$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: sQAAWljLudxll6HtkkidltcvIp3TLTLsnPJw8Jm3JqM= Subject key identifier: 81:70:15:34:3D:53:DD:F5:ED:B1:7E:32:A1:05:42:6C:9F:F8:44:1D Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 030F Signing time: Fri 03 May 2024 03:14:53 +0000 Manifest this update: Fri 03 May 2024 03:14:52 +0000 Manifest next update: Fri 10 May 2024 03:14:52 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: kUdBAt1Tdo+KJ2p4cVRa1ItTT2lp34yZMUxQMxnOjwo=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: 30fVbVXq/CoDMc17wH079VESP30cAy3Gw17NlarsviE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: May 3 03:14:52 2024 GMT Not After : May 10 03:14:52 2024 GMT Subject: CN=663456ac-91dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bf:67:ea:7d:af:4f:38:a5:09:6b:d5:cf:f2: 1f:cf:31:cd:1c:f9:a2:b3:ce:4a:61:24:50:be:e2: 63:8d:cf:51:3a:47:66:17:52:10:63:32:19:44:b5: c5:c0:66:f1:51:bf:64:59:f5:bd:84:bf:ac:09:34: 6c:2f:de:cf:ab:65:ad:06:71:1e:22:42:3a:3a:a6: 54:4e:49:d3:e5:bb:8f:82:74:51:e8:0f:f4:ac:6a: 4b:28:76:d5:35:f2:c4:49:d2:a5:e3:15:d2:46:06: 3e:19:07:8d:e3:85:7c:78:ac:b1:a8:be:b3:f0:7a: 6a:dc:e0:71:ba:c7:97:46:6b:9c:54:6b:bd:a2:ec: 81:3a:be:c0:70:2f:95:52:ac:22:2d:98:46:dc:7a: b8:c1:02:4c:8c:21:52:46:63:d6:f3:d1:1f:06:0a: 7d:f1:a7:67:d2:2f:5b:e2:27:99:48:f3:6c:a6:85: 8f:d3:75:57:1f:e0:58:a2:0e:ef:a7:05:fc:5a:c1: 0c:dc:de:d6:3d:90:67:d3:05:3d:47:e2:b7:c2:11: c3:ac:a5:48:9f:63:bc:3b:1e:6a:15:83:cc:63:da: e6:f0:73:5f:01:ad:16:e5:5f:84:41:3c:24:fd:b8: b4:5c:51:67:f3:90:7f:1a:c7:17:d9:32:c9:0e:27: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:70:15:34:3D:53:DD:F5:ED:B1:7E:32:A1:05:42:6C:9F:F8:44:1D X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f7:e9:16:9a:b3:ee:13:f3:f8:dc:a8:61:3c:1f:f8:bb:bf: 69:81:dd:43:92:9e:f3:29:71:3c:e1:68:6f:5e:8f:56:19:af: 1a:c1:61:fb:56:9a:44:9d:7a:e6:67:7f:b0:23:fc:1e:86:f0: 10:ec:1d:b4:8b:49:e7:4f:27:ca:5c:83:b1:30:88:47:f3:a4: 65:ac:e6:92:9a:5c:80:b7:47:3c:70:7d:ba:bc:de:9f:27:7f: d7:ac:3c:bc:3b:88:b6:b5:74:e6:eb:0f:88:2e:83:26:04:dd: 88:15:7c:22:2f:46:f6:12:b9:f8:8f:c1:e3:4b:cf:db:91:6f: 4e:7d:a9:11:0f:87:15:f8:98:f1:01:10:4b:ee:58:df:ac:ac: 6b:3b:fa:60:2a:74:60:13:92:e1:94:03:01:0f:56:ba:57:6b: 60:05:cd:2b:9e:49:aa:51:16:87:bf:ad:47:d1:be:2b:a2:a7: e3:d7:26:87:44:af:62:49:e9:e4:67:13:cd:9f:f5:50:0c:77: 8c:86:af:58:4b:9f:0c:e4:a8:3f:7c:2d:6e:82:23:53:73:ab: 05:14:40:da:2f:56:5c:7f:a3:bc:28:99:81:5f:65:50:e6:b9: c3:cc:0a:b5:72:6d:a2:50:16:fc:b3:78:00:d0:5f:e6:7a:9e: 8f:81:2e:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjQwNTAzMDMxNDUyWhcNMjQwNTEwMDMxNDUyWjAYMRYwFAYD VQQDEw02NjM0NTZhYy05MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+b9n6n2vTzilCWvVz/IfzzHNHPmis85KYSRQvuJjjc9ROkdmF1IQYzIZRLXF wGbxUb9kWfW9hL+sCTRsL97Pq2WtBnEeIkI6OqZUTknT5buPgnRR6A/0rGpLKHbV NfLESdKl4xXSRgY+GQeN44V8eKyxqL6z8Hpq3OBxuseXRmucVGu9ouyBOr7AcC+V UqwiLZhG3Hq4wQJMjCFSRmPW89EfBgp98adn0i9b4ieZSPNspoWP03VXH+BYog7v pwX8WsEM3N7WPZBn0wU9R+K3whHDrKVIn2O8Ox5qFYPMY9rm8HNfAa0W5V+EQTwk /bi0XFFn85B/GscX2TLJDifJWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFwFTQ9 U9317bF+MqEFQmyf+EQdMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg9+kWmrPuE/P43KhhPB/4u79pgd1Dkp7zKXE84WhvXo9WGa8awWH7 VppEnXrmZ3+wI/wehvAQ7B20i0nnTyfKXIOxMIhH86RlrOaSmlyAt0c8cH26vN6f J3/XrDy8O4i2tXTm6w+ILoMmBN2IFXwiL0b2Ern4j8HjS8/bkW9OfakRD4cV+Jjx ARBL7ljfrKxrO/pgKnRgE5LhlAMBD1a6V2tgBc0rnkmqURaHv61H0b4roqfj1yaH RK9iSenkZxPNn/VQDHeMhq9YS58M5Kg/fC1ugiNTc6sFFEDaL1Zcf6O8KJmBX2VQ 5rnDzAq1cm2iUBb8s3gA0F/mep6PgS65 -----END CERTIFICATE-----Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org