$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: TBVUvGW8EX8Ln8eVtn7S/LPi0HdJuGBFj4qMja8iv7E= Subject key identifier: C1:84:31:A4:16:42:42:CA:18:B9:15:85:00:8A:D6:9F:3E:96:19:3C Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 33C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9C31 Signing time: Sat 18 May 2024 14:33:24 +0000 Manifest this update: Sat 18 May 2024 14:33:24 +0000 Manifest next update: Sat 25 May 2024 14:33:24 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: AxM4BML+oAbrFIJv82g1R5GZes0MwY4R9wAyW4DK6R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13248 (0x33c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: May 18 14:33:24 2024 GMT Not After : May 25 14:33:24 2024 GMT Subject: CN=6648bc34-9688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:d5:81:9d:cf:5f:35:0a:4d:a2:a1:0d:99: 06:c6:42:32:ae:c2:80:c7:a7:d6:5e:24:94:2e:be: 43:20:0f:8b:d8:ae:3e:bc:bc:fc:17:62:22:bc:5f: ed:b1:c4:79:73:df:56:5b:5c:e0:49:b7:d0:bf:ea: 45:b1:24:13:59:fa:45:01:47:5c:35:ff:9a:c7:9c: c6:d1:28:ed:a4:ba:26:dc:e8:4e:2b:8d:25:92:b5: 6e:a3:7d:f0:a6:65:37:3a:6b:92:0d:d1:93:ad:ae: d5:da:cf:24:63:52:3a:fb:4a:4b:54:0c:60:d3:87: ea:97:21:b2:dc:7c:4d:df:c5:61:b4:28:2c:8d:a7: 92:f8:45:e8:02:4f:56:40:12:0e:fa:c5:41:db:5c: ab:e1:a7:43:39:1a:6f:39:3f:26:4b:16:8f:83:4f: 4b:c0:d2:d1:6d:41:ec:9b:e8:78:8b:04:2d:8a:82: 98:89:b0:8b:67:e5:c2:f7:3a:e4:6f:1a:ba:7f:49: 9b:be:a3:8a:b0:d0:f4:a5:e4:4d:9a:c8:89:ce:cf: 77:37:a4:05:35:b7:60:5f:a2:5c:ae:13:b9:fc:e7: 26:f0:2c:bf:f8:5c:f0:85:a1:1d:eb:33:1a:23:04: 54:79:68:c9:ef:d1:05:5c:0a:cf:e2:b7:d6:4d:08: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:31:A4:16:42:42:CA:18:B9:15:85:00:8A:D6:9F:3E:96:19:3C X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0a:10:e5:ec:d1:fc:9d:43:1a:c2:07:85:1b:9c:8c:d4:23: ac:40:01:2c:69:14:ae:7a:53:40:2f:38:2e:51:fa:f3:80:17: 57:2e:67:f5:82:10:56:72:9a:d8:44:9b:d7:55:27:c7:6a:ed: 11:07:54:e0:c6:2e:1e:ec:83:28:99:a7:0c:2a:cf:63:34:12: f5:80:68:a3:50:fb:cf:cc:db:67:da:21:e3:44:b1:15:db:63: 2a:94:84:87:d6:37:d3:5b:94:a0:89:78:0e:9a:e4:03:7e:31: e2:24:52:a0:83:02:5c:bc:44:08:e9:e3:2b:3e:48:b6:57:1a: c4:59:ff:18:6b:4b:d9:a3:69:a0:b5:a9:92:e3:f3:b1:88:85: 3b:05:db:21:ab:e4:67:e6:e7:25:5f:3a:75:1d:00:fd:31:34: f0:9a:4b:38:66:17:9e:01:ea:e1:2f:97:98:d1:f9:48:92:fd: 57:62:df:2e:9a:dc:e6:27:18:69:c0:75:eb:a9:a2:c9:62:cb: 86:29:0c:42:cd:07:00:9e:8c:a5:09:33:f5:86:57:8b:58:cc: fe:d1:3b:1b:e4:8b:1e:73:73:c0:39:03:48:4c:69:3e:2c:dd: c7:04:4a:38:b4:c1:df:5f:65:00:5c:7b:68:cc:25:02:37:cf: 1c:0f:d2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjQwNTE4MTQzMzI0WhcNMjQwNTI1MTQzMzI0WjAYMRYwFAYD VQQDEw02NjQ4YmMzNC05Njg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cXVgZ3PXzUKTaKhDZkGxkIyrsKAx6fWXiSULr5DIA+L2K4+vLz8F2IivF/t scR5c99WW1zgSbfQv+pFsSQTWfpFAUdcNf+ax5zG0SjtpLom3OhOK40lkrVuo33w pmU3OmuSDdGTra7V2s8kY1I6+0pLVAxg04fqlyGy3HxN38VhtCgsjaeS+EXoAk9W QBIO+sVB21yr4adDORpvOT8mSxaPg09LwNLRbUHsm+h4iwQtioKYibCLZ+XC9zrk bxq6f0mbvqOKsND0peRNmsiJzs93N6QFNbdgX6JcrhO5/Ocm8Cy/+FzwhaEd6zMa IwRUeWjJ79EFXArP4rfWTQgToQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGEMaQW QkLKGLkVhQCK1p8+lhk8MB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+ChDl7NH8nUMawgeFG5yM1COsQAEsaRSuelNALzguUfrzgBdXLmf1 ghBWcprYRJvXVSfHau0RB1Tgxi4e7IMomacMKs9jNBL1gGijUPvPzNtn2iHjRLEV 22MqlISH1jfTW5SgiXgOmuQDfjHiJFKggwJcvEQI6eMrPki2VxrEWf8Ya0vZo2mg tamS4/OxiIU7Bdshq+Rn5uclXzp1HQD9MTTwmks4ZheeAerhL5eY0flIkv1XYt8u mtzmJxhpwHXrqaLJYsuGKQxCzQcAnoylCTP1hleLWMz+0Tsb5Isec3PAOQNITGk+ LN3HBEo4tMHfX2UAXHtozCUCN88cD9KD -----END CERTIFICATE-----Generated at Sun May 19 09:38:27 2024 by rpki-client on console-fra.rpki-client.org