$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: 8V5qK4y2PteZ4M+UVcmxWoQiuOXhu/3DZPVwJF9NcFk= Subject key identifier: 6D:4F:36:19:31:2B:C6:23:DA:29:BE:1D:BD:36:72:87:CA:6C:AB:19 Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 01CD Signing time: Thu 03 Apr 2025 02:12:07 +0000 Manifest this update: Thu 03 Apr 2025 02:12:06 +0000 Manifest next update: Thu 10 Apr 2025 02:12:06 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: E7yndEP8PaQSME8UPXnS7+nKGMss2Q3h+0xz6g0xQyk=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2 Validity Not Before: Apr 3 02:12:06 2025 GMT Not After : Apr 10 02:12:06 2025 GMT Subject: CN=67edee76-b829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:f5:76:b7:a4:8c:7c:41:b0:b3:de:ef:84: 10:b6:ae:7b:2b:c9:18:47:41:31:89:c4:3c:cb:6c: 41:de:02:91:ec:e9:79:58:53:7e:72:0e:6a:e5:1b: af:ee:61:15:45:35:9e:3d:a6:cc:ab:5c:45:31:98: 2c:05:26:c2:a0:59:19:e5:03:a7:a5:17:c2:cf:0b: a9:78:6c:94:64:45:19:fa:20:ee:4e:af:22:e0:b9: 0f:cf:e0:2f:ec:02:7e:b5:2b:30:f2:c5:57:fb:05: f6:c5:65:db:78:39:2b:01:c1:52:cc:fd:42:cc:20: ff:e3:74:c2:fb:d7:d9:87:01:9f:4f:e6:6c:4c:df: f4:a0:f6:02:09:e5:80:16:21:fe:83:60:7b:db:ee: b6:f3:0d:16:0c:f2:9e:91:81:c4:2d:dc:cb:be:13: f0:f5:a8:50:f8:f7:cb:ba:ff:25:3f:31:12:d5:fb: 42:68:b4:50:38:fc:6b:f8:90:e4:95:24:9e:bb:b1: cc:64:07:f4:a7:75:20:3a:dd:ec:2d:6e:44:4d:57: 63:52:8c:d8:f3:89:a6:18:bc:26:e0:62:19:48:dc: 04:6a:2b:fe:c4:ec:aa:1c:c1:22:43:81:69:a8:03: 1c:ee:2e:4c:be:97:cf:26:9f:dc:03:ca:16:eb:9b: dd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4F:36:19:31:2B:C6:23:DA:29:BE:1D:BD:36:72:87:CA:6C:AB:19 X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:02:19:ec:46:35:dc:71:13:c2:19:00:08:94:3d:87:c9:d9: 65:bf:9c:9f:9e:af:57:fb:88:16:18:52:25:02:09:d4:6f:c9: c7:06:98:1d:52:ea:41:86:96:1f:19:92:89:8c:00:20:77:34: c1:d6:5e:6b:17:fa:e1:fd:85:e4:7a:7d:47:2d:48:27:b8:9d: 6c:1a:20:cc:bd:58:69:cc:9f:d7:8b:ab:43:8c:b2:bf:85:bd: 7f:8f:81:49:fc:eb:9e:f4:9b:3f:c4:db:c7:6b:6b:48:a4:1e: 5a:35:16:31:1a:5e:53:3a:d8:65:c1:e7:6c:d4:66:8a:6f:3f: 63:c2:d0:87:a1:27:b5:a2:49:df:8b:95:37:73:73:dd:fc:20: 61:99:4a:af:fa:f5:ca:05:7e:72:ef:d1:f1:5a:d2:cd:bf:26: 97:6e:f9:0a:fa:06:85:2c:14:9c:7f:6f:b3:4c:fd:62:94:5b: 6c:df:cf:38:d5:e7:f4:b0:3c:1f:cc:ad:16:6f:ba:4d:b4:d6: 70:24:d6:44:ad:08:bf:29:c1:5d:8a:cd:55:61:07:b7:7b:c2: c4:8d:15:70:e4:35:c5:48:c9:d6:62:0d:12:b9:a0:e4:f8:04: c2:0c:c4:b8:ea:5a:ad:34:c4:bf:8c:c2:e7:d2:8d:42:c6:48: b1:1f:0e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUwNDAzMDIxMjA2WhcNMjUwNDEwMDIxMjA2WjAYMRYwFAYD VQQDEw02N2VkZWU3Ni1iODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRn1drekjHxBsLPe74QQtq57K8kYR0ExicQ8y2xB3gKR7Ol5WFN+cg5q5Ruv 7mEVRTWePabMq1xFMZgsBSbCoFkZ5QOnpRfCzwupeGyUZEUZ+iDuTq8i4LkPz+Av 7AJ+tSsw8sVX+wX2xWXbeDkrAcFSzP1CzCD/43TC+9fZhwGfT+ZsTN/0oPYCCeWA FiH+g2B72+628w0WDPKekYHELdzLvhPw9ahQ+PfLuv8lPzES1ftCaLRQOPxr+JDk lSSeu7HMZAf0p3UgOt3sLW5ETVdjUozY84mmGLwm4GIZSNwEaiv+xOyqHMEiQ4Fp qAMc7i5MvpfPJp/cA8oW65vdiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1PNhkx K8Yj2im+Hb02cofKbKsZMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjAhnsRjXccRPCGQAIlD2Hydllv5yfnq9X+4gWGFIlAgnUb8nHBpgd UupBhpYfGZKJjAAgdzTB1l5rF/rh/YXken1HLUgnuJ1sGiDMvVhpzJ/Xi6tDjLK/ hb1/j4FJ/Oue9Js/xNvHa2tIpB5aNRYxGl5TOthlweds1GaKbz9jwtCHoSe1oknf i5U3c3Pd/CBhmUqv+vXKBX5y79HxWtLNvyaXbvkK+gaFLBScf2+zTP1ilFts3884 1ef0sDwfzK0Wb7pNtNZwJNZErQi/KcFdis1VYQe3e8LEjRVw5DXFSMnWYg0SuaDk +ATCDMS46lqtNMS/jMLn0o1CxkixHw7C -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:42 2025 by rpki-client