$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json) Hash identifier: 2kdxvhsV7V3iktfVBZ7LYTK3uWA3QqYE+IYAjmb+Y/g= Subject key identifier: 05:F7:E7:96:7A:FF:17:68:8E:47:BC:04:82:3B:24:7B:2F:08:94:EA Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft Manifest number: 2B Signing time: Wed 15 May 2024 08:47:56 +0000 Manifest this update: Wed 15 May 2024 08:47:56 +0000 Manifest next update: Wed 22 May 2024 08:47:55 +0000 Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: hoHDEfQJYWkB5A5xc3vqQHvDQVtTMGtwzHmcclqYlvc=) 2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: ZfM8fwEWg7Cl4U2TTJqmh5c5IOhoGVnknztqF/uNSss=) 3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: Jctjnz4ZAWmlvP4Z4MtmplLYI/qLXEuNRoWhVRUxKcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: May 15 08:47:56 2024 GMT Not After : May 22 08:47:55 2024 GMT Subject: CN=664476bc-6ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:01:43:19:17:f5:b0:2f:44:b8:08:09:d2: e2:57:18:91:a5:39:25:17:47:f5:49:20:ae:ff:1d: 47:5c:08:02:df:b1:ca:98:63:59:90:7b:e7:3e:a1: 68:15:a0:48:4c:4b:fd:ac:6d:48:98:bc:b5:de:ee: b3:b5:59:40:b5:93:26:0b:4c:37:cd:c7:50:b1:d4: a0:bc:c4:a7:66:30:6b:20:7d:81:cc:02:5b:ed:7c: 80:e1:2a:b1:9e:b2:58:91:15:50:fc:7a:8f:cd:94: 38:f2:6d:bd:ee:e2:cf:e7:0f:b5:d5:da:81:d6:03: 17:1e:87:4a:d5:78:54:27:ad:0d:0e:d6:6b:d4:10: 01:4b:a2:c0:b7:e2:45:a2:35:b4:2a:18:78:86:42: f6:e3:fc:05:3e:93:62:d3:f8:81:51:cf:7f:ba:2f: 46:2a:0c:1f:17:77:53:40:7b:54:a5:d5:9f:c4:ac: 58:2f:ff:a3:38:04:00:74:d2:53:1c:f9:b5:ea:b4: 3f:de:19:13:19:8b:ac:0b:87:c6:ac:02:7f:1d:b5: 22:6e:d2:03:43:7b:54:84:92:34:98:5d:c9:45:e4: 9e:41:6c:92:7e:88:8e:ac:32:0a:5d:76:13:75:c2: af:08:f9:a5:6c:83:f6:8a:85:d2:2d:ee:98:09:87: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F7:E7:96:7A:FF:17:68:8E:47:BC:04:82:3B:24:7B:2F:08:94:EA X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1a:dd:46:b6:0c:e4:30:20:1b:e9:4d:d8:23:f6:55:3c:34: f5:38:7e:33:20:2c:0c:47:01:2e:56:e5:a7:7d:2d:e7:4f:50: 37:ec:85:07:1d:cd:b3:3a:08:c9:f8:9a:ed:20:9c:c1:bc:79: 8d:16:0a:56:22:aa:42:54:d1:ca:e6:55:22:b5:89:72:90:ed: e4:34:be:72:78:d9:dd:22:61:dc:83:11:ff:38:e6:3f:3c:d7: 72:5c:3b:8f:35:68:94:3f:ac:f5:97:de:0a:9e:a8:9d:be:00: 83:09:a3:65:ef:a9:ef:70:17:62:7a:f1:dd:24:27:74:cd:0b: 31:d2:f1:89:a6:5c:95:71:81:89:2f:0d:ff:1c:33:e1:ec:d5: 95:65:ed:50:59:20:01:42:03:3b:83:b5:bd:23:86:6c:f8:7e: 47:16:be:c6:4a:92:9c:ff:58:41:85:5a:94:34:71:9c:27:64: 5a:d8:86:fd:5b:c5:96:c9:31:92:14:ed:af:25:47:c0:7c:7d: 56:73:f8:0b:66:18:c0:ea:0d:cd:3a:d7:19:06:17:e4:3d:34: 34:e2:9e:d0:71:41:59:5a:28:f0:ba:01:45:44:9e:a6:42:87: 8a:73:b1:30:51:7f:b0:b4:1c:37:a3:8a:b9:af:5b:78:01:5a: d7:c6:58:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDg0OTExMC8GA1UEBRMoQjZDQzAyQTdEQjhBNERCNTMwRjExMkI2MjI0RjE5MDgw ODY4RkJEOTAeFw0yNDA1MTUwODQ3NTZaFw0yNDA1MjIwODQ3NTVaMBgxFjAUBgNV BAMTDTY2NDQ3NmJjLTZlYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgUgFDGRf1sC9EuAgJ0uJXGJGlOSUXR/VJIK7/HUdcCALfscqYY1mQe+c+oWgV oEhMS/2sbUiYvLXe7rO1WUC1kyYLTDfNx1Cx1KC8xKdmMGsgfYHMAlvtfIDhKrGe sliRFVD8eo/NlDjybb3u4s/nD7XV2oHWAxceh0rVeFQnrQ0O1mvUEAFLosC34kWi NbQqGHiGQvbj/AU+k2LT+IFRz3+6L0YqDB8Xd1NAe1Sl1Z/ErFgv/6M4BAB00lMc +bXqtD/eGRMZi6wLh8asAn8dtSJu0gNDe1SEkjSYXclF5J5BbJJ+iI6sMgpddhN1 wq8I+aVsg/aKhdIt7pgJh7SlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBffnlnr/ F2iOR7wEgjskey8IlOowHwYDVR0jBBgwFoAUtswCp9uKTbUw8RK2Ik8ZCAho+9kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0ODQ5LzA4N0QzRUU4RTY2 RDExRUU4QTMxQTk2MEM0RjlBRTAyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHN3Q3A5dUtUYlV3OFJLMklrOFpDQWhvLTlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 ODQ5LzA4N0QzRUU4RTY2RDExRUU4QTMxQTk2MEM0RjlBRTAyL3Rzd0NwOXVLVGJV dzhSSzJJazhaQ0Foby05ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABoa3Ua2DOQwIBvpTdgj9lU8NPU4fjMgLAxHAS5W5ad9LedPUDfshQcd zbM6CMn4mu0gnMG8eY0WClYiqkJU0crmVSK1iXKQ7eQ0vnJ42d0iYdyDEf845j88 13JcO481aJQ/rPWX3gqeqJ2+AIMJo2Xvqe9wF2J68d0kJ3TNCzHS8YmmXJVxgYkv Df8cM+Hs1ZVl7VBZIAFCAzuDtb0jhmz4fkcWvsZKkpz/WEGFWpQ0cZwnZFrYhv1b xZbJMZIU7a8lR8B8fVZz+AtmGMDqDc061xkGF+Q9NDTintBxQVlaKPC6AUVEnqZC h4pzsTBRf7C0HDejirmvW3gBWtfGWGA= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org