$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: x98BamQkQ6ZQzAfZPJ+HzY2iPotU09QbwVTyHbuJvB4= Subject key identifier: E5:20:7E:D4:87:AF:5B:0D:0B:39:37:15:10:AA:E6:B5:D2:1E:53:92 Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 043D Signing time: Fri 22 Nov 2024 23:49:28 +0000 Manifest this update: Fri 22 Nov 2024 23:49:27 +0000 Manifest next update: Fri 29 Nov 2024 23:49:27 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: W+2x0NATE0cPBzQDIz/CUJcWsBqjDYLR3r9gpSXbbr8=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: oSdvyorGuPv/5QDTLowUDTHEVLVsXYxy04DwT+pQi58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Nov 22 23:49:27 2024 GMT Not After : Nov 29 23:49:27 2024 GMT Subject: CN=67411887-ebcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:f8:7e:92:8c:21:8e:60:84:97:a8:d4:74: f7:8b:69:29:78:c9:b5:e3:a7:b6:28:00:07:49:e3: dd:f6:99:25:a2:82:df:c8:23:bf:aa:52:69:5c:97: 22:af:61:de:89:9f:93:3b:f0:d9:a6:70:a9:c3:3c: 0d:9d:74:bd:be:f1:fb:66:70:85:75:1e:91:5d:09: f7:b3:31:72:ae:d6:6f:fa:47:ff:4b:65:7c:e5:ea: a5:4e:66:d8:a2:3e:10:c0:9b:a2:13:cb:bd:29:82: da:6d:a8:57:63:55:4e:8d:b7:55:08:cb:72:44:6e: e9:98:8d:ce:cc:3b:43:b1:33:ba:a0:ed:f3:fb:c0: b8:17:f6:4b:8f:46:88:50:29:d9:9f:a9:8b:68:fa: 36:c3:e7:cf:4d:38:5f:c4:be:fd:b9:76:84:35:bb: 15:4a:c4:e5:28:dc:56:e8:a3:7b:28:30:88:88:a1: b4:e5:0f:4e:39:67:b2:20:bc:9b:94:5c:85:8a:86: 62:d1:0a:97:80:d9:ef:8b:25:fa:83:0d:7c:db:8b: e1:b8:a8:fc:83:81:a8:d6:fc:8a:c0:73:5c:ee:fc: 90:2c:6e:94:5e:9f:8f:75:59:2a:9a:70:77:46:1f: b9:32:8c:83:79:31:96:3e:6f:1c:4b:3b:4a:cd:13: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:20:7E:D4:87:AF:5B:0D:0B:39:37:15:10:AA:E6:B5:D2:1E:53:92 X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5f:da:c2:5b:19:9f:30:6c:8c:2d:c0:8f:28:b8:bc:09:8d: 19:ae:e8:1d:1f:80:36:a0:e3:6f:d1:fd:5d:21:cc:fd:2c:8f: 1f:53:4e:f7:b5:f3:fc:87:21:b4:93:02:d4:70:bf:c7:b5:67: 8f:ce:39:2e:5e:13:fe:2b:ee:a0:20:c5:6a:29:94:9a:66:45: 5d:b3:e4:0f:d0:70:f5:54:83:43:c8:e9:a4:31:cd:3f:67:1a: d8:67:94:1f:7d:57:34:ef:2f:6b:e1:1a:3d:e7:26:a0:e6:fc: 35:92:61:12:50:b8:69:6b:5c:5f:41:03:03:1a:eb:6d:a7:7d: 20:41:a0:35:50:63:03:a3:65:54:b6:f2:25:eb:03:03:4f:ea: 18:8b:ad:08:61:b3:07:b3:f6:d6:44:4f:c5:04:c2:e1:3d:8c: 56:a1:83:e8:64:8f:ee:6e:88:73:16:fa:a1:15:ff:77:a8:e7: 06:33:62:9b:b7:d3:60:8d:87:fe:96:b6:87:15:6d:b5:81:bd: 15:cf:f9:ed:4e:8c:a6:7f:8c:ae:ac:fc:23:2c:ce:6e:5b:99: 19:ec:a4:f3:47:31:04:64:3b:5f:0d:c3:bf:2f:29:c8:df:21: 5d:82:72:ea:9e:fe:c3:1e:71:f5:f7:bf:2d:55:cc:70:6a:8f: a8:e8:6f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjQxMTIyMjM0OTI3WhcNMjQxMTI5MjM0OTI3WjAYMRYwFAYD VQQDEw02NzQxMTg4Ny1lYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F/4fpKMIY5ghJeo1HT3i2kpeMm146e2KAAHSePd9pklooLfyCO/qlJpXJci r2HeiZ+TO/DZpnCpwzwNnXS9vvH7ZnCFdR6RXQn3szFyrtZv+kf/S2V85eqlTmbY oj4QwJuiE8u9KYLabahXY1VOjbdVCMtyRG7pmI3OzDtDsTO6oO3z+8C4F/ZLj0aI UCnZn6mLaPo2w+fPTThfxL79uXaENbsVSsTlKNxW6KN7KDCIiKG05Q9OOWeyILyb lFyFioZi0QqXgNnviyX6gw1824vhuKj8g4Go1vyKwHNc7vyQLG6UXp+PdVkqmnB3 Rh+5MoyDeTGWPm8cSztKzRP8lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUgftSH r1sNCzk3FRCq5rXSHlOSMB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7X9rCWxmfMGyMLcCPKLi8CY0ZrugdH4A2oONv0f1dIcz9LI8fU073 tfP8hyG0kwLUcL/HtWePzjkuXhP+K+6gIMVqKZSaZkVds+QP0HD1VINDyOmkMc0/ ZxrYZ5QffVc07y9r4Ro95yag5vw1kmESULhpa1xfQQMDGuttp30gQaA1UGMDo2VU tvIl6wMDT+oYi60IYbMHs/bWRE/FBMLhPYxWoYPoZI/ubohzFvqhFf93qOcGM2Kb t9NgjYf+lraHFW21gb0Vz/ntToymf4yurPwjLM5uW5kZ7KTzRzEEZDtfDcO/LynI 3yFdgnLqnv7DHnH1978tVcxwao+o6G8E -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org