$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: ZqxdPpAQ2JS6gFPnBh/UhcYl8mD7c25LF2Bxxe5ISTs= Subject key identifier: F8:0B:9D:A4:CE:4A:0A:CC:47:58:98:CD:1C:AD:E3:2F:EB:F5:B3:67 Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 90 Signing time: Fri 17 May 2024 07:11:22 +0000 Manifest this update: Fri 17 May 2024 07:11:22 +0000 Manifest next update: Fri 24 May 2024 07:11:21 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: 0YEL4N+AbkTSJ01qyy3C4o1J5Zb6+kb2pb0OG+KHmF0=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: 6j2vOI2kXd6N3+h1zp/rC70Fj9bV2njzCMXkuEGOS5M=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: qDuRNi65ua1IscwT3cePRkXHRb9ahVU+oWMcMJUnV4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: May 17 07:11:22 2024 GMT Not After : May 24 07:11:21 2024 GMT Subject: CN=6647031a-269a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:d7:61:e8:8b:32:c2:f9:e2:b4:2a:0e:1b: bc:77:12:8a:bc:81:4b:16:4e:c5:ef:ff:e6:51:e1: c2:fb:a9:79:8e:84:92:c1:ec:91:9c:22:29:67:7c: 28:35:2e:e5:a0:60:02:8a:13:1f:e8:f7:72:5e:03: 44:e0:5b:e2:09:17:69:25:8a:33:6c:5a:5d:77:7a: b1:20:fb:26:8e:dc:d5:c4:b0:0e:cf:02:3f:74:c8: 23:c5:57:56:46:3b:9f:0a:36:01:f2:89:eb:32:31: e6:65:f9:f8:b8:81:04:43:b0:ea:84:5d:aa:e9:5a: e7:43:d7:ab:86:60:6e:9a:34:c7:6f:19:e0:75:dd: 1a:e3:80:a2:df:a1:7e:4c:37:f4:aa:b8:de:ad:71: a3:39:3d:b0:e9:ac:0b:d6:b2:a5:1b:e0:82:03:d6: 62:cb:95:e2:67:51:1c:61:56:ca:69:5d:2a:96:08: 60:ab:08:75:e6:06:8d:64:6e:82:f1:70:2a:70:cd: 0c:9f:40:1a:71:6b:a3:e9:c6:45:ed:a9:99:6d:06: 82:c8:f7:4c:45:96:bf:d8:c2:24:de:98:de:c2:1c: b8:dd:24:08:73:42:78:b0:0a:89:4b:b3:16:47:3f: 1e:fd:e5:43:07:e2:47:0a:41:f6:1a:ac:e0:d7:1a: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:9D:A4:CE:4A:0A:CC:47:58:98:CD:1C:AD:E3:2F:EB:F5:B3:67 X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2d:af:ad:83:38:1c:37:b8:f2:d8:fd:45:3b:3a:c0:37:08: a2:4c:70:5e:a1:cc:06:26:35:eb:30:f9:19:e0:7f:65:7d:aa: d2:a9:7d:7e:0a:90:6f:ba:cf:ba:e4:64:a4:e9:a9:1d:d6:7f: 4d:39:04:45:38:6b:c5:8a:df:bf:57:a1:39:df:0e:a2:36:a6: 17:a0:eb:22:ec:a0:94:12:0d:f6:20:1d:59:ac:19:b3:26:38: 34:27:4f:f0:b6:32:ee:bd:a4:42:13:1f:82:0f:c0:5a:64:8f: bf:f1:4e:64:36:db:6f:64:1a:1b:d9:fd:05:f3:91:a6:ac:19: 8e:f1:f0:d9:09:e7:8e:bc:27:64:66:d3:18:84:6d:17:57:00: 03:80:f6:c7:a0:be:c3:c9:d4:8f:ec:a6:96:8c:bc:4e:81:3a: 7d:61:26:5f:ec:ce:03:7d:34:bb:ee:8a:01:6f:e4:93:89:c1: 21:ea:21:32:39:52:f3:f0:85:ad:35:48:74:22:e1:ca:62:5c: 94:f8:79:b1:ae:d6:85:00:41:5f:a1:68:d4:9d:f1:1d:7a:64: cb:33:83:1f:04:b7:14:e7:62:83:68:c4:89:47:7f:82:ef:d8: 1f:8c:a9:4d:5d:b0:5b:33:09:d0:56:84:30:38:9c:8e:3d:f0: 5b:08:a9:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjQwNTE3MDcxMTIyWhcNMjQwNTI0MDcxMTIxWjAYMRYwFAYD VQQDEw02NjQ3MDMxYS0yNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwrXYeiLMsL54rQqDhu8dxKKvIFLFk7F7//mUeHC+6l5joSSweyRnCIpZ3wo NS7loGACihMf6PdyXgNE4FviCRdpJYozbFpdd3qxIPsmjtzVxLAOzwI/dMgjxVdW RjufCjYB8onrMjHmZfn4uIEEQ7DqhF2q6VrnQ9erhmBumjTHbxngdd0a44Ci36F+ TDf0qrjerXGjOT2w6awL1rKlG+CCA9Ziy5XiZ1EcYVbKaV0qlghgqwh15gaNZG6C 8XAqcM0Mn0AacWuj6cZF7amZbQaCyPdMRZa/2MIk3pjewhy43SQIc0J4sAqJS7MW Rz8e/eVDB+JHCkH2Gqzg1xoAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgLnaTO SgrMR1iYzRyt4y/r9bNnMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsLa+tgzgcN7jy2P1FOzrANwiiTHBeocwGJjXrMPkZ4H9lfarSqX1+ CpBvus+65GSk6akd1n9NOQRFOGvFit+/V6E53w6iNqYXoOsi7KCUEg32IB1ZrBmz Jjg0J0/wtjLuvaRCEx+CD8BaZI+/8U5kNttvZBob2f0F85GmrBmO8fDZCeeOvCdk ZtMYhG0XVwADgPbHoL7DydSP7KaWjLxOgTp9YSZf7M4DfTS77ooBb+STicEh6iEy OVLz8IWtNUh0IuHKYlyU+HmxrtaFAEFfoWjUnfEdemTLM4MfBLcU52KDaMSJR3+C 79gfjKlNXbBbMwnQVoQwOJyOPfBbCKk6 -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org