$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft File: _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json) Hash identifier: OwrRNeRp61WYaJydC3XfGnAuBSUiqJZiOo86ycrG1OM= Subject key identifier: E7:D4:0F:FD:E4:07:66:E5:2F:4A:ED:90:C9:9B:32:AB:FD:FA:2C:50 Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 Certificate issuer: /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft Manifest number: 1231 Signing time: Sat 04 May 2024 20:10:08 +0000 Manifest this update: Sat 04 May 2024 20:10:08 +0000 Manifest next update: Sat 11 May 2024 20:10:08 +0000 Files and hashes: 1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: RsLia6+38nFMP61IYOSm8gD0/aOWe99ttzU/taGY7f0=) 2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: PmB16e5tnD3/IO2PrbsAz/bbTN7MoZTnyBsdpODDg0s=) 3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: 1MXsVVhWdBlk4OJjB5/CwtyIc6CTDhnlVYTEJxIbans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Validity Not Before: May 4 20:10:08 2024 GMT Not After : May 11 20:10:08 2024 GMT Subject: CN=66369620-4b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:27:6d:d1:3d:c7:e6:af:65:90:a3:af:36: c5:da:0a:c4:a9:92:8d:3f:3a:72:2e:0f:c3:d7:eb: 0d:d7:7c:30:bc:4d:e9:11:77:2a:9e:d0:19:2b:19: a6:87:8a:c1:6c:9b:e6:73:2d:67:91:14:84:3e:78: 99:d4:39:4a:e6:d9:90:d5:47:97:bd:7e:d6:34:8d: df:23:4f:32:f0:c4:b7:79:a1:a3:53:a6:20:87:b1: f0:83:4e:62:5d:94:08:2f:0a:10:a4:84:f4:02:e0: bd:0d:fb:19:32:87:e0:04:73:8a:8f:07:49:2a:1f: 25:d4:ac:db:6a:c9:ea:97:22:9a:25:95:9e:8f:1c: 5e:2e:65:26:ae:0c:45:05:69:52:12:72:fa:f7:30: fc:d2:86:4a:90:40:80:89:8e:76:5c:84:a8:c8:36: 92:f6:af:ff:f1:24:e2:f4:56:4f:3b:96:a8:32:b4: a6:d9:30:cf:2f:ed:28:fa:d8:a8:af:1c:a0:97:8d: bb:82:ee:8d:53:db:05:d4:b6:45:57:8b:0c:65:22: 17:31:d4:c5:89:17:16:c8:8e:1f:70:03:0a:58:c4: 97:4b:50:11:f6:4f:af:cf:07:13:1f:c5:5c:b7:57: 55:00:32:da:82:33:c8:f7:b9:65:cc:2f:95:8b:ea: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D4:0F:FD:E4:07:66:E5:2F:4A:ED:90:C9:9B:32:AB:FD:FA:2C:50 X509v3 Authority Key Identifier: keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:1f:75:88:29:97:d4:ca:56:a0:04:f4:29:cd:84:de:f7: 62:8a:07:8a:11:1a:df:21:e6:cf:3b:ca:ad:45:c4:a5:5b:5d: 14:ea:df:59:4c:6e:ce:84:aa:0c:ad:6e:2e:b7:15:78:7f:f7: 5c:43:67:cf:c2:90:f2:bd:7b:7d:9a:98:f4:be:f1:c2:a1:35: 89:59:1b:5d:14:03:af:e6:6e:ef:47:71:b9:8f:9c:9f:00:33: 77:3d:96:fc:61:02:f6:e7:17:5c:0b:74:e9:f8:48:87:43:42: 72:47:a3:c0:0b:3f:fb:f2:f0:96:68:17:3b:42:8d:a1:41:0d: f3:c0:aa:66:a6:72:b9:b1:42:f3:9c:0c:23:24:3b:d6:99:de: f9:e5:0d:02:6d:48:4f:66:e7:19:13:44:82:7a:06:9d:2a:35: 09:9f:39:4e:fa:bc:47:78:1f:63:84:a5:c5:0e:82:4d:3b:74: aa:f2:e0:ee:1f:52:e6:dd:97:5c:b6:0a:91:db:90:d8:7c:66: fc:90:5f:a3:db:5e:ee:0c:fc:68:5e:fb:16:ac:35:c4:7f:63: 17:b2:b2:22:74:46:08:8d:5b:d2:21:28:ed:66:d2:97:09:7a: 83:97:00:1a:94:5f:6e:15:00:62:6d:fc:37:4a:b0:a5:fb:90: 97:fc:09:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKEZEMjVCQTk2MTEwMUI1Q0U2MDE0OTkzQ0U3NDg4RkRC NkYwOEE0MjMwHhcNMjQwNTA0MjAxMDA4WhcNMjQwNTExMjAxMDA4WjAYMRYwFAYD VQQDEw02NjM2OTYyMC00YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYgnbdE9x+avZZCjrzbF2grEqZKNPzpyLg/D1+sN13wwvE3pEXcqntAZKxmm h4rBbJvmcy1nkRSEPniZ1DlK5tmQ1UeXvX7WNI3fI08y8MS3eaGjU6Ygh7Hwg05i XZQILwoQpIT0AuC9DfsZMofgBHOKjwdJKh8l1KzbasnqlyKaJZWejxxeLmUmrgxF BWlSEnL69zD80oZKkECAiY52XISoyDaS9q//8STi9FZPO5aoMrSm2TDPL+0o+tio rxygl427gu6NU9sF1LZFV4sMZSIXMdTFiRcWyI4fcAMKWMSXS1AR9k+vzwcTH8Vc t1dVADLagjPI97llzC+Vi+podQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfUD/3k B2blL0rtkMmbMqv9+ixQMB8GA1UdIwQYMBaAFP0lupYRAbXOYBSZPOdIj9tvCKQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRjNWdGSms4NTBpUDIyOElw Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TVzZsaEVCdGM1Z0ZKazg1MGlQMjI4SXBDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRj NWdGSms4NTBpUDIyOElwQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRIx91iCmX1MpWoAT0Kc2E3vdiigeKERrfIebPO8qtRcSlW10U6t9Z TG7OhKoMrW4utxV4f/dcQ2fPwpDyvXt9mpj0vvHCoTWJWRtdFAOv5m7vR3G5j5yf ADN3PZb8YQL25xdcC3Tp+EiHQ0JyR6PACz/78vCWaBc7Qo2hQQ3zwKpmpnK5sULz nAwjJDvWmd755Q0CbUhPZucZE0SCegadKjUJnzlO+rxHeB9jhKXFDoJNO3Sq8uDu H1Lm3ZdctgqR25DYfGb8kF+j217uDPxoXvsWrDXEf2MXsrIidEYIjVvSISjtZtKX CXqDlwAalF9uFQBibfw3SrCl+5CX/Ano -----END CERTIFICATE-----Generated at Sat May 4 21:19:32 2024 by rpki-client on console-ams.rpki-client.org