$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: 0NDw2O3LL9Y4MpkwDcfqPGqz2ODTpFVWgYs4BqBUgps= Subject key identifier: CF:4B:68:D3:C7:EA:D7:76:96:75:A8:BD:C9:7C:B4:E2:4D:AA:53:4F Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 0375 Signing time: Sat 23 Nov 2024 00:26:57 +0000 Manifest this update: Sat 23 Nov 2024 00:26:56 +0000 Manifest next update: Sat 30 Nov 2024 00:26:56 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: plPcqY6S6c14Oiaku51iicGBRRHKjfNw2EFF8unoEKQ=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: 30fVbVXq/CoDMc17wH079VESP30cAy3Gw17NlarsviE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Nov 23 00:26:56 2024 GMT Not After : Nov 30 00:26:56 2024 GMT Subject: CN=67412150-f5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:27:d8:f5:f6:05:a9:bf:fa:de:3c:b7:51: 4b:7d:99:2d:b0:1a:61:f6:7c:16:8d:99:9b:a9:94: 34:b6:39:cd:d4:53:58:ea:89:66:06:ac:ab:90:23: 5b:26:07:57:9e:7a:70:6c:28:a7:9e:64:ac:62:57: 48:89:eb:5f:9f:38:9f:88:1f:95:85:ce:e1:c5:da: 38:70:30:c0:66:b5:78:85:bb:7a:01:8f:80:b9:78: 13:e1:cb:56:9d:46:a1:12:65:05:71:d0:86:aa:59: 1b:b6:29:18:9f:bf:90:04:7b:86:4a:7f:94:4c:bb: ca:c4:d5:14:23:33:de:34:8f:f5:6f:cc:44:68:ea: 0e:ff:39:79:8c:54:56:10:e9:1a:1b:d8:c1:00:63: 8d:80:9c:38:5d:55:f2:79:bd:33:e2:d0:93:47:7d: 42:e6:80:bc:f1:d0:43:2e:63:fd:44:a6:97:b6:80: 96:12:46:99:7e:e2:4c:db:d3:42:97:de:43:7c:84: f6:e2:f2:d3:9e:cf:2a:db:00:09:1b:c7:ba:89:9d: 18:e1:10:30:90:7c:a7:55:1d:60:e6:d5:f0:fd:50: 3b:c9:bd:41:4a:28:26:7c:43:d3:ac:d4:2e:2b:70: da:90:e2:1a:05:62:14:e0:d7:f8:e1:08:63:49:05: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:68:D3:C7:EA:D7:76:96:75:A8:BD:C9:7C:B4:E2:4D:AA:53:4F X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:14:d3:77:38:80:10:3c:92:c8:07:9b:b6:7c:cf:98:a7:5f: d4:54:6a:aa:9e:16:58:e1:7a:d8:7b:c9:bb:30:c3:37:b4:2f: 0b:5e:30:43:0b:df:2b:f8:5a:dd:3b:97:f4:14:c9:12:2a:d9: 7e:0f:6a:b0:c2:b7:4d:25:43:df:8d:8f:2c:ac:46:b9:ff:95: e4:5a:ea:6e:bf:36:e3:74:b7:2f:35:4b:8d:ae:3c:98:db:33: 95:ac:f7:58:ac:f7:d7:22:f7:c7:06:67:58:64:db:0f:28:6d: 60:23:eb:8b:02:ac:eb:77:e3:4a:05:3f:a1:b4:5c:a4:28:f2: 15:af:66:41:17:4e:d3:91:61:a3:51:95:76:2d:95:23:06:9f: a5:c3:eb:cc:2c:5f:9b:ce:d9:c7:75:39:a4:57:3a:1f:28:15: a9:c0:5e:30:a2:7e:35:90:c8:16:0d:d3:aa:52:af:2d:35:e2: 85:47:60:b5:7e:ca:19:dd:9e:e0:c6:8e:52:c8:28:5e:8f:4a: cd:ec:ad:c5:8b:94:d4:87:5f:1b:06:80:6a:c7:d0:dd:bf:d3: bb:36:0e:6d:a5:f4:3e:71:80:20:8e:75:00:56:14:41:21:ed: d8:dd:14:96:37:f4:c0:10:7a:ae:2c:93:40:9e:78:fc:11:af: e9:79:3c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjQxMTIzMDAyNjU2WhcNMjQxMTMwMDAyNjU2WjAYMRYwFAYD VQQDEw02NzQxMjE1MC1mNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpQn2PX2Bam/+t48t1FLfZktsBph9nwWjZmbqZQ0tjnN1FNY6olmBqyrkCNb JgdXnnpwbCinnmSsYldIietfnzifiB+Vhc7hxdo4cDDAZrV4hbt6AY+AuXgT4ctW nUahEmUFcdCGqlkbtikYn7+QBHuGSn+UTLvKxNUUIzPeNI/1b8xEaOoO/zl5jFRW EOkaG9jBAGONgJw4XVXyeb0z4tCTR31C5oC88dBDLmP9RKaXtoCWEkaZfuJM29NC l95DfIT24vLTns8q2wAJG8e6iZ0Y4RAwkHynVR1g5tXw/VA7yb1BSigmfEPTrNQu K3DakOIaBWIU4Nf44QhjSQWmnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9LaNPH 6td2lnWovcl8tOJNqlNPMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+FNN3OIAQPJLIB5u2fM+Yp1/UVGqqnhZY4XrYe8m7MMM3tC8LXjBD C98r+FrdO5f0FMkSKtl+D2qwwrdNJUPfjY8srEa5/5XkWupuvzbjdLcvNUuNrjyY 2zOVrPdYrPfXIvfHBmdYZNsPKG1gI+uLAqzrd+NKBT+htFykKPIVr2ZBF07TkWGj UZV2LZUjBp+lw+vMLF+bztnHdTmkVzofKBWpwF4won41kMgWDdOqUq8tNeKFR2C1 fsoZ3Z7gxo5SyChej0rN7K3Fi5TUh18bBoBqx9Ddv9O7Ng5tpfQ+cYAgjnUAVhRB Ie3Y3RSWN/TAEHquLJNAnnj8Ea/peTwE -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org