$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json) Hash identifier: uVS13Z/0ntuBXcY5YK7y5TZ0f5N6vuWMMv5+vHLNnrE= Subject key identifier: 7C:3B:FC:20:AF:E0:3F:03:A1:7D:9C:FA:26:A2:A8:8D:28:EB:37:08 Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft Manifest number: DA Signing time: Fri 25 Apr 2025 04:43:49 +0000 Manifest this update: Fri 25 Apr 2025 04:43:48 +0000 Manifest next update: Fri 02 May 2025 04:43:48 +0000 Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: tOqGs0ZICFfUqugXUv/twuoG+e9nY1Iqw9i3Uubwbdc=) 2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: ZfM8fwEWg7Cl4U2TTJqmh5c5IOhoGVnknztqF/uNSss=) 3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: Jctjnz4ZAWmlvP4Z4MtmplLYI/qLXEuNRoWhVRUxKcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: Apr 25 04:43:48 2025 GMT Not After : May 2 04:43:48 2025 GMT Subject: CN=680b1305-e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:b5:f3:eb:02:93:c1:44:44:ba:88:8c:eb: 43:ab:a9:8d:f2:dd:54:61:72:bc:36:34:2b:cd:15: 40:1e:8d:d6:69:ea:b9:c3:d4:11:56:1c:87:9d:3d: 02:83:fb:c1:06:36:78:87:1b:6b:d2:b5:a3:16:22: 36:59:f0:0b:29:5d:51:24:80:69:9f:75:da:ed:cb: 43:5f:ba:ff:13:03:d2:31:81:0b:ae:ba:d7:c5:9d: ef:3b:0b:20:12:42:36:79:e2:e8:68:21:c1:ab:43: 4c:09:f8:17:ce:31:e5:a1:0a:ae:07:05:3b:ff:ec: de:50:41:b9:fd:a7:f6:28:3d:3d:ad:fb:63:9a:ca: ae:22:a9:22:14:8d:bb:58:34:4b:df:b5:64:8b:c2: a5:e3:a4:9f:95:b2:5b:74:f9:54:5c:1b:7e:26:d3: 65:c5:08:cf:8e:f1:ad:9b:14:aa:7a:03:e6:e3:96: 57:25:be:34:3c:62:e4:e8:46:26:ac:8c:5f:d8:16: 88:9e:97:53:1c:ab:de:96:62:b0:58:79:e1:94:db: e6:55:56:61:44:ef:cf:96:b2:eb:56:7a:d5:b4:dd: c2:2b:76:d8:f6:b3:b3:fc:23:cd:a3:cc:31:49:ba: 81:f8:21:5e:22:c1:f5:08:d5:6b:11:f2:19:2d:c5: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:FC:20:AF:E0:3F:03:A1:7D:9C:FA:26:A2:A8:8D:28:EB:37:08 X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8a:b2:10:7f:00:ca:ba:9d:a0:78:59:88:0a:dc:97:a3:e9: a8:1a:29:28:cf:9b:f5:76:2a:21:97:c3:f3:ea:77:56:1a:ca: 8e:9c:c5:c0:88:77:b6:01:46:ac:73:d3:21:db:a7:5c:8c:c2: b3:2a:4a:eb:14:22:d9:65:8b:fb:69:78:d3:31:3f:1e:94:11: b9:a4:ae:8f:0b:95:aa:0e:a9:6f:3f:89:c8:d9:79:7e:02:17: cb:2e:6b:a5:c5:e2:21:48:af:a8:42:ca:9e:6a:f1:8b:60:50: 5f:72:dd:bc:67:a9:04:cc:9d:45:3b:86:89:e0:af:04:2f:ba: d3:d0:f9:ad:d8:7f:0f:ea:dc:e7:25:bf:d2:c4:74:2b:35:77: c5:30:cb:1c:3f:b1:98:72:12:10:a3:9a:b2:1b:e1:14:27:33: c3:98:d3:65:c0:e5:c9:3e:0b:b0:de:4c:bf:f5:e8:c3:7f:2e: f4:9a:fa:cf:c4:d0:c6:d7:c0:49:c1:64:1b:ad:f6:43:82:1b: 35:51:a7:75:60:53:1f:0b:86:28:35:af:9f:a1:7f:d6:3b:08: 4c:38:94:e8:38:e5:66:75:af:43:aa:61:bc:76:b2:58:96:09: cb:0d:fa:3c:ef:70:fd:eb:08:4b:5a:30:0d:f6:cd:7b:62:a4: 72:68:74:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4 MDg2OEZCRDkwHhcNMjUwNDI1MDQ0MzQ4WhcNMjUwNTAyMDQ0MzQ4WjAYMRYwFAYD VQQDEw02ODBiMTMwNS1lNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfC18+sCk8FERLqIjOtDq6mN8t1UYXK8NjQrzRVAHo3Waeq5w9QRVhyHnT0C g/vBBjZ4hxtr0rWjFiI2WfALKV1RJIBpn3Xa7ctDX7r/EwPSMYELrrrXxZ3vOwsg EkI2eeLoaCHBq0NMCfgXzjHloQquBwU7/+zeUEG5/af2KD09rftjmsquIqkiFI27 WDRL37Vki8Kl46SflbJbdPlUXBt+JtNlxQjPjvGtmxSqegPm45ZXJb40PGLk6EYm rIxf2BaInpdTHKvelmKwWHnhlNvmVVZhRO/PlrLrVnrVtN3CK3bY9rOz/CPNo8wx SbqB+CFeIsH1CNVrEfIZLcWS4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw7/CCv 4D8DoX2c+iaiqI0o6zcIMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2 NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArirIQfwDKup2geFmICtyXo+moGikoz5v1diohl8Pz6ndWGsqOnMXA iHe2AUasc9Mh26dcjMKzKkrrFCLZZYv7aXjTMT8elBG5pK6PC5WqDqlvP4nI2Xl+ AhfLLmulxeIhSK+oQsqeavGLYFBfct28Z6kEzJ1FO4aJ4K8EL7rT0Pmt2H8P6tzn Jb/SxHQrNXfFMMscP7GYchIQo5qyG+EUJzPDmNNlwOXJPguw3ky/9ejDfy70mvrP xNDG18BJwWQbrfZDghs1Uad1YFMfC4YoNa+foX/WOwhMOJToOOVmda9DqmG8drJY lgnLDfo873D96whLWjAN9s17YqRyaHSj -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:18 2025 by rpki-client