$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: FlIFikJ6Nth6zOvoMs8KY/EEv8zKhuuqluCaE6AbY1Q= Subject key identifier: 2B:17:38:89:C1:F7:3D:48:B6:36:9E:63:54:3C:6F:2C:E6:A2:12:DA Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 012F Signing time: Fri 31 May 2024 05:43:26 +0000 Manifest this update: Fri 31 May 2024 05:43:26 +0000 Manifest next update: Fri 07 Jun 2024 05:43:26 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: /s3Wh6Tz5sYrs3a0cEF0gDP9RA3iR2fUqjHiy6Q7IBM=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: vCQD+Nt4o4f1O+f48Wp9WcxuQgtY5Gy63Z7aYXTtFuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: May 31 05:43:26 2024 GMT Not After : Jun 7 05:43:26 2024 GMT Subject: CN=6659637e-6a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:b2:a5:d1:39:44:2d:49:16:13:ba:9d:34: 98:2f:1f:0b:bb:83:fb:32:f4:f4:58:83:43:d2:00: c8:d9:e6:93:6a:29:16:37:0b:39:8e:1d:ba:ca:65: 32:fb:8b:90:bb:8c:d6:af:9a:5c:0f:47:6a:5c:33: 55:3c:08:96:5b:af:79:8b:b0:cf:62:fd:37:7a:b1: 41:5c:cb:2f:64:bf:0c:95:2c:98:33:a6:08:63:bd: 2f:a0:e3:b0:41:28:da:a9:da:40:40:28:52:bf:de: 77:39:ce:8f:ad:7d:4d:68:d2:8a:61:63:96:d2:4b: 62:d9:31:b8:18:c1:a6:24:39:a5:10:31:a9:89:b3: 9f:50:99:0b:2b:8f:99:78:a4:a9:df:2f:50:31:eb: 59:0e:a8:82:35:81:7f:f6:35:23:b6:10:43:bc:af: 69:62:17:93:f0:e6:33:be:a4:12:30:a7:a3:ac:fb: 61:47:0a:19:12:61:26:cb:a9:1b:ee:37:f5:ea:de: 86:2c:aa:28:fc:5d:58:b7:a1:5d:00:85:77:48:18: 54:a8:c4:a5:90:f6:6d:10:0b:89:e6:79:c2:47:8d: 3c:6a:95:2a:23:da:97:84:b3:13:25:ad:cd:41:5a: 67:3b:e4:0a:68:25:eb:1b:1b:91:2f:68:99:7b:f3: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:38:89:C1:F7:3D:48:B6:36:9E:63:54:3C:6F:2C:E6:A2:12:DA X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:91:9c:63:ad:2f:b2:9d:74:84:af:9d:30:a2:a9:52:1c:f4: b7:fc:6b:96:bf:61:c3:54:42:c2:32:a9:3e:e3:73:31:2e:e3: 9c:da:39:74:50:e0:d6:27:7e:98:32:32:eb:38:97:0c:be:ef: 8c:f0:49:df:0d:a6:2c:f3:b6:8e:91:76:a8:c9:df:12:17:62: 98:1a:d5:6b:08:90:b9:ef:d0:cf:c2:82:d3:63:3e:f7:40:c5: 9f:88:35:3d:00:e9:3c:c0:96:84:3c:d0:ff:65:87:9f:9a:7b: 25:3b:e3:83:dc:96:7e:ab:4f:c8:66:8a:de:23:06:50:2e:ef: 30:31:ba:65:04:d4:15:bd:e5:ec:73:cc:87:1e:1c:eb:2c:82: ba:dc:e4:c5:f5:08:41:e6:b4:ef:e4:8b:a2:76:82:af:e6:f8: 83:e5:a5:cb:82:99:71:e1:d5:3e:cb:10:20:97:72:10:0a:7a: ff:db:b7:90:cd:eb:af:39:6c:0c:a4:4d:93:41:c6:54:0d:26: 86:b1:37:28:72:e8:3e:0f:0c:2b:45:86:b9:7f:e1:32:1d:96: ac:63:07:16:d7:18:88:38:60:9f:73:6b:ec:46:f7:bb:3c:a3: 7b:c1:ed:66:02:eb:f6:0a:fa:c0:90:f9:21:7d:7b:6d:62:64: d6:43:c0:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjQwNTMxMDU0MzI2WhcNMjQwNjA3MDU0MzI2WjAYMRYwFAYD VQQDEw02NjU5NjM3ZS02YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmqypdE5RC1JFhO6nTSYLx8Lu4P7MvT0WIND0gDI2eaTaikWNws5jh26ymUy +4uQu4zWr5pcD0dqXDNVPAiWW695i7DPYv03erFBXMsvZL8MlSyYM6YIY70voOOw QSjaqdpAQChSv953Oc6PrX1NaNKKYWOW0kti2TG4GMGmJDmlEDGpibOfUJkLK4+Z eKSp3y9QMetZDqiCNYF/9jUjthBDvK9pYheT8OYzvqQSMKejrPthRwoZEmEmy6kb 7jf16t6GLKoo/F1Yt6FdAIV3SBhUqMSlkPZtEAuJ5nnCR408apUqI9qXhLMTJa3N QVpnO+QKaCXrGxuRL2iZe/OMBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsXOInB 9z1ItjaeY1Q8byzmohLaMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbkZxjrS+ynXSEr50woqlSHPS3/GuWv2HDVELCMqk+43MxLuOc2jl0 UODWJ36YMjLrOJcMvu+M8EnfDaYs87aOkXaoyd8SF2KYGtVrCJC579DPwoLTYz73 QMWfiDU9AOk8wJaEPND/ZYefmnslO+OD3JZ+q0/IZoreIwZQLu8wMbplBNQVveXs c8yHHhzrLIK63OTF9QhB5rTv5IuidoKv5viD5aXLgplx4dU+yxAgl3IQCnr/27eQ zeuvOWwMpE2TQcZUDSaGsTcocug+DwwrRYa5f+EyHZasYwcW1xiIOGCfc2vsRve7 PKN7we1mAuv2CvrAkPkhfXttYmTWQ8BR -----END CERTIFICATE-----Generated at Fri May 31 06:49:08 2024 by rpki-client on console-ams.rpki-client.org