$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: I7q+1nkQPH+bY9R69TISUZHT6Xiws3Kba0tpuHZtu2g= Subject key identifier: F9:5D:5D:58:49:A1:08:8F:C3:B8:CB:F7:F8:60:46:98:D7:86:C6:92 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0913 Signing time: Thu 02 May 2024 21:20:23 +0000 Manifest this update: Thu 02 May 2024 21:20:22 +0000 Manifest next update: Thu 09 May 2024 21:20:22 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: BvHb3dkOrdd0vUfODrN0mYnN9i9NubNJ9GT7V9QRac8=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: Rqtl2EaCY3p/cn7gYQIx4inHW1yWNjF3CcFTDJ9+LbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: May 2 21:20:22 2024 GMT Not After : May 9 21:20:22 2024 GMT Subject: CN=66340397-6431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:56:87:52:88:f7:2c:e3:d2:9a:33:6d:a5: 19:b9:b3:a4:d9:72:a4:9a:6e:6b:30:0a:cf:70:23: 61:f9:34:70:3b:9a:7b:d6:e3:ff:e6:87:65:15:28: 2c:96:54:48:02:cf:f0:b1:29:6b:88:42:ae:83:79: 32:07:b0:8f:f2:88:d8:c4:34:8f:97:c9:bb:7e:62: c5:63:66:eb:e3:f1:2d:20:b9:66:20:de:de:76:d3: 62:b5:a6:e2:47:52:d5:58:22:7b:77:b7:ba:7b:e2: 2f:77:07:e8:e1:85:95:0b:d5:ff:be:f2:b3:b1:d2: 56:59:42:7d:7b:27:dc:3f:0f:6a:dc:5c:22:6e:b6: 7c:d1:9c:d6:70:ab:b2:b2:18:e0:98:3a:53:3b:ca: 92:4c:b3:51:b0:dc:4f:a3:e8:99:f0:a6:fb:5b:d8: 69:fc:b2:82:7b:17:0c:08:53:f6:b5:ea:d4:14:30: 69:57:54:11:c1:fc:03:10:78:c2:05:2e:17:9d:7d: 13:36:2c:38:d7:c1:07:10:bf:22:d6:25:8f:2d:8d: 5b:76:ba:91:97:ce:bd:08:35:30:d9:30:54:89:61: e1:9f:51:49:ac:c7:1e:6e:98:62:a9:9a:ce:3c:bf: 70:4b:9e:47:11:85:d1:1a:d9:fd:db:9d:70:da:28: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5D:5D:58:49:A1:08:8F:C3:B8:CB:F7:F8:60:46:98:D7:86:C6:92 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6d:72:be:b1:11:09:8c:bc:3d:b0:3e:6a:88:28:c3:9b:1f: 87:ad:4e:a3:96:8b:61:93:5d:9c:52:08:02:4d:66:b2:f6:0a: 1c:20:49:de:54:a6:99:17:b3:5e:5f:1b:0e:a0:ff:89:1c:42: b2:6c:c4:6d:e1:62:56:a2:84:fb:c2:be:e9:52:2a:0e:dc:fc: 7d:53:69:03:bb:ae:c5:65:04:d2:b5:0f:af:ca:05:6f:30:35: f9:fb:af:89:8a:0b:dd:c1:06:2f:de:de:52:a2:fa:62:68:5a: 64:e4:eb:b4:a2:91:df:af:03:8d:4a:d3:db:d9:66:f1:3d:ab: 48:a5:fa:39:5f:04:c2:de:16:97:7c:da:14:67:4b:88:a0:8d: 80:43:e6:2a:02:dc:23:ba:e3:35:2e:b4:e6:88:79:20:65:35: 3f:4d:d6:6c:d6:cd:14:c5:c9:82:a5:86:11:0e:38:63:08:52: 16:4f:b3:24:6c:6d:d7:d8:a5:01:2e:8c:25:64:08:b2:2b:cb: 61:62:3b:26:9e:e4:e6:b8:86:55:96:b5:53:0a:51:ce:53:72: 57:bf:96:02:4d:f3:f2:02:82:03:56:c7:00:fd:42:f0:06:01: 20:f5:f2:d2:18:0b:56:cd:1a:31:e3:28:1b:7a:c5:e0:c4:a3: 33:57:1b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjQwNTAyMjEyMDIyWhcNMjQwNTA5MjEyMDIyWjAYMRYwFAYD VQQDEw02NjM0MDM5Ny02NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtthWh1KI9yzj0pozbaUZubOk2XKkmm5rMArPcCNh+TRwO5p71uP/5odlFSgs llRIAs/wsSlriEKug3kyB7CP8ojYxDSPl8m7fmLFY2br4/EtILlmIN7edtNitabi R1LVWCJ7d7e6e+Ivdwfo4YWVC9X/vvKzsdJWWUJ9eyfcPw9q3FwibrZ80ZzWcKuy shjgmDpTO8qSTLNRsNxPo+iZ8Kb7W9hp/LKCexcMCFP2terUFDBpV1QRwfwDEHjC BS4XnX0TNiw418EHEL8i1iWPLY1bdrqRl869CDUw2TBUiWHhn1FJrMcebphiqZrO PL9wS55HEYXRGtn9251w2ijS5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPldXVhJ oQiPw7jL9/hgRpjXhsaSMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCebXK+sREJjLw9sD5qiCjDmx+HrU6jlothk12cUggCTWay9gocIEne VKaZF7NeXxsOoP+JHEKybMRt4WJWooT7wr7pUioO3Px9U2kDu67FZQTStQ+vygVv MDX5+6+JigvdwQYv3t5SovpiaFpk5Ou0opHfrwONStPb2WbxPatIpfo5XwTC3haX fNoUZ0uIoI2AQ+YqAtwjuuM1LrTmiHkgZTU/TdZs1s0UxcmCpYYRDjhjCFIWT7Mk bG3X2KUBLowlZAiyK8thYjsmnuTmuIZVlrVTClHOU3JXv5YCTfPyAoIDVscA/ULw BgEg9fLSGAtWzRox4ygbesXgxKMzVxvi -----END CERTIFICATE-----Generated at Thu May 2 22:28:49 2024 by rpki-client on console-ams.rpki-client.org