$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json) Hash identifier: DdDMOj3qAejS2X13FVhNB8C0K24Ay0CbAelbg7pZTgE= Subject key identifier: 44:EC:90:BE:47:D9:D0:F7:53:34:59:9B:87:BA:8A:A3:E0:26:C6:48 Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft Manifest number: 0109 Signing time: Fri 31 May 2024 06:15:16 +0000 Manifest this update: Fri 31 May 2024 06:15:15 +0000 Manifest next update: Fri 07 Jun 2024 06:15:15 +0000 Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: FTmhCBMZtScjf9LzOXh5p/wTYaBHjIfhF5ck/j64zdI=) 2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: XDp5vKNqietHWH+1Ug9qbVg9nwovELbR8zTWmvW1PDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: May 31 06:15:15 2024 GMT Not After : Jun 7 06:15:15 2024 GMT Subject: CN=66596af3-3b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:45:46:8a:d7:7d:06:fe:b4:2c:d2:72:5c:b4: 8d:d5:d0:02:ad:11:58:70:1a:6b:a0:55:1b:b2:ae: 90:05:a4:2d:68:6b:1e:47:bf:06:7d:12:fb:a4:dc: c3:86:65:08:17:e3:d8:d8:c4:ce:fd:11:4c:ab:40: 22:c1:a9:c7:53:50:9a:17:4e:b0:5e:3c:a9:ee:03: 58:0a:cd:3e:87:35:d8:2a:ed:3d:d8:93:bb:e1:af: 87:46:39:37:4f:6f:aa:f3:d5:b9:f6:5e:14:ee:f2: 96:ed:5d:ca:ef:ba:9a:54:a3:9b:be:e1:ca:5f:65: df:89:0a:36:10:02:62:d7:7b:5f:cf:05:a3:84:4b: 49:11:2e:5b:38:3e:98:3d:6a:00:1d:79:97:e2:70: e7:96:43:1c:d3:7d:e8:09:ed:af:4b:67:f1:75:bf: 82:ce:9b:aa:f3:08:93:e4:22:57:cc:4f:c1:c5:1f: 47:b9:67:6a:0e:00:d2:75:1b:67:10:e8:c6:cc:59: 01:52:95:45:28:23:32:66:80:8a:7e:15:07:b7:d5: 3d:83:59:4e:f5:a6:a3:4a:50:25:1b:a4:5d:4e:a5: 63:2d:c6:c8:df:c1:84:54:de:be:d0:b6:e5:dd:8b: 48:b3:57:a6:c0:7b:d4:2d:cd:56:85:a9:29:7f:80: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EC:90:BE:47:D9:D0:F7:53:34:59:9B:87:BA:8A:A3:E0:26:C6:48 X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:c4:e2:8b:7d:b6:f6:a3:16:99:7c:f4:b1:df:03:d3:98: 04:1c:d5:07:e9:7a:f1:3a:c7:49:21:6f:65:cd:5a:19:88:a6: c2:8d:f2:64:82:f5:36:9d:85:4d:e4:47:f5:4b:af:38:f2:ff: 9b:de:a2:04:c8:ad:30:6c:c1:b1:75:32:83:0f:96:79:82:c7: db:dd:e8:25:09:11:04:5d:d7:42:81:e5:f0:e6:dc:32:44:c4: 2c:8a:ad:39:89:1d:53:38:d6:4f:ff:e2:3d:fc:7b:9e:aa:ec: 55:24:c4:d2:bb:cc:3a:43:8d:13:19:7d:73:0d:d4:31:3e:64: b5:d8:82:0c:7c:ba:01:b8:bc:b1:c4:03:11:4f:08:aa:a0:cc: a0:69:97:5b:fc:9c:c7:c1:16:c2:e4:b0:f5:51:0d:2a:92:81: 43:08:e7:7f:25:28:d3:e4:9a:aa:34:90:93:b2:4c:08:cd:c1: 16:b9:60:23:08:3b:b0:75:6f:90:b3:5d:43:7e:f0:04:42:a7: d3:ae:47:e4:2f:2a:ba:1b:35:e8:02:fb:6d:ad:4e:a5:24:a2: ef:70:45:5d:e2:2e:6e:f4:d5:52:fa:f3:cc:15:f3:04:db:36: eb:7c:d0:f7:51:b9:d9:f3:33:ef:27:85:cc:56:03:a7:94:3e: 43:e2:a7:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjQwNTMxMDYxNTE1WhcNMjQwNjA3MDYxNTE1WjAYMRYwFAYD VQQDEw02NjU5NmFmMy0zYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UVGitd9Bv60LNJyXLSN1dACrRFYcBproFUbsq6QBaQtaGseR78GfRL7pNzD hmUIF+PY2MTO/RFMq0AiwanHU1CaF06wXjyp7gNYCs0+hzXYKu092JO74a+HRjk3 T2+q89W59l4U7vKW7V3K77qaVKObvuHKX2XfiQo2EAJi13tfzwWjhEtJES5bOD6Y PWoAHXmX4nDnlkMc033oCe2vS2fxdb+Czpuq8wiT5CJXzE/BxR9HuWdqDgDSdRtn EOjGzFkBUpVFKCMyZoCKfhUHt9U9g1lO9aajSlAlG6RdTqVjLcbI38GEVN6+0Lbl 3YtIs1emwHvULc1Whakpf4B/dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETskL5H 2dD3UzRZm4e6iqPgJsZIMB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I4Qi9ERDA0NzNGQThCRkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZN bmhiTE00SlVEVVlpTmdJVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWlsTii3229qMWmXz0sd8D05gEHNUH6XrxOsdJIW9lzVoZiKbCjfJk gvU2nYVN5Ef1S6848v+b3qIEyK0wbMGxdTKDD5Z5gsfb3eglCREEXddCgeXw5twy RMQsiq05iR1TONZP/+I9/HuequxVJMTSu8w6Q40TGX1zDdQxPmS12IIMfLoBuLyx xAMRTwiqoMygaZdb/JzHwRbC5LD1UQ0qkoFDCOd/JSjT5JqqNJCTskwIzcEWuWAj CDuwdW+Qs11DfvAEQqfTrkfkLyq6GzXoAvttrU6lJKLvcEVd4i5u9NVS+vPMFfME 2zbrfND3UbnZ8zPvJ4XMVgOnlD5D4qdL -----END CERTIFICATE-----Generated at Fri May 31 10:01:42 2024 by rpki-client on console-ams.rpki-client.org