$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: 1z2Xa/s6QnEUe4nW1C3fHU+XrUgkMcecyZcT8YraioA= Subject key identifier: 0A:D2:53:5C:2A:32:D2:86:1F:13:97:DA:CC:90:7E:82:BB:E7:E7:09 Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0398 Signing time: Sun 19 May 2024 02:36:47 +0000 Manifest this update: Sun 19 May 2024 02:36:46 +0000 Manifest next update: Sun 26 May 2024 02:36:46 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: BF/cnkl25CvAg5AOp3UYRV5uupUis1A/BQGkG1rl8ZI=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: mJK1+Pof5bQaRvEY9dUz/opDFV08l/3BLd/izY6LSvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: May 19 02:36:46 2024 GMT Not After : May 26 02:36:46 2024 GMT Subject: CN=664965be-326d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:7d:ee:5c:03:6d:de:87:97:ae:8e:66:64: ec:e0:f8:5c:05:70:eb:72:10:18:df:bb:bd:bd:5f: d7:08:e1:87:90:25:79:06:98:0f:f1:2f:8b:8d:40: fd:47:d1:a3:dc:77:52:e2:c4:7f:71:c1:a4:e7:11: 79:7c:35:77:03:76:35:1b:ed:e9:9c:f1:03:bb:a3: 49:44:9f:c6:ac:f0:ad:0d:4e:4b:e4:bd:47:7f:12: ac:71:40:9b:1d:80:83:7c:5c:50:91:6a:92:e4:f2: 59:71:b4:ad:68:48:a3:54:56:8f:ae:98:c3:2e:82: 25:3e:05:70:35:8c:a0:6b:50:16:5d:d3:59:e8:1b: 09:ba:5e:15:4d:0d:41:5a:ae:41:94:e4:6e:bb:2d: c1:2a:27:fe:e2:a0:b5:cb:07:95:bb:de:22:a5:f0: 8b:07:27:9b:f8:24:9d:56:fa:ab:56:8a:b9:fc:24: 04:29:fa:b4:ee:05:4c:8b:18:6f:0f:26:7e:67:1c: 2f:df:72:9b:0a:d4:53:d2:9d:11:0a:9b:7a:a2:78: 78:c0:04:7e:6c:55:0a:fa:01:56:f0:d0:15:a0:9e: b2:1c:04:d0:19:ee:92:81:1e:75:0b:9d:e6:68:fc: 29:fd:2c:0f:89:96:ee:ce:d2:08:2c:48:fb:a4:3c: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D2:53:5C:2A:32:D2:86:1F:13:97:DA:CC:90:7E:82:BB:E7:E7:09 X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:69:4d:f7:10:2c:eb:ea:73:65:a3:ff:55:17:c4:87:9a:3f: 3a:1b:04:b0:58:da:5f:b7:55:5a:b7:d2:8a:59:b3:cf:9f:fe: bc:2c:73:5a:20:5a:1b:40:fb:69:f3:de:4b:7f:48:71:ae:d8: db:b4:4b:01:8f:30:88:74:f5:6a:ed:eb:b6:6e:5b:88:5b:b3: 68:4f:3e:f3:40:f4:f1:77:55:45:59:21:db:2b:ff:14:28:b5: f5:8c:dd:14:2e:a2:18:c7:5a:43:99:08:71:3d:05:74:83:fe: 14:46:4d:c5:2d:c0:bf:64:f9:32:ff:65:9b:60:e8:e0:b2:4d: 8a:92:3b:a1:5b:a1:29:91:69:18:0e:13:c1:7b:93:14:f2:83: 0c:96:a1:01:51:09:49:59:0c:45:0a:15:27:07:2b:d4:e1:c9: 5f:a4:36:0c:a3:ee:f2:92:a1:db:f3:7a:6b:77:50:e2:d1:5b: ed:c7:0c:3f:0c:b4:12:60:19:8c:19:9e:54:5b:30:ee:2d:79: a7:3a:05:c9:af:e2:27:f6:9d:96:64:dc:78:e0:5a:56:fc:7b: d6:a1:4e:ba:e4:27:80:38:91:b6:97:fd:91:36:25:60:30:ec: c6:69:73:35:53:0c:97:dc:5e:b5:26:02:79:7b:b7:ad:0c:c2: 11:06:8d:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjQwNTE5MDIzNjQ2WhcNMjQwNTI2MDIzNjQ2WjAYMRYwFAYD VQQDEw02NjQ5NjViZS0zMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZB97lwDbd6Hl66OZmTs4PhcBXDrchAY37u9vV/XCOGHkCV5BpgP8S+LjUD9 R9Gj3HdS4sR/ccGk5xF5fDV3A3Y1G+3pnPEDu6NJRJ/GrPCtDU5L5L1HfxKscUCb HYCDfFxQkWqS5PJZcbStaEijVFaPrpjDLoIlPgVwNYyga1AWXdNZ6BsJul4VTQ1B Wq5BlORuuy3BKif+4qC1yweVu94ipfCLByeb+CSdVvqrVoq5/CQEKfq07gVMixhv DyZ+Zxwv33KbCtRT0p0RCpt6onh4wAR+bFUK+gFW8NAVoJ6yHATQGe6SgR51C53m aPwp/SwPiZbuztIILEj7pDwg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArSU1wq MtKGHxOX2syQfoK75+cJMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqaU33ECzr6nNlo/9VF8SHmj86GwSwWNpft1Vat9KKWbPPn/68LHNa IFobQPtp895Lf0hxrtjbtEsBjzCIdPVq7eu2bluIW7NoTz7zQPTxd1VFWSHbK/8U KLX1jN0ULqIYx1pDmQhxPQV0g/4URk3FLcC/ZPky/2WbYOjgsk2KkjuhW6EpkWkY DhPBe5MU8oMMlqEBUQlJWQxFChUnByvU4clfpDYMo+7ykqHb83prd1Di0Vvtxww/ DLQSYBmMGZ5UWzDuLXmnOgXJr+In9p2WZNx44FpW/HvWoU665CeAOJG2l/2RNiVg MOzGaXM1UwyX3F61JgJ5e7etDMIRBo0s -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org