$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json) Hash identifier: ZIGWTawXmPskbChmYpAj75I6otn/D9LJhNy7ZFAtoeE= Subject key identifier: 89:2E:38:CA:06:90:7B:C1:D7:52:39:56:08:86:77:08:E1:4B:E0:76 Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft Manifest number: 33 Signing time: Sun 15 Sep 2024 10:03:18 +0000 Manifest this update: Sun 15 Sep 2024 10:03:17 +0000 Manifest next update: Sun 22 Sep 2024 10:03:17 +0000 Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: yGd5AclZJorz+S2Pie5TSZ1UMgJcUOwB5n9CaBGm8sc=) 2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: fEV4Nv9YEsz1gwlF4scqWCuSbskSixTpqMCtGjgZ1FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Validity Not Before: Sep 15 10:03:17 2024 GMT Not After : Sep 22 10:03:17 2024 GMT Subject: CN=66e6b0e5-2e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:c7:72:45:4c:e5:8a:4a:ec:a0:76:7f:0b: c8:70:61:65:0c:1b:0d:b8:95:7a:24:7a:8d:22:4d: ee:84:a1:c1:79:44:74:08:85:e5:b7:bc:c6:df:b5: 19:e8:8b:54:db:6d:99:da:30:1e:ee:2b:fe:08:0b: c7:a3:4a:b4:cf:32:f1:6f:5d:32:46:31:fb:c2:8a: 4a:b3:55:38:67:ee:c8:5d:b8:12:2e:77:f0:8c:21: c1:59:18:22:da:b6:ce:5f:3e:6f:53:3a:5b:d5:92: 11:3d:99:fc:ae:1a:d4:89:7c:e4:d3:2e:c3:8e:69: a7:40:9a:8c:34:bc:25:41:68:e1:3f:df:a2:1d:a0: 45:9e:78:48:8d:cf:90:2d:53:e2:49:39:86:2e:1b: d2:99:79:ec:69:aa:9b:64:f9:6e:0c:73:12:81:ca: 5a:eb:53:d4:eb:a5:5f:4d:94:5f:73:75:a9:ba:4a: 62:98:10:45:87:d6:0f:35:3c:c1:7b:36:e9:54:e3: 7c:f5:bc:36:d5:a1:d2:c2:b2:aa:f0:44:93:0e:96: 35:06:5e:82:0e:e2:35:00:3d:f9:96:f0:04:22:b1: 94:f2:c1:5f:e4:ca:03:2e:ac:62:29:0b:b1:ba:a8: 35:55:0a:96:ce:ab:4e:dc:5e:eb:d5:b5:73:a2:5b: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:38:CA:06:90:7B:C1:D7:52:39:56:08:86:77:08:E1:4B:E0:76 X509v3 Authority Key Identifier: keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:00:f6:5a:d4:06:24:a4:bd:6b:cf:1c:e0:bc:d9:df:32:34: 55:9d:c0:39:65:4e:63:e0:e1:ee:f2:50:b1:0b:9d:d1:9d:1d: d6:73:84:d8:e7:ba:eb:76:57:22:f8:4b:d1:49:58:a1:ca:a3: 4b:da:a3:2c:7d:90:5f:60:44:b8:4e:c8:c7:06:7e:d2:a8:6d: d9:41:30:0d:46:94:50:94:96:86:90:aa:37:ae:1a:51:54:82: 06:78:5b:04:09:92:e5:4e:b5:34:0d:47:55:a8:19:44:c8:de: ec:b8:79:ed:8c:fe:ff:cd:0f:8b:72:97:be:72:17:ad:69:a3: 96:96:dd:d8:2b:dc:1b:ff:15:1c:20:db:99:73:24:db:99:da: 6e:e6:70:fb:1f:95:fc:24:65:08:94:b9:f5:65:1d:6b:bd:71: 39:f5:12:1f:0e:70:d1:d8:8e:a9:8a:0f:90:c7:f3:ff:ec:54: 3e:9e:14:e0:6f:35:d1:a3:13:d2:46:04:9d:cd:c6:4a:dc:77: 2c:b4:85:b1:5f:f4:fe:55:91:7f:33:5c:f2:17:70:c8:90:43: 70:4a:89:28:82:82:47:81:95:f5:51:9c:95:0f:75:ee:6b:05: 8e:1a:41:02:62:9e:e8:7d:2a:a8:3f:ac:83:2e:f8:57:52:25: 6a:81:17:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEVFQjExMC8GA1UEBRMoQTYxOTk1MENDQTY0NjQ4N0FCOUJENDRBNDFGN0Y2QzlC NDA5QjNENzAeFw0yNDA5MTUxMDAzMTdaFw0yNDA5MjIxMDAzMTdaMBgxFjAUBgNV BAMTDTY2ZTZiMGU1LTJlMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCvMdyRUzlikrsoHZ/C8hwYWUMGw24lXokeo0iTe6EocF5RHQIheW3vMbftRno i1TbbZnaMB7uK/4IC8ejSrTPMvFvXTJGMfvCikqzVThn7shduBIud/CMIcFZGCLa ts5fPm9TOlvVkhE9mfyuGtSJfOTTLsOOaadAmow0vCVBaOE/36IdoEWeeEiNz5At U+JJOYYuG9KZeexpqptk+W4McxKBylrrU9TrpV9NlF9zdam6SmKYEEWH1g81PMF7 NulU43z1vDbVodLCsqrwRJMOljUGXoIO4jUAPfmW8AQisZTywV/kygMurGIpC7G6 qDVVCpbOq07cXuvVtXOiW4eBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiS44ygaQ e8HXUjlWCIZ3COFL4HYwHwYDVR0jBBgwFoAUphmVDMpkZIerm9RKQff2ybQJs9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4RUVCL0Y0OTExNDgwMkJD MzExRUZCODVGRkI2NUM0RjlBRTAyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhtVkRNcGtaSWVybTlSS1FmZjJ5YlFKczljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 RUVCL0Y0OTExNDgwMkJDMzExRUZCODVGRkI2NUM0RjlBRTAyL3BobVZETXBrWkll cm05UktRZmYyeWJRSnM5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIA9lrUBiSkvWvPHOC82d8yNFWdwDllTmPg4e7yULELndGdHdZzhNjn uut2VyL4S9FJWKHKo0vaoyx9kF9gRLhOyMcGftKobdlBMA1GlFCUloaQqjeuGlFU ggZ4WwQJkuVOtTQNR1WoGUTI3uy4ee2M/v/ND4tyl75yF61po5aW3dgr3Bv/FRwg 25lzJNuZ2m7mcPsflfwkZQiUufVlHWu9cTn1Eh8OcNHYjqmKD5DH8//sVD6eFOBv NdGjE9JGBJ3Nxkrcdyy0hbFf9P5VkX8zXPIXcMiQQ3BKiSiCgkeBlfVRnJUPde5r BY4aQQJinuh9Kqg/rIMu+FdSJWqBF/U= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:32 2024 by rpki-client on console-ams.rpki-client.org