$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: /9IFrBKtlQ1x72Z33bHZOJtvkznAm8Vq1699U7MSJmo= Subject key identifier: 17:C3:FA:76:FA:E5:F4:94:38:8D:85:26:51:AA:44:C2:BF:C4:59:85 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 097E Signing time: Fri 22 Nov 2024 19:52:35 +0000 Manifest this update: Fri 22 Nov 2024 19:52:35 +0000 Manifest next update: Fri 29 Nov 2024 19:52:35 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: 2WhaPPxYoNpGXO4A+O/ISbhuW5mnf8xiX48WJtaYQ0Q=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Nov 22 19:52:35 2024 GMT Not After : Nov 29 19:52:35 2024 GMT Subject: CN=6740e103-574f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:3e:cb:bb:59:8f:47:92:41:e9:d5:f0:87: 3c:81:d6:cd:c2:f2:90:01:dc:1b:a0:7e:14:dd:18: 18:5d:1a:65:20:75:53:a4:2d:89:ca:aa:e6:ce:bb: 6b:29:a3:cc:d5:2a:47:4e:41:65:84:14:bd:f1:37: d6:94:93:5a:09:23:60:97:c9:8d:59:3e:ba:f3:a6: dd:d0:08:d2:f8:1d:a7:ea:f3:90:31:ec:37:3e:22: f5:cd:71:a7:a6:54:26:22:19:fe:ad:39:5d:2c:42: 51:26:51:25:6c:0d:17:58:37:1d:57:8d:bf:fb:d6: e8:33:b0:e9:7a:5a:96:02:54:2b:91:67:0f:f8:d1: 2d:5a:ce:23:68:3d:a9:10:76:bb:04:5c:43:a2:cb: ef:a5:d3:c3:20:fd:11:ba:b7:5c:f0:87:40:87:87: 16:81:e7:75:64:17:45:84:79:96:9d:b4:8e:8b:be: 2a:d0:0f:2a:bf:15:6a:87:3f:16:46:2a:bf:1e:06: 5d:52:de:c9:89:3d:c3:85:29:fd:e7:ba:19:35:00: 84:89:bc:a4:11:d1:0a:75:f5:d6:73:29:c1:90:de: 9b:a4:e4:2c:56:f8:89:a3:b6:94:d2:3a:63:9f:fe: 75:46:db:8c:70:34:27:a5:66:ce:4e:f8:85:0a:44: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C3:FA:76:FA:E5:F4:94:38:8D:85:26:51:AA:44:C2:BF:C4:59:85 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:7e:ad:19:94:d9:41:28:ec:c8:b6:ee:78:09:3a:37:81:37: b3:72:24:6c:8a:aa:df:1a:d6:8b:f7:8d:60:31:dd:21:3a:22: 0c:54:58:af:6f:8a:fd:a4:76:b9:34:ef:b2:1e:75:9d:56:12: 11:df:67:2c:bf:ea:7b:76:03:e9:fb:f1:74:43:0d:b4:9c:07: d0:64:4a:81:11:9e:8a:84:ca:9a:56:f8:c1:a7:f4:05:70:1e: 35:07:fd:3c:0f:47:4f:85:1c:a5:d1:7b:94:fe:31:5a:2a:bf: ac:5d:42:01:3c:01:16:91:98:c9:91:37:f3:2a:05:e1:e4:88: 88:d1:3d:2f:85:d8:44:25:52:cc:4e:71:14:3e:0d:e3:c5:81: 57:9d:08:36:e8:a2:36:aa:e1:0c:4d:18:02:b3:d3:a9:ee:77: f7:f0:31:b4:d3:31:70:1d:f7:28:15:3f:3b:7e:99:23:75:07: 5d:79:e3:29:c6:78:5a:2c:50:5f:b4:1b:65:70:22:41:f4:16: 53:c1:fa:a6:9c:ec:66:6c:1e:44:cd:5b:c2:4f:76:92:01:51: 20:6c:fa:bf:ac:48:e7:d0:c0:04:bc:a7:17:2d:e8:80:94:ab: 49:e9:e2:f9:0d:fa:ba:6e:13:6c:c5:3f:9c:4d:14:50:fb:fe: b5:32:9e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjQxMTIyMTk1MjM1WhcNMjQxMTI5MTk1MjM1WjAYMRYwFAYD VQQDEw02NzQwZTEwMy01NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBc+y7tZj0eSQenV8Ic8gdbNwvKQAdwboH4U3RgYXRplIHVTpC2Jyqrmzrtr KaPM1SpHTkFlhBS98TfWlJNaCSNgl8mNWT6686bd0AjS+B2n6vOQMew3PiL1zXGn plQmIhn+rTldLEJRJlElbA0XWDcdV42/+9boM7DpelqWAlQrkWcP+NEtWs4jaD2p EHa7BFxDosvvpdPDIP0Rurdc8IdAh4cWged1ZBdFhHmWnbSOi74q0A8qvxVqhz8W Riq/HgZdUt7JiT3DhSn957oZNQCEibykEdEKdfXWcynBkN6bpOQsVviJo7aU0jpj n/51RtuMcDQnpWbOTviFCkQGPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfD+nb6 5fSUOI2FJlGqRMK/xFmFMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmfq0ZlNlBKOzItu54CTo3gTezciRsiqrfGtaL941gMd0hOiIMVFiv b4r9pHa5NO+yHnWdVhIR32csv+p7dgPp+/F0Qw20nAfQZEqBEZ6KhMqaVvjBp/QF cB41B/08D0dPhRyl0XuU/jFaKr+sXUIBPAEWkZjJkTfzKgXh5IiI0T0vhdhEJVLM TnEUPg3jxYFXnQg26KI2quEMTRgCs9Op7nf38DG00zFwHfcoFT87fpkjdQddeeMp xnhaLFBftBtlcCJB9BZTwfqmnOxmbB5EzVvCT3aSAVEgbPq/rEjn0MAEvKcXLeiA lKtJ6eL5Dfq6bhNsxT+cTRRQ+/61Mp5j -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org