$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: sL4JDydubvYlDfsPyo9wMOFv5tZSnZWolT20t5d6G5U= Subject key identifier: 21:D0:E9:F7:1A:39:F5:7D:23:76:BB:EB:10:44:48:23:DF:77:3C:09 Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: F2 Signing time: Sat 23 Nov 2024 03:29:25 +0000 Manifest this update: Sat 23 Nov 2024 03:29:25 +0000 Manifest next update: Sat 30 Nov 2024 03:29:25 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: P2m8trhv+2NgRxPEtyake2LDkja0wc2CmtUUHq1PIvk=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: c3n7ErqEI7wUv0Zh/82IQ41rmFajxkaaakm4Lrf4zUE=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: OyzekySsh32QnXqLJ9xXpFy1GOqrIr4htNA7lulacc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Nov 23 03:29:25 2024 GMT Not After : Nov 30 03:29:25 2024 GMT Subject: CN=67414c15-f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:ef:30:4f:5b:a0:b4:2b:00:2c:20:6a:36: 8d:4b:67:4b:9b:af:38:66:18:60:16:ca:ed:7d:1a: 3f:26:09:b1:3c:39:b1:e9:54:04:28:ec:2d:81:35: f7:2a:50:35:27:6d:02:ba:1d:5d:d4:e1:43:1f:ff: a8:47:18:31:f5:d4:8f:ae:4f:fb:80:84:84:3f:3c: f9:db:48:3a:85:24:34:89:e8:6d:49:9e:41:5b:0c: 58:d2:02:7f:98:fb:8e:02:c7:2b:fd:b5:bb:77:97: c3:52:51:a1:33:35:36:44:e0:6c:6f:34:47:41:36: 9f:a8:75:53:db:3c:de:82:51:97:e6:11:ec:37:4b: 46:52:03:98:d5:c3:a6:af:d1:ea:79:2c:d2:f2:ae: 65:92:ab:f4:4e:09:19:50:0f:4c:bb:88:74:1a:30: 04:8f:a7:6d:72:bb:34:d4:77:ff:9d:40:58:d3:d7: 3e:bb:3e:11:e8:a8:50:97:3d:49:96:bf:35:cc:78: dc:ba:b2:fd:e2:fb:36:d0:52:2d:d9:50:a6:22:e6: 51:fb:ea:fa:41:78:8f:05:3e:37:f8:5a:1c:e0:d0: 84:f0:11:33:48:e0:6b:32:22:53:39:10:b4:96:81: b8:6b:2c:a0:15:9d:d9:83:d2:3a:c3:c4:c6:8a:c2: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:E9:F7:1A:39:F5:7D:23:76:BB:EB:10:44:48:23:DF:77:3C:09 X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:db:4a:b4:02:cc:60:57:7a:37:b2:21:eb:25:1c:c5:ce: 4c:1b:7d:2e:f6:11:d4:4c:20:5c:31:2d:52:5e:34:bf:cc:54: 2e:f0:2a:1e:f8:1c:41:ff:6d:51:f2:36:2a:5a:6a:45:55:a1: 65:f5:66:11:ec:6a:db:b8:31:bb:fa:78:f5:c2:10:81:23:52: ff:00:5a:24:eb:7e:78:9a:15:77:36:d8:0e:78:d1:94:1e:ef: 1f:42:8f:70:bc:6d:cf:fb:84:a2:92:ae:fb:e4:05:67:78:2f: 55:56:9f:a9:4d:a3:07:b1:65:0c:a1:1a:7c:08:87:e0:0c:c1: d3:cd:ac:e5:8e:06:78:a4:3a:59:ca:fb:3d:ee:1a:da:a4:3d: 13:67:13:57:1a:a4:51:b7:ba:cd:78:e6:cd:7a:43:b2:00:30: 60:ca:52:70:15:27:11:ea:c9:23:bf:55:e4:2c:07:54:52:e8: c2:1d:bb:ed:1f:38:39:a6:d1:22:99:97:a5:6d:9b:c9:79:21: 56:4c:06:9d:8d:80:23:3e:8f:fa:41:79:f8:d9:56:8b:37:34: 79:29:b4:f4:0e:5e:5c:13:2e:50:f1:79:72:4d:05:97:b7:00: 8c:d6:6c:be:6f:84:4e:6f:1a:15:10:4a:87:e7:c4:a3:52:54: a0:3f:0a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjQxMTIzMDMyOTI1WhcNMjQxMTMwMDMyOTI1WjAYMRYwFAYD VQQDEw02NzQxNGMxNS1mNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9vvME9boLQrACwgajaNS2dLm684ZhhgFsrtfRo/JgmxPDmx6VQEKOwtgTX3 KlA1J20Cuh1d1OFDH/+oRxgx9dSPrk/7gISEPzz520g6hSQ0iehtSZ5BWwxY0gJ/ mPuOAscr/bW7d5fDUlGhMzU2ROBsbzRHQTafqHVT2zzeglGX5hHsN0tGUgOY1cOm r9HqeSzS8q5lkqv0TgkZUA9Mu4h0GjAEj6dtcrs01Hf/nUBY09c+uz4R6KhQlz1J lr81zHjcurL94vs20FIt2VCmIuZR++r6QXiPBT43+Foc4NCE8BEzSOBrMiJTORC0 loG4ayygFZ3Zg9I6w8TGisKmOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHQ6fca OfV9I3a76xBESCPfdzwJMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4ttKtALMYFd6N7Ih6yUcxc5MG30u9hHUTCBcMS1SXjS/zFQu8Coe +BxB/21R8jYqWmpFVaFl9WYR7GrbuDG7+nj1whCBI1L/AFok6354mhV3NtgOeNGU Hu8fQo9wvG3P+4Sikq775AVneC9VVp+pTaMHsWUMoRp8CIfgDMHTzazljgZ4pDpZ yvs97hrapD0TZxNXGqRRt7rNeObNekOyADBgylJwFScR6skjv1XkLAdUUujCHbvt Hzg5ptEimZelbZvJeSFWTAadjYAjPo/6QXn42VaLNzR5KbT0Dl5cEy5Q8XlyTQWX twCM1my+b4RObxoVEEqH58SjUlSgPwrZ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org