: d2:89:f7:38:e7:d0:b0:4d:ec:4e:0f:f4:ea:e7:d7: 3e:0e:40:96:03:dc:8b:a6:bf:6b:ab:75:09:77:19: 12:b4:7b:0b:b7:81:89:5a:c5:bb:e2:2d:a1:c5:f1: 04:dc:32:9f:93:fb:95:33:ed:36:1e:56:dd:e7:13: 41:76:29:71:9d:38:11:bd:7d:b9:29:77:b2:4c:86: 39:dc:cb:b5:77:72:50:2b:62:88:c3:43:54:cd:6d: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:63:EA:F3:DC:BF:CC:FA:C0:95:6A:D9:42:24:F5:C2:89:07:53 X509v3 Authority Key Identifier: keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f8:11:28:ce:30:12:61:d9:c1:87:53:46:02:60:bb:90:f6: e8:08:c4:07:fa:49:d6:cf:16:b6:4e:8e:6f:a1:86:bb:06:9e: b2:d4:d0:0c:92:21:59:52:b4:e2:c7:77:eb:e8:06:1e:1c:58: b1:58:19:94:9b:64:a9:f0:f4:3a:6b:d4:73:2c:85:1b:9e:88: c7:cc:dd:c3:e3:21:e7:8d:37:e6:75:15:04:e7:2f:6d:de:f1: c7:b8:be:6e:fc:77:b2:04:cf:de:cb:76:c4:3e:08:35:09:d6: af:ac:e8:d7:57:d8:9c:d1:20:fa:94:17:d9:82:eb:ff:3b:81: e1:40:d7:8e:88:f8:78:9e:da:c7:ae:b5:da:32:67:b1:32:ed: 49:14:a4:68:ad:1a:ea:84:71:5c:77:52:72:1d:86:6d:79:27: b7:fa:10:7d:4c:cd:cc:ed:84:21:06:0a:0b:32:05:22:52:8c: a1:82:1d:70:6e:1d:2f:95:89:44:69:8c:c3:00:bb:ea:8e:5e: 14:ee:4c:ab:73:bd:5f:5a:5b:bd:db:ad:d4:29:0b:72:ff:f3: 42:b6:49:ca:1c:53:ba:25:50:30:8d:21:1d:99:1f:de:15:e9: 98:e1:96:16:54:6c:93:c5:fd:0f:9a:91:6f:2d:e7:1c:5a:ed: e0:4a:37:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKEZEMjVCQTk2MTEwMUI1Q0U2MDE0OTkzQ0U3NDg4RkRC NkYwOEE0MjMwHhcNMjQwNTE4MTk1ODEzWhcNMjQwNTI1MTk1ODEzWjAYMRYwFAYD VQQDEw02NjQ5MDg1Ni05ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoklvAYSZ0D52BQUCmLF91d6NA7hlxEuOrya/MNrm82wTKYTyEGPqZZIGWR1f 8axBdYO0Sk3LrFC0QD7Tq7+F4oLq7TkpGu/04z3pucKHcyrRjRIfVeeXNbUuHDUR AVoL0rbuaoPe0kbWvlpOtS1Fs95LTdGc3pIMSIz2CpF/0vXSL7o+Lbj1wEw0/1RK vQcqQPUKsuZuMdF8MeL6+I/YDKo1cSjSifc459CwTexOD/Tq59c+DkCWA9yLpr9r q3UJdxkStHsLt4GJWsW74i2hxfEE3DKfk/uVM+02Hlbd5xNBdilxnTgRvX25KXey TIY53Mu1d3JQK2KIw0NUzW3NNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnSY+rz 3L/M+sCVatlCJPXCiQdTMB8GA1UdIwQYMBaAFP0lupYRAbXOYBSZPOdIj9tvCKQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRjNWdGSms4NTBpUDIyOElw Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TVzZsaEVCdGM1Z0ZKazg1MGlQMjI4SXBDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRj NWdGSms4NTBpUDIyOElwQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo+BEozjASYdnBh1NGAmC7kPboCMQH+knWzxa2To5voYa7Bp6y1NAM kiFZUrTix3fr6AYeHFixWBmUm2Sp8PQ6a9RzLIUbnojHzN3D4yHnjTfmdRUE5y9t 3vHHuL5u/HeyBM/ey3bEPgg1CdavrOjXV9ic0SD6lBfZguv/O4HhQNeOiPh4ntrH rrXaMmexMu1JFKRorRrqhHFcd1JyHYZteSe3+hB9TM3M7YQhBgoLMgUiUoyhgh1w bh0vlYlEaYzDALvqjl4U7kyrc71fWlu9263UKQty//NCtknKHFO6JVAwjSEdmR/e FemY4ZYWVGyTxf0PmpFvLeccWu3gSjcY -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org