$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: rr7UxxTRv/SQ7xec+/Zk7MxFvylojDKWoZ1S3XWDctI= Subject key identifier: CF:7E:09:58:9A:0C:39:14:6D:2E:9B:41:F3:11:E7:A9:C5:1F:5B:2E Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 92 Signing time: Tue 21 May 2024 07:00:46 +0000 Manifest this update: Tue 21 May 2024 07:00:46 +0000 Manifest next update: Tue 28 May 2024 07:00:46 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: bArqqhsaQmMhbtMhGIPMmcYvV/2ZTZIZG0JevxUWkkQ=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: 6j2vOI2kXd6N3+h1zp/rC70Fj9bV2njzCMXkuEGOS5M=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: qDuRNi65ua1IscwT3cePRkXHRb9ahVU+oWMcMJUnV4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: May 21 07:00:46 2024 GMT Not After : May 28 07:00:46 2024 GMT Subject: CN=664c469e-6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:cf:83:dd:23:aa:41:d1:b0:d6:9e:30:c6: 15:c3:98:3d:7d:87:03:5c:68:33:d6:13:ac:dd:3b: 30:4d:c8:b8:dc:82:fb:41:c1:43:98:dc:7e:24:4a: 26:99:78:6c:e7:84:14:c7:88:51:e7:93:d9:ba:6c: eb:e6:92:19:7f:ef:bb:12:91:74:d1:73:fe:fe:0c: 37:3b:c7:f1:d1:46:89:ac:af:39:0b:6b:c8:6e:82: de:89:8d:e2:fc:fa:3f:c4:17:1c:44:dd:7d:72:93: cf:eb:ad:1a:6d:9f:f3:c8:02:1e:3a:42:10:3e:fc: 22:77:d8:d9:b5:6c:62:c1:27:cc:31:4f:36:3f:39: a1:ac:c0:30:88:fc:a9:0e:f7:ed:58:c3:f8:0f:2b: 52:c4:af:a5:aa:e3:76:20:8b:8f:dd:c4:c5:f6:af: 85:e6:d4:71:97:10:53:7c:f2:35:8b:23:a8:b9:3a: 75:56:78:84:b5:13:ed:d9:f4:84:5e:ba:95:3c:af: 58:41:80:eb:33:2c:1e:cc:ea:30:95:7d:dc:06:bb: 5e:e6:3b:fa:d7:b3:cf:f9:98:41:69:d0:b9:e7:53: 54:29:62:d2:bc:89:99:dd:e4:b2:21:32:7a:96:11: b7:b8:bd:54:b8:94:5b:3b:a6:36:a6:40:72:d7:b6: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:09:58:9A:0C:39:14:6D:2E:9B:41:F3:11:E7:A9:C5:1F:5B:2E X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0f:a9:7a:5d:0a:84:5c:81:49:7b:d3:92:8f:7f:f3:5b:53: 6a:19:fc:a9:f2:70:d4:9f:71:a8:fe:32:84:1c:46:d6:89:3a: 8d:13:1f:fb:37:5f:7a:f0:6f:7a:5d:33:39:14:88:be:ab:95: a9:c9:9e:dc:52:ef:b7:28:cc:4e:a5:40:4c:df:c0:fe:44:08: 35:60:7a:2b:c6:4b:ec:87:35:c9:78:c7:1b:12:ca:fc:83:b0: 24:d0:9d:3e:a2:1c:b3:8c:ea:de:88:8e:ac:91:b5:b5:ae:d0: f6:fd:33:bd:89:0e:ee:14:88:1f:ee:98:bf:83:ac:b7:63:9e: c2:94:c1:81:0a:50:3d:fd:cc:a4:b2:fc:6b:be:58:25:c6:ac: d7:5e:b5:3d:f6:1e:2c:8c:4e:09:6b:3a:2f:0f:50:1f:34:2b: 00:c9:69:ff:b6:d2:73:78:a9:b1:d0:23:8a:7d:25:b2:85:15: e2:5a:d7:a3:60:96:c2:7f:25:93:74:6e:79:af:1f:be:3e:51: 7c:8c:79:60:6d:30:3a:d9:0b:0f:b0:50:da:81:35:54:34:02: 31:39:59:58:69:08:b4:09:90:fd:a8:5a:20:e6:97:22:c1:a3: f7:07:20:d0:1c:9b:85:6b:6b:49:88:e3:ee:dc:be:79:77:d4: ee:44:16:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjQwNTIxMDcwMDQ2WhcNMjQwNTI4MDcwMDQ2WjAYMRYwFAYD VQQDEw02NjRjNDY5ZS02ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLXPg90jqkHRsNaeMMYVw5g9fYcDXGgz1hOs3TswTci43IL7QcFDmNx+JEom mXhs54QUx4hR55PZumzr5pIZf++7EpF00XP+/gw3O8fx0UaJrK85C2vIboLeiY3i /Po/xBccRN19cpPP660abZ/zyAIeOkIQPvwid9jZtWxiwSfMMU82PzmhrMAwiPyp DvftWMP4DytSxK+lquN2IIuP3cTF9q+F5tRxlxBTfPI1iyOouTp1VniEtRPt2fSE XrqVPK9YQYDrMywezOowlX3cBrte5jv617PP+ZhBadC551NUKWLSvImZ3eSyITJ6 lhG3uL1UuJRbO6Y2pkBy17bJ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9+CVia DDkUbS6bQfMR56nFH1suMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+D6l6XQqEXIFJe9OSj3/zW1NqGfyp8nDUn3Go/jKEHEbWiTqNEx/7 N1968G96XTM5FIi+q5WpyZ7cUu+3KMxOpUBM38D+RAg1YHorxkvshzXJeMcbEsr8 g7Ak0J0+ohyzjOreiI6skbW1rtD2/TO9iQ7uFIgf7pi/g6y3Y57ClMGBClA9/cyk svxrvlglxqzXXrU99h4sjE4JazovD1AfNCsAyWn/ttJzeKmx0COKfSWyhRXiWtej YJbCfyWTdG55rx++PlF8jHlgbTA62QsPsFDagTVUNAIxOVlYaQi0CZD9qFog5pci waP3ByDQHJuFa2tJiOPu3L55d9TuRBZf -----END CERTIFICATE-----Generated at Tue May 21 10:12:06 2024 by rpki-client on console-ams.rpki-client.org