$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: /wrLFIPEzvnE2AlmQVxFfH4KjH4RiE/NcA0IPbmbwVk= Subject key identifier: A7:EC:6F:54:1E:D1:E2:F3:DB:61:6E:A5:06:6E:B2:53:4C:0D:DB:B0 Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 89 Signing time: Wed 15 May 2024 07:11:25 +0000 Manifest this update: Wed 15 May 2024 07:11:24 +0000 Manifest next update: Wed 22 May 2024 07:11:24 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: Krd6IaguWsq+rSF5xCObPFLbDn8RJVtfWsY9xNYh86s=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: 5G2/6qdtWymtuTOZ3miKtTFD/Ay9Pe72ABcm56mOUP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: May 15 07:11:24 2024 GMT Not After : May 22 07:11:24 2024 GMT Subject: CN=6644601d-793b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:8b:1a:2a:bb:c3:de:e3:8b:d5:ae:48:80: d2:43:83:22:ad:07:f0:09:08:ae:8e:93:d8:b0:67: 0a:bf:ad:a4:c4:e2:cb:6b:47:15:e3:b8:ff:dd:e6: 63:50:bd:a3:f8:92:b8:ab:90:42:34:f4:b9:34:96: 0f:5c:56:b7:e9:a8:ca:2a:a8:79:59:57:e1:50:e6: c4:4a:66:1e:8b:bf:29:a2:a2:89:11:aa:6e:89:d8: d9:19:b8:5c:4d:66:44:fa:2e:c1:6d:ec:b1:b5:c8: 55:29:c0:93:84:24:d7:f2:71:4c:1a:2e:0b:7a:f1: df:18:2a:4a:1d:97:4a:f8:92:22:ab:d5:b5:26:43: c1:74:1c:bb:ae:c7:70:23:11:0e:91:cd:9d:c8:7f: ed:94:6f:59:fe:01:8b:3a:e7:69:20:f7:39:bf:32: fd:23:bb:be:bd:ab:9d:f8:87:3e:14:96:ef:c8:a7: 5c:3f:d9:71:99:b1:a2:cc:81:d9:1d:d6:15:a3:4a: 35:6c:94:44:7d:bf:aa:67:c9:fb:56:b9:fe:1f:a0: bc:ee:fc:cd:17:08:16:7d:1c:bb:25:ca:74:8d:92: 70:ee:7d:a5:16:82:3c:e5:e1:df:5e:39:fe:a9:27: 7b:b7:96:58:fd:b4:59:64:4b:f2:b3:72:c7:bc:0e: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:6F:54:1E:D1:E2:F3:DB:61:6E:A5:06:6E:B2:53:4C:0D:DB:B0 X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f4:52:b7:22:70:4f:51:8d:84:af:bd:2d:b9:ef:94:73:9f: 14:3f:77:a7:15:28:87:63:0a:bc:1a:f9:5d:38:4e:d2:07:f3: bc:8a:5e:e1:3f:db:a2:ad:0b:02:3f:26:f6:0c:8b:f9:e5:0f: 32:cc:3b:f0:78:7b:99:1a:c3:b5:d2:26:f6:7d:14:13:17:49: 31:0a:09:7f:9b:06:b6:f0:a2:28:6a:14:c0:ef:1c:55:78:fe: a2:99:74:ec:1e:a1:e5:43:d0:73:7a:77:e6:ca:3a:ca:07:9f: d6:e3:17:30:44:81:a5:88:59:fd:33:dd:22:41:86:c4:92:71: 92:e8:92:0a:63:cf:99:b3:fa:6b:7a:68:17:d7:e5:ab:e9:37: 18:bc:5b:d7:c0:75:91:97:0f:e8:87:4a:b8:9a:a1:10:b5:96: c5:18:eb:05:96:92:0a:0f:59:d2:5a:8b:47:04:5f:9f:1b:6b: bd:3d:8c:2e:91:c3:7f:be:71:17:f5:e0:d9:ad:0d:6f:26:24: ea:a9:be:cf:57:5a:ac:41:86:2c:1f:d9:ea:fd:3f:55:17:03: 7e:80:77:f7:62:a9:b0:aa:8b:94:45:6f:78:a5:20:5a:eb:7b: bd:b7:d0:01:74:ef:b1:1c:3a:a6:39:53:83:33:98:66:3c:41: 4b:6b:66:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjQwNTE1MDcxMTI0WhcNMjQwNTIyMDcxMTI0WjAYMRYwFAYD VQQDEw02NjQ0NjAxZC03OTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi6LGiq7w97ji9WuSIDSQ4MirQfwCQiujpPYsGcKv62kxOLLa0cV47j/3eZj UL2j+JK4q5BCNPS5NJYPXFa36ajKKqh5WVfhUObESmYei78poqKJEapuidjZGbhc TWZE+i7BbeyxtchVKcCThCTX8nFMGi4LevHfGCpKHZdK+JIiq9W1JkPBdBy7rsdw IxEOkc2dyH/tlG9Z/gGLOudpIPc5vzL9I7u+vaud+Ic+FJbvyKdcP9lxmbGizIHZ HdYVo0o1bJREfb+qZ8n7Vrn+H6C87vzNFwgWfRy7Jcp0jZJw7n2lFoI85eHfXjn+ qSd7t5ZY/bRZZEvys3LHvA7ZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfsb1Qe 0eLz22FupQZuslNMDduwMB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG9FK3InBPUY2Er70tue+Uc58UP3enFSiHYwq8GvldOE7SB/O8il7h P9uirQsCPyb2DIv55Q8yzDvweHuZGsO10ib2fRQTF0kxCgl/mwa28KIoahTA7xxV eP6imXTsHqHlQ9BzenfmyjrKB5/W4xcwRIGliFn9M90iQYbEknGS6JIKY8+Zs/pr emgX1+Wr6TcYvFvXwHWRlw/oh0q4mqEQtZbFGOsFlpIKD1nSWotHBF+fG2u9PYwu kcN/vnEX9eDZrQ1vJiTqqb7PV1qsQYYsH9nq/T9VFwN+gHf3YqmwqouURW94pSBa 63u9t9ABdO+xHDqmOVODM5hmPEFLa2Ya -----END CERTIFICATE-----Generated at Wed May 15 09:27:29 2024 by rpki-client on console-fra.rpki-client.org