$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: yujiPoTVAYd7IGml/ScuwEflUAg9qQlDj/Jh65Ekbxc= Subject key identifier: 1A:F4:5D:B4:49:EB:77:24:A0:B3:B0:4C:8B:F0:27:40:B1:1F:12:20 Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0391 Signing time: Fri 03 May 2024 02:44:00 +0000 Manifest this update: Fri 03 May 2024 02:43:59 +0000 Manifest next update: Fri 10 May 2024 02:43:59 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: WOj0LLTFczroB+ZaX8GY6W+bdyYw0l6VlyGfZRHCNCU=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: mJK1+Pof5bQaRvEY9dUz/opDFV08l/3BLd/izY6LSvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: May 3 02:43:59 2024 GMT Not After : May 10 02:43:59 2024 GMT Subject: CN=66344f70-2571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:6f:87:2a:59:b5:50:f8:e5:1d:21:5a:d5: 58:49:3d:3c:23:8a:80:9f:1e:ca:d4:1b:90:0e:19: 21:90:99:c4:3f:ae:e4:43:bd:fa:b7:2f:ce:b8:83: a1:bf:c9:44:4e:c1:85:aa:99:51:9b:59:34:ec:8a: 83:68:99:ce:2c:bc:bb:d3:91:6c:1e:62:7d:20:c8: d2:2f:04:72:91:38:d8:51:34:4b:e0:8c:50:a4:df: 94:fc:63:ce:7a:3e:1c:10:aa:d5:eb:e3:14:46:ab: d2:20:18:be:8f:ab:8d:d4:4a:54:f8:a3:44:bd:07: 59:b6:c0:3a:8f:2b:5d:06:93:70:f2:51:83:e3:39: 1b:e7:d0:c0:72:22:5d:3a:d2:fb:7c:98:7d:6a:2b: 0d:35:b3:37:c0:48:0c:41:ac:5d:3b:37:44:79:4f: bb:a9:d0:ec:a9:ca:a8:bd:b9:6f:1f:72:94:33:52: d5:4a:56:51:64:d8:92:e6:43:66:64:67:2a:27:84: 92:de:95:70:39:3e:7b:ef:0c:d7:9a:d2:1e:31:4b: 6d:f5:29:95:25:37:33:b3:62:b2:90:55:e9:96:ad: fc:cb:e0:1f:1e:86:82:7a:b8:57:c9:fd:31:72:f1: 4b:25:fc:53:79:ca:4b:7a:67:8b:7b:cf:3d:af:4d: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F4:5D:B4:49:EB:77:24:A0:B3:B0:4C:8B:F0:27:40:B1:1F:12:20 X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6f:b8:cc:17:ad:5a:a5:fc:c3:58:c9:36:57:de:08:e8:e1: 8e:08:e9:a7:80:2e:e8:e7:44:db:fd:d6:b5:39:93:9c:31:f3: 34:3a:0e:39:8f:f8:63:f9:d9:90:6e:9f:aa:1a:5a:a7:51:ca: a7:ce:d2:f5:bb:5b:3d:a3:1e:36:19:a6:b1:b1:5d:3c:2d:c1: ec:bd:71:c1:a6:31:8b:8a:7e:e4:19:9c:03:dc:cd:4e:be:96: 88:05:1f:f6:86:a8:3b:02:63:2b:02:fd:ed:3f:7a:6e:9e:74: 49:7e:90:0c:b5:a6:6f:9a:06:43:5b:d2:69:ee:1a:1a:45:6a: 30:fe:1f:3b:8b:3a:3c:28:a5:0d:41:4d:19:a4:37:f2:f8:28: e6:03:31:1b:08:f7:26:c1:41:08:0d:8f:82:6f:b7:1a:6e:5f: 18:a0:56:95:66:a9:ba:e2:45:fc:16:66:47:66:48:f1:19:95: 33:7d:21:b7:cf:3d:5c:0c:e9:90:28:e0:d0:0c:45:b2:fc:b0: 63:d9:57:d5:fd:2b:5b:a7:3f:d9:63:39:e6:5c:ea:a7:3e:27: 9c:86:b8:69:c7:e1:1d:e2:d1:68:c4:b7:15:f5:df:29:8f:e8: db:e4:a1:7c:c2:05:f7:25:90:eb:44:31:98:86:59:0b:a0:2c: 0c:6f:57:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjQwNTAzMDI0MzU5WhcNMjQwNTEwMDI0MzU5WjAYMRYwFAYD VQQDEw02NjM0NGY3MC0yNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApotvhypZtVD45R0hWtVYST08I4qAnx7K1BuQDhkhkJnEP67kQ736ty/OuIOh v8lETsGFqplRm1k07IqDaJnOLLy705FsHmJ9IMjSLwRykTjYUTRL4IxQpN+U/GPO ej4cEKrV6+MURqvSIBi+j6uN1EpU+KNEvQdZtsA6jytdBpNw8lGD4zkb59DAciJd OtL7fJh9aisNNbM3wEgMQaxdOzdEeU+7qdDsqcqovblvH3KUM1LVSlZRZNiS5kNm ZGcqJ4SS3pVwOT577wzXmtIeMUtt9SmVJTczs2KykFXplq38y+AfHoaCerhXyf0x cvFLJfxTecpLemeLe889r02zDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr0XbRJ 63ckoLOwTIvwJ0CxHxIgMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2b7jMF61apfzDWMk2V94I6OGOCOmngC7o50Tb/da1OZOcMfM0Og45 j/hj+dmQbp+qGlqnUcqnztL1u1s9ox42GaaxsV08LcHsvXHBpjGLin7kGZwD3M1O vpaIBR/2hqg7AmMrAv3tP3punnRJfpAMtaZvmgZDW9Jp7hoaRWow/h87izo8KKUN QU0ZpDfy+CjmAzEbCPcmwUEIDY+Cb7cabl8YoFaVZqm64kX8FmZHZkjxGZUzfSG3 zz1cDOmQKODQDEWy/LBj2VfV/Stbpz/ZYznmXOqnPiechrhpx+Ed4tFoxLcV9d8p j+jb5KF8wgX3JZDrRDGYhlkLoCwMb1eO -----END CERTIFICATE-----Generated at Fri May 3 04:45:12 2024 by rpki-client on console-fra.rpki-client.org