$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: kDOrknghjRl627bZlNBrjhb9lUyrWHT5zzvyCGIurm4= Subject key identifier: C6:9E:23:31:35:56:AF:7D:11:05:17:84:27:FD:E7:79:9B:08:EF:FE Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 9B Signing time: Wed 15 May 2024 06:58:32 +0000 Manifest this update: Wed 15 May 2024 06:58:32 +0000 Manifest next update: Wed 22 May 2024 06:58:32 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: 4pih2SkML+JfrIrspjMj7AwO+fccn2Ieo7+vGXZmdXQ=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: /mCBbh0EpdJglUX6f2RyAGtt1DV/FaGs/dNz5ctYOlI=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: OC8kdJyuGXU0Yb4WKs/F92dMNZJfek4oISbI+7aQJxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: May 15 06:58:32 2024 GMT Not After : May 22 06:58:32 2024 GMT Subject: CN=66445d18-3331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f1:13:6f:e1:0f:01:94:7f:05:9c:fe:a1:44: be:65:b8:03:ff:26:b7:73:c2:3c:06:f5:25:75:ec: 33:5d:bf:25:01:74:ce:eb:a4:72:8b:4e:08:8b:71: 55:c6:d2:75:a2:b8:ae:cc:b5:82:46:a0:88:48:ce: d6:05:4f:d3:52:5a:ba:bf:cd:8a:15:04:08:4e:22: 45:39:5b:dc:52:19:f4:49:02:4a:d7:18:8a:1b:f0: 65:42:5f:5c:e2:86:7e:56:6b:b6:a2:3f:73:c4:9d: 17:ea:2d:0f:ba:e9:22:b6:ef:3a:18:db:44:08:fb: 55:39:27:7d:50:56:4c:67:b9:99:d3:c8:93:9f:28: a1:87:7b:f4:14:91:cf:f0:5b:15:0b:5f:dc:9c:37: dd:5c:a6:cf:6b:b2:3e:f1:84:dc:cb:e1:3f:55:fe: 67:5e:ab:91:67:b8:d6:6c:53:0c:90:98:cc:f0:90: 03:e3:1b:63:b5:21:c5:61:1c:77:ff:a6:a5:d8:1d: 07:d6:30:74:e3:8f:22:60:d0:df:81:c5:ac:5e:77: 4b:e5:fa:57:f6:cb:5f:52:8b:04:70:14:f6:a2:cf: 27:da:e9:88:ab:ea:53:7c:73:a4:6f:94:9d:26:e2: 6c:21:65:b2:46:e1:2b:fc:c8:ea:75:a8:f6:47:0f: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:23:31:35:56:AF:7D:11:05:17:84:27:FD:E7:79:9B:08:EF:FE X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:32:23:b3:d1:be:04:8f:66:3f:f5:36:1a:4d:ed:27:0e:55: a3:6f:51:a9:2d:e4:22:54:37:88:a2:6e:e6:66:2c:63:9c:7f: e0:78:20:83:26:d3:bd:6a:45:3e:26:52:16:02:c4:dd:06:1d: ad:5c:bf:32:26:4e:b2:82:4f:3c:7c:f8:9b:f3:9a:d1:9f:42: 32:eb:cb:27:7d:e1:39:7b:7e:00:0a:97:89:9a:aa:da:d4:74: b3:d7:b4:bb:6b:d1:f5:a5:76:99:cd:14:33:55:41:fd:1f:7f: 6d:48:10:83:32:43:ea:9f:4f:94:ba:af:ac:1b:63:c8:3b:a8: 41:f8:b9:69:92:51:44:fb:75:77:2f:8f:8a:fd:cc:16:ee:b8: 69:72:f7:6d:44:8f:8b:f5:79:ae:ef:89:ba:c1:20:98:39:22: 6f:7f:cb:6f:c8:a6:68:fd:c9:fa:4f:b9:6c:e4:c3:05:b2:89: 26:74:97:e6:cd:e8:57:59:82:97:b4:aa:8f:13:45:43:24:ab: 49:1b:4d:18:64:3b:34:7e:e6:60:3d:2b:b7:d2:c5:be:83:98: 86:94:3b:e7:27:ae:8d:10:11:f7:6b:41:7b:e1:c0:41:68:9b: 39:81:38:02:90:bb:76:15:64:f4:43:02:76:19:7e:8d:1f:20: 03:91:2f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjQwNTE1MDY1ODMyWhcNMjQwNTIyMDY1ODMyWjAYMRYwFAYD VQQDEw02NjQ0NWQxOC0zMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fETb+EPAZR/BZz+oUS+ZbgD/ya3c8I8BvUldewzXb8lAXTO66Ryi04Ii3FV xtJ1oriuzLWCRqCISM7WBU/TUlq6v82KFQQITiJFOVvcUhn0SQJK1xiKG/BlQl9c 4oZ+Vmu2oj9zxJ0X6i0Puukitu86GNtECPtVOSd9UFZMZ7mZ08iTnyihh3v0FJHP 8FsVC1/cnDfdXKbPa7I+8YTcy+E/Vf5nXquRZ7jWbFMMkJjM8JAD4xtjtSHFYRx3 /6al2B0H1jB0448iYNDfgcWsXndL5fpX9stfUosEcBT2os8n2umIq+pTfHOkb5Sd JuJsIWWyRuEr/Mjqdaj2Rw/K3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaeIzE1 Vq99EQUXhCf953mbCO/+MB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUMiOz0b4Ej2Y/9TYaTe0nDlWjb1GpLeQiVDeIom7mZixjnH/geCCD JtO9akU+JlIWAsTdBh2tXL8yJk6ygk88fPib85rRn0Iy68snfeE5e34ACpeJmqra 1HSz17S7a9H1pXaZzRQzVUH9H39tSBCDMkPqn0+Uuq+sG2PIO6hB+LlpklFE+3V3 L4+K/cwW7rhpcvdtRI+L9Xmu74m6wSCYOSJvf8tvyKZo/cn6T7ls5MMFsokmdJfm zehXWYKXtKqPE0VDJKtJG00YZDs0fuZgPSu30sW+g5iGlDvnJ66NEBH3a0F74cBB aJs5gTgCkLt2FWT0QwJ2GX6NHyADkS+d -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org