$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: TfYE3BjSNFqKK9Z5K5q1MLeaZm5cH30Ij8ZgQ1/hTiA= Subject key identifier: C5:6F:37:BE:8F:03:D4:D7:4C:BD:30:FD:2F:7C:31:45:95:65:0D:10 Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: 22 Signing time: Wed 23 Oct 2024 06:29:43 +0000 Manifest this update: Wed 23 Oct 2024 06:29:43 +0000 Manifest next update: Wed 30 Oct 2024 06:29:43 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: kqVna7TB87iROfT/bxzPySgCW8pV8SeNiZvmXyc2sf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Oct 23 06:29:43 2024 GMT Not After : Oct 30 06:29:43 2024 GMT Subject: CN=671897d7-649d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:37:96:7a:20:18:e2:7d:68:47:7d:f4:98: ec:7b:cd:ad:8a:98:7a:4e:e4:dc:2e:a4:79:c3:1a: 60:ba:6d:91:22:0f:95:83:f3:2c:23:f1:2c:67:97: ed:f4:77:a2:07:6a:b8:6a:be:68:ed:fe:0e:5e:0a: 2d:da:c1:dd:4a:dd:0a:36:80:3f:40:4e:06:57:42: 5d:35:1b:7f:09:b1:d0:eb:bb:0d:ce:5f:51:08:32: 57:6e:36:96:16:0f:a9:71:92:8a:1e:de:4e:5b:d9: 91:19:3c:5f:c4:82:c2:bf:c7:9b:d7:95:2b:2f:77: 5a:5a:74:88:bc:7d:e5:a8:ab:7b:86:af:a2:80:37: f7:ef:36:7a:4d:4f:ef:dd:9a:68:d7:03:3d:1e:3c: 9c:ab:fe:3d:5e:d2:5f:d6:ec:49:43:65:51:35:31: b8:89:78:63:34:b4:6b:12:be:7a:a0:66:08:51:d2: 0e:a9:82:91:2a:94:46:5c:1f:38:b3:e3:28:03:06: 1f:1a:f4:48:5a:a7:c4:5f:67:7c:77:e9:89:77:b7: c5:0e:b0:14:3b:43:83:ab:3a:74:ef:09:e7:2e:fe: 79:54:26:fc:7b:45:5f:05:95:d7:0b:55:2e:ae:f2: 66:fb:59:42:b7:36:a1:45:da:57:b7:7d:64:f4:e5: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6F:37:BE:8F:03:D4:D7:4C:BD:30:FD:2F:7C:31:45:95:65:0D:10 X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ad:fd:5d:32:35:bf:7d:dc:4b:7c:ea:35:73:fe:7d:e7:aa: f2:d3:4e:d1:77:fd:f1:f2:1b:62:d8:80:95:f8:f5:c8:4f:19: 89:82:1c:7a:41:99:5a:fa:1c:b7:84:da:c6:e5:f5:cd:c3:db: 51:ca:4e:ae:5b:0e:2f:d1:ba:88:88:61:22:99:b5:26:6a:d8: 82:ee:61:cb:3a:59:81:91:95:01:85:f5:59:d5:6a:17:24:f2: 89:59:9e:c5:ae:5d:06:aa:bb:8e:36:df:d7:17:09:6e:71:91: 8e:d9:5b:ca:3d:9d:b6:8f:e8:98:46:ef:de:c3:69:93:46:3a: bd:9a:f0:ad:1b:75:b9:3b:a4:44:5a:23:40:f0:de:b8:80:29: 7e:5b:e2:75:81:f4:bc:9e:ad:e3:bc:11:a7:09:7d:ac:2b:3d: 7e:30:2c:80:27:a7:a3:94:1d:64:4f:ff:7a:ed:06:97:14:4a: f7:18:9a:71:2e:f4:86:8e:7b:d8:b1:03:9d:69:e3:88:50:ec: 7b:dc:11:52:e7:df:3f:5a:aa:ce:1b:3a:11:be:a3:cb:30:0b: ab:d6:dd:69:f9:3e:e9:22:0b:93:d5:d4:3c:3b:ae:e1:9c:57: 8d:5e:2e:7c:74:c5:53:51:df:89:ce:60:bd:de:57:3c:79:7a: b3:b3:8c:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZGRjExMC8GA1UEBRMoQkE2MEMyRjYwODU3N0NFRTZCQkQxNDkzNzIxQjdBQUVD QTI4NzYyQjAeFw0yNDEwMjMwNjI5NDNaFw0yNDEwMzAwNjI5NDNaMBgxFjAUBgNV BAMTDTY3MTg5N2Q3LTY0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR9jeWeiAY4n1oR330mOx7za2KmHpO5NwupHnDGmC6bZEiD5WD8ywj8Sxnl+30 d6IHarhqvmjt/g5eCi3awd1K3Qo2gD9ATgZXQl01G38JsdDruw3OX1EIMlduNpYW D6lxkooe3k5b2ZEZPF/EgsK/x5vXlSsvd1padIi8feWoq3uGr6KAN/fvNnpNT+/d mmjXAz0ePJyr/j1e0l/W7ElDZVE1MbiJeGM0tGsSvnqgZghR0g6pgpEqlEZcHziz 4ygDBh8a9Ehap8RfZ3x36Yl3t8UOsBQ7Q4OrOnTvCecu/nlUJvx7RV8FldcLVS6u 8mb7WUK3NqFF2le3fWT05dtvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxW83vo8D 1NdMvTD9L3wxRZVlDRAwHwYDVR0jBBgwFoAUumDC9ghXfO5rvRSTcht6rsoodisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkZGLzlDRjA0RDNDNUY4 RTExRUZCMjNFNzk0NUM0RjlBRTAyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdW1EQzlnaFhmTzVydlJTVGNodDZyc29vZGlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NkZGLzlDRjA0RDNDNUY4RTExRUZCMjNFNzk0NUM0RjlBRTAyL3VtREM5Z2hYZk81 cnZSU1RjaHQ2cnNvb2Rpcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmt/V0yNb993Et86jVz/n3nqvLTTtF3/fHyG2LYgJX49chPGYmCHHpB mVr6HLeE2sbl9c3D21HKTq5bDi/RuoiIYSKZtSZq2ILuYcs6WYGRlQGF9VnVahck 8olZnsWuXQaqu44239cXCW5xkY7ZW8o9nbaP6JhG797DaZNGOr2a8K0bdbk7pERa I0Dw3riAKX5b4nWB9LyereO8EacJfawrPX4wLIAnp6OUHWRP/3rtBpcUSvcYmnEu 9IaOe9ixA51p44hQ7HvcEVLn3z9aqs4bOhG+o8swC6vW3Wn5PukiC5PV1Dw7ruGc V41eLnx0xVNR34nOYL3eVzx5erOzjO8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org