$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json) Hash identifier: wFcrFbBj2X8NwuecynfkEim37xw/Vrc44pNC907SACc= Subject key identifier: 59:94:82:A4:B1:CA:BB:38:E0:FE:2D:E7:9C:E5:E7:CA:D9:60:37:C2 Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft Manifest number: 06A5 Signing time: Sat 18 May 2024 23:15:30 +0000 Manifest this update: Sat 18 May 2024 23:15:30 +0000 Manifest next update: Sat 25 May 2024 23:15:30 +0000 Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: v0cARQmOeG7NVmCBXnRVpKb1EensETTgd88jOTMFVEU=) 2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: zJ5bnaTZj3Ld8nhAh8iVf+mcSTjqXkgD46/psLs9Wko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Validity Not Before: May 18 23:15:30 2024 GMT Not After : May 25 23:15:30 2024 GMT Subject: CN=66493692-d724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:3b:19:71:fe:d8:1a:6e:73:7f:65:1d:84: 08:1c:93:9b:cf:73:a5:82:a8:4d:66:ee:89:cd:00: a2:fc:23:61:f3:b4:ee:a0:83:19:15:7d:92:f2:16: ed:39:0d:d1:9e:38:41:5b:7f:61:75:db:29:7f:89: de:e6:b6:2d:f2:32:4a:0a:20:53:54:de:33:1b:7d: 3b:ab:f8:fe:b0:3d:df:8f:b1:dd:52:56:03:05:cc: ad:50:8a:9e:57:99:cc:79:cb:8d:e7:77:d5:c1:da: e4:bd:09:a0:a5:99:c9:c9:93:56:c0:b5:f9:04:48: 05:8e:89:aa:6a:b0:ae:50:79:0e:cb:3d:8e:6a:bd: 71:9b:f5:18:e9:5b:15:29:0d:da:18:ce:66:45:01: c5:e7:9c:17:9a:e7:49:3a:ac:3e:45:89:e5:bd:77: b8:73:c6:e9:50:ed:11:69:b5:c7:cd:1a:0d:72:5c: 0e:49:4f:53:e3:7a:f4:c2:b6:bc:b9:b7:fb:bf:0f: 4b:53:49:92:65:f1:a3:6a:0e:5e:1b:1f:a1:b9:f4: e4:e8:e3:86:ed:9c:6c:e2:72:18:eb:f4:f8:8d:a7: 5a:a3:26:7a:d7:6f:1a:a8:be:64:da:20:22:ff:57: fd:81:18:25:cc:25:84:e7:2e:bf:7d:55:a1:45:83: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:94:82:A4:B1:CA:BB:38:E0:FE:2D:E7:9C:E5:E7:CA:D9:60:37:C2 X509v3 Authority Key Identifier: keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:23:8f:91:27:85:3c:a7:72:69:2f:7d:1f:63:f3:ad:0a:09: 74:5c:43:07:f4:06:65:fc:9d:55:44:82:a1:10:7e:aa:d5:48: 38:30:8e:ec:9d:64:7e:b1:64:f6:8e:fe:2d:55:57:64:9a:5d: f1:53:70:da:50:ab:40:99:75:d4:73:c6:c1:4d:04:62:f3:93: 36:f6:52:c9:12:6c:64:a8:0c:83:7b:b4:11:bd:c6:58:a7:5c: 5a:00:9f:19:5e:49:6a:aa:07:b6:f2:28:e1:06:29:bd:70:cc: f8:9f:9c:f2:ea:bb:35:93:23:c3:4a:28:d0:7e:8e:e8:b6:dc: 15:21:70:81:97:41:8a:96:a2:c6:18:81:f0:1b:84:08:c2:6d: 5f:38:32:db:2a:e5:cd:f8:2e:67:84:35:26:cd:67:e2:f8:a0: 16:0d:9c:89:ff:ba:d5:08:cb:4d:f7:ef:50:52:29:37:17:a5: 00:20:ca:9b:91:63:24:62:0e:bb:fa:3c:35:50:6a:b9:b6:0e: f7:b9:e6:8a:f3:1e:4a:81:4f:03:3d:18:53:19:62:92:50:2d: 81:fc:e1:29:41:17:55:93:ad:00:68:bc:68:8d:d8:ac:fe:81: 25:c9:a9:d9:9f:0a:77:3d:22:00:6e:47:88:7a:8a:ed:97:fd: b9:fe:96:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC RTNFRjVDNDgwHhcNMjQwNTE4MjMxNTMwWhcNMjQwNTI1MjMxNTMwWjAYMRYwFAYD VQQDEw02NjQ5MzY5Mi1kNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA87GXH+2Bpuc39lHYQIHJObz3OlgqhNZu6JzQCi/CNh87TuoIMZFX2S8hbt OQ3RnjhBW39hddspf4ne5rYt8jJKCiBTVN4zG307q/j+sD3fj7HdUlYDBcytUIqe V5nMecuN53fVwdrkvQmgpZnJyZNWwLX5BEgFjomqarCuUHkOyz2Oar1xm/UY6VsV KQ3aGM5mRQHF55wXmudJOqw+RYnlvXe4c8bpUO0RabXHzRoNclwOSU9T43r0wra8 ubf7vw9LU0mSZfGjag5eGx+hufTk6OOG7Zxs4nIY6/T4jadaoyZ6128aqL5k2iAi /1f9gRglzCWE5y6/fVWhRYMZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmUgqSx yrs44P4t55zl58rZYDfCMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9I4+RJ4U8p3JpL30fY/OtCgl0XEMH9AZl/J1VRIKhEH6q1Ug4MI7s nWR+sWT2jv4tVVdkml3xU3DaUKtAmXXUc8bBTQRi85M29lLJEmxkqAyDe7QRvcZY p1xaAJ8ZXklqqge28ijhBim9cMz4n5zy6rs1kyPDSijQfo7ottwVIXCBl0GKlqLG GIHwG4QIwm1fODLbKuXN+C5nhDUmzWfi+KAWDZyJ/7rVCMtN9+9QUik3F6UAIMqb kWMkYg67+jw1UGq5tg73ueaK8x5KgU8DPRhTGWKSUC2B/OEpQRdVk60AaLxojdis /oElyanZnwp3PSIAbkeIeortl/25/pbp -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org