$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: mp9j66t32u9hZ1ZCQAHojYpkAZjb+AALqeTy7PbqmJs= Subject key identifier: DA:DA:5B:B7:4F:18:4D:22:6C:9C:48:50:C5:37:52:4B:A3:05:A3:75 Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 03E1 Signing time: Fri 31 May 2024 02:53:56 +0000 Manifest this update: Fri 31 May 2024 02:53:55 +0000 Manifest next update: Fri 07 Jun 2024 02:53:55 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: bIsdkhRNjLCYiH8vuthxSNflfMNwKYDXuC6phZGi7BY=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: 3sL0nxcoLdV051H1TLdWavNKvvnKqXwxMYafb2qU7uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: May 31 02:53:55 2024 GMT Not After : Jun 7 02:53:55 2024 GMT Subject: CN=66593bc4-2395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:c1:f3:10:5e:cd:b4:54:0d:26:d8:a6:56: 70:1b:8f:04:2e:2b:7c:39:19:47:41:7e:89:70:fb: fe:16:69:31:c9:9b:35:0c:c4:80:a2:3e:40:73:65: af:4a:ae:98:63:51:0f:76:46:e9:40:fc:b3:e8:d2: 09:85:7f:ea:d4:38:38:80:79:11:b3:1e:99:e3:1c: 5b:b3:d2:61:96:d8:88:4f:a7:f3:14:1e:49:dc:ae: 22:fb:ad:79:ba:18:94:f5:8e:80:56:bc:89:90:e8: 33:1a:fe:4d:8c:59:eb:df:ed:d2:49:1a:82:27:a0: 0f:d6:67:f8:5f:d9:f9:a7:00:a4:79:c3:b4:85:97: 6f:f4:18:ec:2e:bd:57:14:87:51:db:2c:11:bd:4f: 56:44:a8:38:e0:07:45:ac:91:14:0a:66:d8:f6:8c: 9e:0c:6a:f7:de:ea:9d:3b:32:9d:3d:aa:c7:5a:7c: 14:b7:71:b1:e5:15:1e:82:75:e4:4f:10:b8:94:62: 30:8c:0c:33:5f:fd:36:ef:d2:54:39:04:65:31:8c: 49:fb:8c:15:f7:39:be:1f:30:c4:8e:40:a3:49:5a: c3:1b:03:5c:d8:73:d4:a6:18:d5:91:9e:a4:82:48: 7c:0a:2b:ee:41:b5:f6:e3:4c:34:e0:a9:1f:92:de: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DA:5B:B7:4F:18:4D:22:6C:9C:48:50:C5:37:52:4B:A3:05:A3:75 X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:27:53:2c:f8:57:2c:11:38:0f:b6:14:e5:c0:ab:69:2d:85: 94:41:17:9a:9a:92:9f:80:ae:e8:ed:07:b5:97:a3:35:ab:e5: 72:d2:f5:03:d5:ba:c0:b1:a0:43:7a:e5:4e:38:2b:63:7a:7f: 12:23:bd:ca:85:e8:70:53:d8:ff:7f:04:20:f6:1c:5c:b8:80: 52:68:7f:b5:01:ca:30:b9:8c:0a:0a:aa:6f:a5:bf:7a:45:18: bf:db:62:b3:66:42:ec:9c:42:f1:43:b6:55:dc:dd:3a:03:c6: 92:fa:36:14:dd:16:5c:3a:de:90:78:fa:c8:ad:92:24:dc:b8: b2:ab:5b:a4:36:90:8e:91:f3:02:8a:4b:a1:21:5f:f5:f8:71: 78:80:54:9e:4e:9f:05:8d:77:a3:c6:5e:02:96:96:ea:72:01: 85:b9:5a:b0:d5:5e:fd:5d:13:32:fc:15:f1:a1:01:56:46:0c: 23:f7:85:4b:1e:3d:69:27:c5:59:a9:ec:01:61:83:a3:1b:b3: ff:84:76:e0:65:3a:ed:1c:f9:51:29:8e:b7:27:2b:96:6c:47: 9f:fe:56:7e:2d:a4:56:b7:13:5e:3a:36:f9:59:da:eb:6d:dd: 0e:df:ea:7a:f7:be:13:93:39:5b:9b:55:71:08:be:d2:7e:d6: fd:dc:99:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjQwNTMxMDI1MzU1WhcNMjQwNjA3MDI1MzU1WjAYMRYwFAYD VQQDEw02NjU5M2JjNC0yMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F/B8xBezbRUDSbYplZwG48ELit8ORlHQX6JcPv+FmkxyZs1DMSAoj5Ac2Wv Sq6YY1EPdkbpQPyz6NIJhX/q1Dg4gHkRsx6Z4xxbs9JhltiIT6fzFB5J3K4i+615 uhiU9Y6AVryJkOgzGv5NjFnr3+3SSRqCJ6AP1mf4X9n5pwCkecO0hZdv9BjsLr1X FIdR2ywRvU9WRKg44AdFrJEUCmbY9oyeDGr33uqdOzKdParHWnwUt3Gx5RUegnXk TxC4lGIwjAwzX/0279JUOQRlMYxJ+4wV9zm+HzDEjkCjSVrDGwNc2HPUphjVkZ6k gkh8CivuQbX240w04Kkfkt4sQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNraW7dP GE0ibJxIUMU3UkujBaN1MB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOJ1Ms+FcsETgPthTlwKtpLYWUQReampKfgK7o7Qe1l6M1q+Vy0vUD 1brAsaBDeuVOOCtjen8SI73KhehwU9j/fwQg9hxcuIBSaH+1AcowuYwKCqpvpb96 RRi/22KzZkLsnELxQ7ZV3N06A8aS+jYU3RZcOt6QePrIrZIk3Liyq1ukNpCOkfMC ikuhIV/1+HF4gFSeTp8FjXejxl4ClpbqcgGFuVqw1V79XRMy/BXxoQFWRgwj94VL Hj1pJ8VZqewBYYOjG7P/hHbgZTrtHPlRKY63JyuWbEef/lZ+LaRWtxNeOjb5Wdrr bd0O3+p6974Tkzlbm1VxCL7Sftb93JlB -----END CERTIFICATE-----Generated at Fri May 31 06:49:20 2024 by rpki-client on console-ams.rpki-client.org