$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: pTIrrVjGm6j0BTZjR9Q8+rBsdFv/hEt+s8CJGFP+pYU= Subject key identifier: FB:FE:29:8C:4D:6D:40:7A:26:62:69:53:3C:4D:79:30:A0:11:FC:DD Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 03FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 03F8 Signing time: Sat 23 Nov 2024 00:02:54 +0000 Manifest this update: Sat 23 Nov 2024 00:02:54 +0000 Manifest next update: Sat 30 Nov 2024 00:02:54 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: PgkBbi+VyXBnhyzybswC50Kw7s/cmP2tXpxPI2yz8vI=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: mJK1+Pof5bQaRvEY9dUz/opDFV08l/3BLd/izY6LSvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Nov 23 00:02:54 2024 GMT Not After : Nov 30 00:02:54 2024 GMT Subject: CN=67411bae-d302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:bc:f2:d3:77:55:46:4c:a7:cb:a3:72:35: 0c:37:a1:b4:f7:d9:b6:2f:66:0b:55:58:55:0f:ea: 72:62:1d:0e:f4:2b:a6:2d:2a:2a:3c:22:25:55:87: 1f:a8:80:52:bd:3a:a4:e9:25:1d:15:70:1a:72:0d: 32:43:c5:77:9b:af:7e:e1:1e:98:04:41:f2:28:84: fb:90:a5:6e:2b:2c:a4:96:a4:fb:3c:9e:b8:8f:eb: 2a:90:df:f0:37:71:70:32:77:75:a6:ca:8f:25:86: 99:70:63:a4:1e:09:ff:3b:18:d4:83:77:04:35:01: c0:f5:91:6a:46:8a:50:3e:b5:d6:17:5c:d9:37:0c: ec:56:88:36:e6:0e:e3:8d:a5:e4:58:d3:ba:06:60: 8f:aa:58:d8:2f:79:ba:2a:e9:91:12:76:e3:96:9f: c4:ef:82:25:e6:c9:f8:c4:72:0e:dc:6c:c8:1c:18: 4f:3a:6c:aa:f3:87:2f:cd:de:50:b5:bd:d8:60:73: 7d:30:dc:1f:ad:24:21:95:a8:2f:8d:94:23:f0:f4: 95:f8:61:1f:d1:bb:a4:2c:fb:66:83:41:40:c0:3e: c5:5c:c9:c2:74:f9:df:d0:7c:8a:e6:09:2f:8f:ee: f8:f3:ec:ec:b4:d0:39:90:52:1a:bd:61:10:95:14: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FE:29:8C:4D:6D:40:7A:26:62:69:53:3C:4D:79:30:A0:11:FC:DD X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:19:5e:59:19:a0:40:b8:40:cd:bd:61:9a:66:e6:7b:79:eb: 38:56:a0:6c:0a:ff:dc:2d:8d:93:cc:90:d9:fe:0a:8c:7e:15: be:d5:4c:b9:7a:fa:85:22:25:2e:b5:44:e5:ee:97:32:ea:6a: b9:ac:22:ad:ee:c5:95:a8:bd:d2:83:c8:e7:09:a5:ed:24:b5: dc:7c:6b:bc:14:2e:25:83:c8:cc:17:07:8b:fa:a6:5e:8e:b9: 9c:79:91:dd:7c:89:2e:ab:9e:d6:65:5b:ea:fd:3d:49:02:bf: 07:ca:17:42:80:05:96:2c:55:09:41:5c:96:c3:68:76:56:af: a2:29:43:4e:5b:21:47:21:2e:9a:c7:72:de:02:28:87:55:7b: 44:4a:96:a9:7e:b1:43:c4:a7:f7:26:05:8a:4b:57:da:84:86: 6f:78:da:41:41:5b:4a:54:c2:55:7f:ef:c2:83:cf:2c:c9:ef: 7a:05:c7:61:b3:fd:1e:b9:af:3d:35:03:a9:3f:c6:94:f0:57: 05:5d:ee:8f:15:66:d2:07:23:37:f4:5e:79:fa:43:cd:db:a3: 73:4f:57:0f:e6:7d:de:7a:04:a3:42:df:ff:5a:90:6b:7a:77: 7f:56:36:9a:f3:4d:9a:6f:59:c4:1e:07:a8:51:13:c1:77:45: 7c:b4:1c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjQxMTIzMDAwMjU0WhcNMjQxMTMwMDAwMjU0WjAYMRYwFAYD VQQDEw02NzQxMWJhZS1kMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7i88tN3VUZMp8ujcjUMN6G099m2L2YLVVhVD+pyYh0O9CumLSoqPCIlVYcf qIBSvTqk6SUdFXAacg0yQ8V3m69+4R6YBEHyKIT7kKVuKyyklqT7PJ64j+sqkN/w N3FwMnd1psqPJYaZcGOkHgn/OxjUg3cENQHA9ZFqRopQPrXWF1zZNwzsVog25g7j jaXkWNO6BmCPqljYL3m6KumREnbjlp/E74Il5sn4xHIO3GzIHBhPOmyq84cvzd5Q tb3YYHN9MNwfrSQhlagvjZQj8PSV+GEf0bukLPtmg0FAwD7FXMnCdPnf0HyK5gkv j+748+zstNA5kFIavWEQlRSpaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv+KYxN bUB6JmJpUzxNeTCgEfzdMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGV5ZGaBAuEDNvWGaZuZ7ees4VqBsCv/cLY2TzJDZ/gqMfhW+1Uy5 evqFIiUutUTl7pcy6mq5rCKt7sWVqL3Sg8jnCaXtJLXcfGu8FC4lg8jMFweL+qZe jrmceZHdfIkuq57WZVvq/T1JAr8HyhdCgAWWLFUJQVyWw2h2Vq+iKUNOWyFHIS6a x3LeAiiHVXtESpapfrFDxKf3JgWKS1fahIZveNpBQVtKVMJVf+/Cg88sye96Bcdh s/0eua89NQOpP8aU8FcFXe6PFWbSByM39F55+kPN26NzT1cP5n3eegSjQt//WpBr end/Vjaa802ab1nEHgeoURPBd0V8tBxz -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org