$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: ZlNSWvaIhkD20vtPebGR7l/hnrUjSc7Jn40vDhmzDqE= Subject key identifier: FC:EE:DD:3A:5A:96:86:4E:6E:24:F4:EC:14:CB:FE:8C:19:AF:20:77 Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 033D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 0339 Signing time: Wed 01 May 2024 03:17:22 +0000 Manifest this update: Wed 01 May 2024 03:17:22 +0000 Manifest next update: Wed 08 May 2024 03:17:22 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: sOzrfLZppaxV56rdHnbWMA91zguW+FlLgVGZNETHZWo=) 2: D6AAD7B2745A11EC8FBEDD40C4F9AE02.roa (hash: SE5zc1fO/aEed5V7IyJ0ZULI0CLrZqKxJrcQOxWzEkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 829 (0x33d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: May 1 03:17:22 2024 GMT Not After : May 8 03:17:22 2024 GMT Subject: CN=6631b442-2a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:17:a1:64:f3:7a:bb:91:ff:11:73:d1:bd: 93:e0:30:7c:5d:46:3e:2e:2f:eb:62:18:f4:a5:4f: 85:78:f2:e0:50:75:a2:30:ff:2b:c8:26:19:e7:45: 4d:40:5b:70:65:87:a3:7f:0f:53:dc:14:35:00:33: c3:05:59:df:97:5c:e7:bd:5f:db:9d:3b:04:2d:ab: 58:ba:6d:e8:b6:97:cf:a3:ba:4c:f8:2f:23:23:0e: 28:58:29:b4:e3:82:e4:91:34:c6:d7:31:42:e9:aa: fb:13:d5:10:bd:50:0c:eb:b4:d2:2b:59:0a:c5:21: 84:91:7b:a8:bf:83:f3:cc:7a:9e:ca:66:9a:d4:11: 08:47:c3:b9:4a:08:b4:d2:51:e3:77:b7:a4:21:c3: 7e:1f:81:dd:3c:d1:5a:2b:5f:8d:a7:e2:42:a0:a9: 6a:7e:4c:75:69:10:65:85:12:31:d9:bd:2b:c1:86: 7b:ad:54:53:82:8c:9c:67:3e:2d:c6:0b:0a:ce:c5: 49:b4:25:db:14:6c:6e:ff:fb:40:2d:96:e4:c6:76: 1f:e0:7a:1d:43:9d:d6:22:6d:dc:c7:f6:57:25:47: 93:3e:5f:d5:a3:23:11:e9:c1:fa:06:ea:d8:b3:82: 49:a3:70:82:01:8b:92:12:83:f5:2b:f3:a2:dd:41: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EE:DD:3A:5A:96:86:4E:6E:24:F4:EC:14:CB:FE:8C:19:AF:20:77 X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ba:d6:9e:6d:72:80:6d:56:e7:0d:14:41:e3:fa:6c:eb:df: c2:50:50:0d:a0:5c:35:58:69:c4:ed:c0:b8:db:bf:1c:57:12: ca:f0:0c:49:63:cb:2e:7d:b0:1c:db:4f:f3:1f:e1:81:58:5f: e3:80:11:ad:cc:9d:66:e8:64:d6:f1:a0:18:2a:d0:93:0a:d8: ea:85:f3:f4:a6:88:12:96:81:d9:21:2b:b4:c0:82:05:c3:7e: 53:92:8a:ca:da:d4:d8:b4:35:57:c6:0f:45:ed:92:22:ac:09: 61:50:5d:40:60:ee:71:85:8b:95:98:a3:05:44:e4:82:e5:4f: 7d:e2:de:36:11:6e:a5:f9:d8:b8:ec:36:73:54:86:8f:bb:a4: 2a:c4:bc:d2:eb:40:53:23:a6:14:46:a9:2c:20:b0:83:e4:4a: 76:9a:8f:c9:b4:fe:b5:8a:3e:e0:d9:15:3f:8c:f8:e6:7d:60: 40:78:80:35:f1:c0:80:a7:47:84:7f:c4:38:7e:e2:da:18:3d: d4:f0:d9:c0:37:e7:61:d6:8d:8e:ee:d2:54:d9:ee:54:93:d4: 52:cf:3c:41:53:36:34:55:61:f7:16:21:a0:02:53:22:1c:3c: e0:0d:0f:64:ff:91:8d:e3:1a:df:ae:ff:40:56:07:26:18:3d: de:eb:11:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjQwNTAxMDMxNzIyWhcNMjQwNTA4MDMxNzIyWjAYMRYwFAYD VQQDEw02NjMxYjQ0Mi0yYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArekXoWTzeruR/xFz0b2T4DB8XUY+Li/rYhj0pU+FePLgUHWiMP8ryCYZ50VN QFtwZYejfw9T3BQ1ADPDBVnfl1znvV/bnTsELatYum3otpfPo7pM+C8jIw4oWCm0 44LkkTTG1zFC6ar7E9UQvVAM67TSK1kKxSGEkXuov4PzzHqeymaa1BEIR8O5Sgi0 0lHjd7ekIcN+H4HdPNFaK1+Np+JCoKlqfkx1aRBlhRIx2b0rwYZ7rVRTgoycZz4t xgsKzsVJtCXbFGxu//tALZbkxnYf4HodQ53WIm3cx/ZXJUeTPl/VoyMR6cH6BurY s4JJo3CCAYuSEoP1K/Oi3UGgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzu3Tpa loZObiT07BTL/owZryB3MB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/utaebXKAbVbnDRRB4/ps69/CUFANoFw1WGnE7cC4278cVxLK8AxJ Y8sufbAc20/zH+GBWF/jgBGtzJ1m6GTW8aAYKtCTCtjqhfP0pogSloHZISu0wIIF w35TkorK2tTYtDVXxg9F7ZIirAlhUF1AYO5xhYuVmKMFROSC5U994t42EW6l+di4 7DZzVIaPu6QqxLzS60BTI6YURqksILCD5Ep2mo/JtP61ij7g2RU/jPjmfWBAeIA1 8cCAp0eEf8Q4fuLaGD3U8NnAN+dh1o2O7tJU2e5Uk9RSzzxBUzY0VWH3FiGgAlMi HDzgDQ9k/5GN4xrfrv9AVgcmGD3e6xF4 -----END CERTIFICATE-----Generated at Wed May 1 05:59:14 2024 by rpki-client on console-fra.rpki-client.org