$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json) Hash identifier: L0e8Ofv2zNu1RCbaPvTeqsI5GDYy1V7teKfEj2HNoaA= Subject key identifier: DA:F8:7A:D3:0C:7C:8F:33:10:8D:67:27:3A:E7:B6:69:FE:EB:76:DC Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft Manifest number: 56 Signing time: Sat 23 Nov 2024 05:08:49 +0000 Manifest this update: Sat 23 Nov 2024 05:08:48 +0000 Manifest next update: Sat 30 Nov 2024 05:08:48 +0000 Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: PymNe9ZD/K4RLD+fo4ZH3EOnym5hZXbDb8xJzEnoWJQ=) 2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: fEV4Nv9YEsz1gwlF4scqWCuSbskSixTpqMCtGjgZ1FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Validity Not Before: Nov 23 05:08:48 2024 GMT Not After : Nov 30 05:08:48 2024 GMT Subject: CN=67416361-a0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:16:f0:c1:00:45:a1:dc:5e:12:a7:8a:64:c5: 48:15:ed:cb:f7:7d:4f:7f:ef:b3:ea:80:18:99:28: f1:38:34:d1:c3:80:1f:2a:ae:69:8a:6f:c9:7a:dd: 82:11:b3:e7:5c:8d:ef:a8:3c:10:26:db:01:4e:20: d5:48:41:88:22:63:88:4a:a1:f4:b6:c8:a0:ab:d0: 30:9c:d6:58:88:23:86:2a:cd:de:cc:d2:79:cb:6b: 2e:98:6f:c2:f1:89:a8:e1:a7:50:b3:41:a7:09:3d: ff:ff:8a:69:d2:af:29:69:81:49:17:8a:0d:4d:5a: 34:01:fa:ce:a2:38:fe:a9:43:bc:18:ac:7b:4f:4b: 26:e2:e6:67:32:f6:1a:cb:c8:1c:4e:4c:62:25:5d: 53:95:43:c8:07:c9:2e:a0:29:df:5f:f3:90:71:67: 2c:67:1c:2d:5e:32:1e:67:fe:eb:84:d2:bf:4e:a4: 5f:6c:a7:1c:12:77:d4:8c:6c:2a:d5:c3:41:62:33: a3:74:4e:ac:31:67:88:3f:46:83:cc:63:1f:f7:a4: 76:40:40:49:c0:1f:ad:0b:22:e7:78:10:61:b1:0a: ca:69:72:eb:41:2c:c5:b5:12:10:82:29:90:ae:ca: 68:6c:f2:43:07:07:b8:7d:cf:79:1a:cc:52:ac:b6: 53:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:7A:D3:0C:7C:8F:33:10:8D:67:27:3A:E7:B6:69:FE:EB:76:DC X509v3 Authority Key Identifier: keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:9b:cc:a8:e4:b2:e7:9c:09:56:fb:7f:ba:fd:e2:3c:0b:6f: 0e:02:41:46:e2:08:be:52:f2:f3:9f:2b:69:1c:39:7d:ca:11: 0d:f4:43:16:a7:85:36:7f:45:61:3c:4a:cc:a3:7c:a4:db:af: 3f:be:23:1c:5e:1e:60:91:36:ac:62:95:f1:a6:2c:f7:aa:72: 04:31:bc:9d:e4:0f:7a:50:82:10:24:3a:8d:44:79:ad:64:72: c8:c1:49:38:3f:59:ac:75:a0:51:48:cd:01:48:0c:67:88:f0: ee:86:51:ad:60:d0:5d:33:96:24:f1:d7:62:fb:71:3d:ed:ec: 86:c7:e0:3f:9f:82:bd:0c:62:cd:d9:dd:bd:0b:50:58:a0:a5: 57:42:7d:d0:56:bd:f3:cc:eb:48:db:51:21:8b:e8:23:8a:4d: 36:b6:f2:30:a8:47:d0:72:1d:9b:ab:38:ed:77:f2:18:d3:02: 9a:2d:7f:e5:f3:bf:52:32:62:78:ed:84:de:0e:83:43:aa:57: 74:a9:2c:25:b0:60:2a:9b:aa:06:cf:e1:92:2c:16:7b:2f:fc: 56:8e:60:72:2e:55:ca:c5:7f:d5:b7:24:f6:dd:4a:78:7e:9f: 20:a4:e8:54:4f:50:9a:b9:19:a4:35:49:26:d2:22:21:74:53: 8a:f9:0f:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEVFQjExMC8GA1UEBRMoQTYxOTk1MENDQTY0NjQ4N0FCOUJENDRBNDFGN0Y2QzlC NDA5QjNENzAeFw0yNDExMjMwNTA4NDhaFw0yNDExMzAwNTA4NDhaMBgxFjAUBgNV BAMTDTY3NDE2MzYxLWEwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlFvDBAEWh3F4Sp4pkxUgV7cv3fU9/77PqgBiZKPE4NNHDgB8qrmmKb8l63YIR s+dcje+oPBAm2wFOINVIQYgiY4hKofS2yKCr0DCc1liII4Yqzd7M0nnLay6Yb8Lx iajhp1CzQacJPf//imnSrylpgUkXig1NWjQB+s6iOP6pQ7wYrHtPSybi5mcy9hrL yBxOTGIlXVOVQ8gHyS6gKd9f85BxZyxnHC1eMh5n/uuE0r9OpF9spxwSd9SMbCrV w0FiM6N0TqwxZ4g/RoPMYx/3pHZAQEnAH60LIud4EGGxCsppcutBLMW1EhCCKZCu ymhs8kMHB7h9z3kazFKstlMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2vh60wx8 jzMQjWcnOue2af7rdtwwHwYDVR0jBBgwFoAUphmVDMpkZIerm9RKQff2ybQJs9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4RUVCL0Y0OTExNDgwMkJD MzExRUZCODVGRkI2NUM0RjlBRTAyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhtVkRNcGtaSWVybTlSS1FmZjJ5YlFKczljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 RUVCL0Y0OTExNDgwMkJDMzExRUZCODVGRkI2NUM0RjlBRTAyL3BobVZETXBrWkll cm05UktRZmYyeWJRSnM5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJibzKjksuecCVb7f7r94jwLbw4CQUbiCL5S8vOfK2kcOX3KEQ30Qxan hTZ/RWE8SsyjfKTbrz++IxxeHmCRNqxilfGmLPeqcgQxvJ3kD3pQghAkOo1Eea1k csjBSTg/Wax1oFFIzQFIDGeI8O6GUa1g0F0zliTx12L7cT3t7IbH4D+fgr0MYs3Z 3b0LUFigpVdCfdBWvfPM60jbUSGL6COKTTa28jCoR9ByHZurOO138hjTApotf+Xz v1IyYnjthN4Og0OqV3SpLCWwYCqbqgbP4ZIsFnsv/FaOYHIuVcrFf9W3JPbdSnh+ nyCk6FRPUJq5GaQ1SSbSIiF0U4r5DyU= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org