$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: 6BP0shsTNGidiG3MTWiBQ/XBdohuw6+oIXBs8iQyclk= Subject key identifier: EA:5E:E6:D9:D3:23:B2:91:64:50:6B:70:E1:36:B1:D9:1B:80:27:FA Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: 32 Signing time: Sat 23 Nov 2024 05:34:31 +0000 Manifest this update: Sat 23 Nov 2024 05:34:30 +0000 Manifest next update: Sat 30 Nov 2024 05:34:30 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: 8AzV4sp+sUsyyxUWSgMlW5BqbA1p55Ctg/Avvq4cmSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Nov 23 05:34:30 2024 GMT Not After : Nov 30 05:34:30 2024 GMT Subject: CN=67416966-013b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:6a:aa:31:c9:23:ba:4e:a0:4a:81:dd:d5: d8:3a:20:f7:4c:c3:45:f5:37:5b:1f:c2:82:8f:35: d9:ce:83:57:c0:06:19:58:99:b8:5d:5b:9f:0e:fd: 6d:b4:e1:d0:9a:58:29:5a:6d:4d:d8:83:50:31:77: fe:28:7f:8a:db:09:d5:0a:3e:f6:97:ef:df:38:ff: 0c:2e:b4:2a:9e:2c:3b:69:60:a3:3e:dd:0b:2e:a3: 3d:4c:bb:b8:54:ca:d8:95:8d:5c:18:7f:a9:43:aa: 2a:89:28:6b:60:bb:1d:ae:2a:48:cd:52:27:cc:ab: 8a:ee:02:be:67:ee:46:f7:c6:a9:8c:ad:85:6b:3e: 03:4a:7b:1c:e0:ec:bb:18:d7:d4:37:67:4c:4a:35: 93:fd:0d:3e:35:08:00:bd:33:d0:ca:04:d5:99:0a: 62:88:78:2f:63:b0:b9:1d:fb:6d:f9:0a:0f:36:c2: 98:16:d0:2d:ea:26:2b:46:6f:05:9b:7c:b3:30:fe: bc:b5:34:97:97:21:a6:0c:cd:e2:97:7e:b6:63:dd: c5:9b:71:25:ae:92:ac:2a:67:bc:e2:17:6a:e0:68: 69:5e:f4:87:2a:54:22:a8:ba:73:0f:cc:b7:da:34: 98:0d:ba:30:c0:74:12:b6:8f:06:76:cb:1c:bf:3e: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5E:E6:D9:D3:23:B2:91:64:50:6B:70:E1:36:B1:D9:1B:80:27:FA X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d6:9d:42:d4:00:a8:dc:ba:f6:12:9c:93:bf:1f:d6:5e:a3: d9:d1:81:56:f5:0c:c1:0a:7e:d1:b7:71:e2:c7:9a:e0:ba:51: a7:e6:01:97:c5:dd:32:b0:58:0a:c6:a6:4d:7c:9c:f1:1f:e3: 1d:48:07:e7:09:84:09:0d:00:92:37:e8:c1:2a:bb:5c:ad:b0: 34:98:da:d1:a9:5b:83:e6:27:de:51:e4:dc:aa:ac:21:d5:3b: ae:67:30:dd:b2:e4:af:4a:6a:3e:18:d1:5d:f4:f6:43:ee:90: ba:84:9b:9e:d7:5d:27:03:54:46:ef:17:e1:61:8d:c8:f5:61: d7:45:e1:c0:8d:52:a4:68:e9:05:c1:1e:cd:b5:f4:f2:88:19: 4e:55:a2:59:6f:21:d5:16:75:43:77:20:1c:2d:4d:8f:bd:e7: dc:b4:67:5f:29:0d:d1:3c:23:39:96:6c:8f:c2:17:96:63:5f: 9c:7d:b0:a4:1b:6c:81:53:5f:ab:cb:10:05:25:80:a1:2b:8e: c4:8e:89:16:88:06:81:5a:0b:f6:06:ef:97:de:bb:b0:28:80: f0:96:8d:66:9f:6b:9c:f3:ce:42:6a:16:3e:c1:99:a7:46:62: 54:0a:d9:98:06:c2:78:f0:a2:ff:4d:39:67:97:a7:da:1d:89: cb:c7:48:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZGRjExMC8GA1UEBRMoQkE2MEMyRjYwODU3N0NFRTZCQkQxNDkzNzIxQjdBQUVD QTI4NzYyQjAeFw0yNDExMjMwNTM0MzBaFw0yNDExMzAwNTM0MzBaMBgxFjAUBgNV BAMTDTY3NDE2OTY2LTAxM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChJWqqMckjuk6gSoHd1dg6IPdMw0X1N1sfwoKPNdnOg1fABhlYmbhdW58O/W20 4dCaWClabU3Yg1Axd/4of4rbCdUKPvaX7984/wwutCqeLDtpYKM+3Qsuoz1Mu7hU ytiVjVwYf6lDqiqJKGtgux2uKkjNUifMq4ruAr5n7kb3xqmMrYVrPgNKexzg7LsY 19Q3Z0xKNZP9DT41CAC9M9DKBNWZCmKIeC9jsLkd+235Cg82wpgW0C3qJitGbwWb fLMw/ry1NJeXIaYMzeKXfrZj3cWbcSWukqwqZ7ziF2rgaGle9IcqVCKounMPzLfa NJgNujDAdBK2jwZ2yxy/PlPtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6l7m2dMj spFkUGtw4Tax2RuAJ/owHwYDVR0jBBgwFoAUumDC9ghXfO5rvRSTcht6rsoodisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkZGLzlDRjA0RDNDNUY4 RTExRUZCMjNFNzk0NUM0RjlBRTAyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdW1EQzlnaFhmTzVydlJTVGNodDZyc29vZGlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NkZGLzlDRjA0RDNDNUY4RTExRUZCMjNFNzk0NUM0RjlBRTAyL3VtREM5Z2hYZk81 cnZSU1RjaHQ2cnNvb2Rpcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfWnULUAKjcuvYSnJO/H9Zeo9nRgVb1DMEKftG3ceLHmuC6UafmAZfF 3TKwWArGpk18nPEf4x1IB+cJhAkNAJI36MEqu1ytsDSY2tGpW4PmJ95R5NyqrCHV O65nMN2y5K9Kaj4Y0V309kPukLqEm57XXScDVEbvF+Fhjcj1YddF4cCNUqRo6QXB Hs219PKIGU5VollvIdUWdUN3IBwtTY+959y0Z18pDdE8IzmWbI/CF5ZjX5x9sKQb bIFTX6vLEAUlgKErjsSOiRaIBoFaC/YG75feu7AogPCWjWafa5zzzkJqFj7BmadG YlQK2ZgGwnjwov9NOWeXp9odicvHSD0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org