$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json) Hash identifier: QUaNERE8Ri7J2HGkTnDKvA+FiaMtBgkp4tFXCXxXybg= Subject key identifier: B6:A5:75:56:F1:37:C2:C4:D5:1D:66:14:36:09:D8:51:E5:8B:7C:0B Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft Manifest number: E7 Signing time: Sat 17 May 2025 05:06:41 +0000 Manifest this update: Sat 17 May 2025 05:06:40 +0000 Manifest next update: Sat 24 May 2025 05:06:40 +0000 Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: QgXRyVz3CPTC8akXmjjSX/kzNx/K5eOzNWe0gCJ8j38=) 2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: HcCqoeJLN9vwPOWgJmrLe07H2GhuCLd/hVfLcTJpq2o=) 3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: X8EbZsDCunbUgYMWUd9RkHifxlYXQi2zXDu+dO2RG4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: May 17 05:06:40 2025 GMT Not After : May 24 05:06:40 2025 GMT Subject: CN=68281960-2c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fb:bc:b0:66:7b:41:66:c3:70:ba:04:c0:b4: e9:38:ba:ab:86:a2:0e:ff:ff:43:3f:e5:65:05:c8: 79:6f:72:42:1d:09:f5:c4:96:83:dc:5a:0d:71:c4: 71:8c:02:6d:1b:41:7a:3f:32:a7:e5:c4:d6:d1:d5: 5f:74:88:8e:8f:9f:11:70:01:f6:8c:66:cc:aa:e3: f6:1d:b2:96:24:c5:db:7b:f1:cd:04:d4:d0:c4:a0: 0c:a4:67:90:65:83:55:7e:aa:8e:ff:77:0b:ef:b5: 33:b0:e8:28:63:f4:d5:85:c0:02:42:ca:19:0b:69: 8f:3f:b4:c9:de:01:73:99:04:86:44:0e:52:4a:20: 39:3f:27:a7:c5:e4:9d:9d:f8:09:4c:dd:6f:57:7d: 22:3d:8b:65:86:2a:a0:be:7c:3e:1c:f5:51:6e:d3: 09:88:db:c5:6f:42:aa:9f:ab:56:d0:55:40:80:af: ad:15:75:9e:6c:7d:94:22:1c:29:63:c3:04:bb:87: a2:78:df:c2:f5:f2:e3:94:4e:36:6f:00:82:4b:6d: d6:4c:04:8b:96:03:8b:d2:2c:34:c8:73:af:e4:26: aa:39:61:fd:b9:02:30:d7:95:7f:a0:30:3b:46:e1: 4a:f8:31:fe:39:9b:0a:73:3a:fe:0e:56:29:86:71: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A5:75:56:F1:37:C2:C4:D5:1D:66:14:36:09:D8:51:E5:8B:7C:0B X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ec:20:0a:8c:99:d3:be:cf:b1:81:cc:7d:d7:e3:54:eb:4d: a1:7d:2d:88:07:f4:21:92:8e:91:90:9d:63:23:c0:0d:ed:e3: a8:57:26:ea:22:dd:77:98:1e:19:43:24:9c:7f:b1:8b:47:38: 0e:cb:63:7a:ea:c2:10:e2:b4:5d:75:14:60:c7:a8:48:e8:24: 10:97:8a:4f:21:94:20:34:61:86:32:f2:4a:97:91:28:9c:7b: 20:db:9f:05:c4:96:57:af:c6:2e:56:75:b4:5f:f6:11:db:15: a3:38:97:27:99:37:18:c5:47:5f:58:4e:fd:e4:0a:6c:3d:52: e5:fe:f8:bd:eb:f9:b1:ed:84:9d:bd:8d:86:64:2f:bb:ce:10: c0:e4:f9:69:e6:52:c1:85:0c:7b:97:31:16:ee:3d:e4:d7:06: a1:05:aa:c6:38:25:7b:60:90:54:e3:d3:83:2f:6e:76:52:c3: 3a:62:27:d5:de:54:1e:23:c8:d7:a9:a0:f3:79:bc:96:7f:ea: d0:a5:51:39:41:99:ff:39:fc:40:89:49:f6:f9:20:da:f4:8d: 03:a9:7e:a8:9f:99:a4:0a:69:43:58:5a:cf:9c:9b:a5:55:f6: 79:c4:b4:05:bd:2b:22:de:86:ca:19:49:d7:b2:83:2e:12:58: 1e:86:17:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4 MDg2OEZCRDkwHhcNMjUwNTE3MDUwNjQwWhcNMjUwNTI0MDUwNjQwWjAYMRYwFAYD VQQDEw02ODI4MTk2MC0yYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fu8sGZ7QWbDcLoEwLTpOLqrhqIO//9DP+VlBch5b3JCHQn1xJaD3FoNccRx jAJtG0F6PzKn5cTW0dVfdIiOj58RcAH2jGbMquP2HbKWJMXbe/HNBNTQxKAMpGeQ ZYNVfqqO/3cL77UzsOgoY/TVhcACQsoZC2mPP7TJ3gFzmQSGRA5SSiA5PyenxeSd nfgJTN1vV30iPYtlhiqgvnw+HPVRbtMJiNvFb0Kqn6tW0FVAgK+tFXWebH2UIhwp Y8MEu4eieN/C9fLjlE42bwCCS23WTASLlgOL0iw0yHOv5CaqOWH9uQIw15V/oDA7 RuFK+DH+OZsKczr+DlYphnExNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaldVbx N8LE1R1mFDYJ2FHli3wLMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2 NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB17CAKjJnTvs+xgcx91+NU602hfS2IB/Qhko6RkJ1jI8AN7eOoVybq It13mB4ZQyScf7GLRzgOy2N66sIQ4rRddRRgx6hI6CQQl4pPIZQgNGGGMvJKl5Eo nHsg258FxJZXr8YuVnW0X/YR2xWjOJcnmTcYxUdfWE795ApsPVLl/vi96/mx7YSd vY2GZC+7zhDA5Plp5lLBhQx7lzEW7j3k1wahBarGOCV7YJBU49ODL252UsM6YifV 3lQeI8jXqaDzebyWf+rQpVE5QZn/OfxAiUn2+SDa9I0DqX6on5mkCmlDWFrPnJul VfZ5xLQFvSsi3obKGUnXsoMuElgehhdy -----END CERTIFICATE-----Generated at Sat May 17 10:33:38 2025 by rpki-client