$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: USHCoveKMTX5t9N0SFH4K+JrO3EMvHaA2LZ/8wrFeS8= Subject key identifier: E3:96:D2:8B:8C:B8:8C:24:FA:11:B2:26:B1:BB:52:C6:86:3A:39:BB Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0C3C Signing time: Mon 06 May 2024 19:02:16 +0000 Manifest this update: Mon 06 May 2024 19:02:15 +0000 Manifest next update: Mon 13 May 2024 19:02:15 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: u4U2TXs1+piKvAhnUYrK1RNEgg6Abnxxlvy3J5X9lwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: May 6 19:02:15 2024 GMT Not After : May 13 19:02:15 2024 GMT Subject: CN=66392937-dac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:f0:37:a8:1f:48:37:48:69:60:5e:49:71: fb:56:71:6c:ab:07:dc:f2:bd:b7:e0:78:8e:6a:06: 28:a6:7d:06:3b:dc:83:77:26:f0:1e:de:94:2d:f6: d5:32:2e:3e:a6:b4:da:a3:f2:9f:3c:6b:79:e3:ce: 9a:c8:99:82:75:c1:3b:d8:62:c3:f3:9a:b1:28:a3: 4a:89:66:ab:02:e2:cf:7a:8d:a3:9a:eb:ef:7c:77: 7c:d9:8f:b1:ce:24:5f:a0:dc:75:fd:d8:96:36:0f: 2f:56:98:d5:22:f7:a7:ce:f0:39:56:38:bf:d1:2f: c0:49:9c:66:a9:ce:b9:ce:a1:c2:f1:cb:40:e4:7e: 0e:0a:40:eb:1d:ad:44:42:77:23:c1:a0:cd:18:26: 5d:e3:0b:84:e7:a5:97:5e:04:ab:1c:f3:82:0c:11: 86:3f:c8:ad:f5:96:8e:df:71:34:7f:d4:0a:ef:08: 85:4e:30:65:9e:7a:de:b0:0e:4f:da:5f:75:1b:b5: 50:96:5f:70:ef:33:4a:de:79:f8:32:b2:30:f2:9d: 6b:21:f0:d0:5b:51:0b:19:34:67:83:e0:24:31:e3: 0a:2c:54:bf:62:e1:2c:a6:60:48:1f:cb:4e:a7:e9: 4a:8f:ec:c9:01:7d:d6:59:28:8e:02:f0:8c:7d:7a: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:D2:8B:8C:B8:8C:24:FA:11:B2:26:B1:BB:52:C6:86:3A:39:BB X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:89:3e:37:fb:e5:1a:d2:cc:2a:f1:5e:3a:c3:24:78:49:db: fe:89:0c:0a:6e:97:b7:8c:c1:6c:1c:e8:71:62:b8:57:fd:72: 96:96:24:a9:38:17:88:5b:22:bd:0e:5f:3f:d6:fa:49:20:23: 8f:7e:6b:d1:66:81:35:7d:57:70:6c:58:2a:25:fe:6c:10:ac: ee:e8:0c:26:82:e0:4b:68:c5:f8:a2:ea:ee:7a:b3:64:79:b9: 97:3a:f5:e4:4f:43:33:0c:2a:ce:0a:75:42:cc:3f:19:fa:a6: fe:83:ea:0f:b7:89:66:92:0a:19:df:c4:cd:f4:6b:d1:d1:20: 75:3f:0c:51:cd:f0:1f:b5:cd:d0:40:a9:f2:1e:02:54:ce:ee: 1b:49:41:73:d2:c6:16:c3:0e:73:af:94:64:22:38:56:48:02: 1a:a7:ad:98:4e:16:9a:6f:0b:f6:5c:ee:bc:64:aa:65:08:1c: 73:3d:b4:d4:5b:19:d8:85:f9:3a:bf:00:1a:ac:3d:47:ab:3f: 05:30:ef:02:09:03:20:76:68:df:e0:d8:8b:65:1a:85:16:ed: bf:b6:a9:31:a9:4c:f4:c1:cb:95:1b:6b:14:ca:f6:f9:68:64: 83:25:79:01:8f:78:fb:e6:42:45:e9:ae:9a:55:ce:ed:57:5c: 5c:b2:4f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjQwNTA2MTkwMjE1WhcNMjQwNTEzMTkwMjE1WjAYMRYwFAYD VQQDEw02NjM5MjkzNy1kYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrLwN6gfSDdIaWBeSXH7VnFsqwfc8r234HiOagYopn0GO9yDdybwHt6ULfbV Mi4+prTao/KfPGt5486ayJmCdcE72GLD85qxKKNKiWarAuLPeo2jmuvvfHd82Y+x ziRfoNx1/diWNg8vVpjVIvenzvA5Vji/0S/ASZxmqc65zqHC8ctA5H4OCkDrHa1E QncjwaDNGCZd4wuE56WXXgSrHPOCDBGGP8it9ZaO33E0f9QK7wiFTjBlnnresA5P 2l91G7VQll9w7zNK3nn4MrIw8p1rIfDQW1ELGTRng+AkMeMKLFS/YuEspmBIH8tO p+lKj+zJAX3WWSiOAvCMfXp0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOW0ouM uIwk+hGyJrG7UsaGOjm7MB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9iT43++Ua0swq8V46wyR4Sdv+iQwKbpe3jMFsHOhxYrhX/XKWliSp OBeIWyK9Dl8/1vpJICOPfmvRZoE1fVdwbFgqJf5sEKzu6AwmguBLaMX4ouruerNk ebmXOvXkT0MzDCrOCnVCzD8Z+qb+g+oPt4lmkgoZ38TN9GvR0SB1PwxRzfAftc3Q QKnyHgJUzu4bSUFz0sYWww5zr5RkIjhWSAIap62YThaabwv2XO68ZKplCBxzPbTU WxnYhfk6vwAarD1Hqz8FMO8CCQMgdmjf4NiLZRqFFu2/tqkxqUz0wcuVG2sUyvb5 aGSDJXkBj3j75kJF6a6aVc7tV1xcsk+i -----END CERTIFICATE-----Generated at Mon May 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org