$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: 1o2qAH3NXujP6IWgXl6wVF1TRT8fxgGCJk8XZQhnoD0= Subject key identifier: EF:A0:9A:33:9F:2E:28:DA:ED:E5:86:6C:60:C4:3D:E3:4C:8E:FA:99 Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 0341 Signing time: Sun 19 May 2024 02:57:43 +0000 Manifest this update: Sun 19 May 2024 02:57:42 +0000 Manifest next update: Sun 26 May 2024 02:57:42 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: yA+1uqMlkqldGgakZ7vvMzQqBJsnyGhX1bQWFQpMJ+E=) 2: D6AAD7B2745A11EC8FBEDD40C4F9AE02.roa (hash: SE5zc1fO/aEed5V7IyJ0ZULI0CLrZqKxJrcQOxWzEkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: May 19 02:57:42 2024 GMT Not After : May 26 02:57:42 2024 GMT Subject: CN=66496aa7-b6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:44:31:d1:c6:e4:f4:db:af:a7:6d:f0:01: ce:66:25:8a:b3:50:95:b7:1e:13:23:f6:19:60:0e: 84:ca:94:6f:26:5a:98:01:a1:92:fd:b0:ac:a5:db: 66:b7:b4:45:a8:48:ab:8b:15:8c:6f:23:a9:35:a6: aa:12:7b:6d:af:76:42:79:b2:d3:a4:03:e4:c6:11: b8:97:0a:3f:74:8b:89:bc:4f:39:0f:d3:c7:fc:da: e7:4b:b6:fe:89:d5:f7:43:c9:cc:b6:fd:8b:18:c1: e3:00:43:b5:63:cc:e6:fb:ef:43:a8:fd:1f:35:89: f9:21:8b:e8:df:f8:db:25:f6:cc:6e:44:3e:d6:0e: 51:f3:8d:50:ce:5d:85:58:2c:63:77:5f:aa:95:45: 45:1d:d9:5d:06:e5:84:0d:36:f1:0f:3e:80:38:0a: 8d:31:a0:fa:42:a9:54:6e:36:0d:26:a9:6d:7e:66: 6e:c9:5e:0e:ea:3e:0b:07:8b:4d:40:ff:64:10:02: a1:84:e9:32:17:47:06:d7:ab:6a:ff:ff:a4:a5:c4: cf:7b:51:e5:f8:9e:3f:7d:e7:f6:f2:80:5f:1a:39: 8e:d7:ad:6c:90:e2:aa:09:5a:83:3c:83:11:cb:1c: b8:21:13:8a:46:30:38:cd:23:0b:7a:11:9c:73:ec: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A0:9A:33:9F:2E:28:DA:ED:E5:86:6C:60:C4:3D:E3:4C:8E:FA:99 X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:10:fb:7e:08:22:d3:6a:c3:4a:83:ce:de:11:81:6b:58: 31:17:5d:d8:0e:9a:e0:37:a6:4d:9e:1e:d8:b0:2d:d1:61:f3: a6:82:a2:83:d0:28:44:84:26:75:d2:f7:ba:ed:10:81:34:ca: a2:53:22:52:e9:93:d6:f7:63:82:00:a1:ed:bd:b6:e3:11:56: e9:4b:20:cd:72:d6:c9:3a:b4:a1:ba:9f:a2:17:d6:4c:be:d5: 2d:c1:8b:73:db:35:4f:af:3e:32:03:6b:0a:7e:d1:1d:6d:60: a5:55:52:83:1d:ec:27:69:ee:d7:b3:3e:8a:2f:e3:5d:7f:9d: 4d:3b:4e:ba:3b:0d:9d:b5:9b:38:4a:4c:22:c8:8c:fb:2c:95: 89:f9:a1:a1:b0:84:92:4d:d9:fa:9e:a4:94:67:e2:e4:fa:5e: e2:e7:4d:f7:cf:fc:19:79:9e:d8:95:da:71:77:fa:4c:56:39: e7:c9:03:e0:6b:83:8b:95:6c:06:67:ae:fd:c5:28:3f:f1:ab: 73:c7:e4:8f:88:a6:c2:b2:1f:c3:59:0f:48:71:00:43:fd:20: c3:bf:14:f4:ab:05:a3:6f:7f:ca:62:88:f6:03:81:8b:69:2c: 3f:04:6e:dc:fa:7e:34:ab:d5:45:b9:87:e1:da:6e:73:25:75: 73:8f:08:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjQwNTE5MDI1NzQyWhcNMjQwNTI2MDI1NzQyWjAYMRYwFAYD VQQDEw02NjQ5NmFhNy1iNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT9EMdHG5PTbr6dt8AHOZiWKs1CVtx4TI/YZYA6EypRvJlqYAaGS/bCspdtm t7RFqEirixWMbyOpNaaqEnttr3ZCebLTpAPkxhG4lwo/dIuJvE85D9PH/NrnS7b+ idX3Q8nMtv2LGMHjAEO1Y8zm++9DqP0fNYn5IYvo3/jbJfbMbkQ+1g5R841Qzl2F WCxjd1+qlUVFHdldBuWEDTbxDz6AOAqNMaD6QqlUbjYNJqltfmZuyV4O6j4LB4tN QP9kEAKhhOkyF0cG16tq//+kpcTPe1Hl+J4/fef28oBfGjmO161skOKqCVqDPIMR yxy4IROKRjA4zSMLehGcc+xQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+gmjOf Lija7eWGbGDEPeNMjvqZMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAksBD7fggi02rDSoPO3hGBa1gxF13YDprgN6ZNnh7YsC3RYfOmgqKD 0ChEhCZ10ve67RCBNMqiUyJS6ZPW92OCAKHtvbbjEVbpSyDNctbJOrShup+iF9ZM vtUtwYtz2zVPrz4yA2sKftEdbWClVVKDHewnae7Xsz6KL+Ndf51NO066Ow2dtZs4 SkwiyIz7LJWJ+aGhsISSTdn6nqSUZ+Lk+l7i5033z/wZeZ7Yldpxd/pMVjnnyQPg a4OLlWwGZ679xSg/8atzx+SPiKbCsh/DWQ9IcQBD/SDDvxT0qwWjb3/KYoj2A4GL aSw/BG7c+n40q9VFuYfh2m5zJXVzjwig -----END CERTIFICATE-----Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org