$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json) Hash identifier: r98kFEYeau/9dxWfiPoNr8SbqruRKkp3mDrVXqwewd0= Subject key identifier: 90:FB:2A:9E:44:8E:48:85:75:17:71:28:17:97:AE:73:D4:7F:E5:C3 Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Certificate serial: 33C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft Manifest number: 33C5 Signing time: Sat 18 May 2024 15:10:34 +0000 Manifest this update: Sat 18 May 2024 15:10:33 +0000 Manifest next update: Sat 25 May 2024 15:10:33 +0000 Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: rvWspSD6XIvMslzhGQVub2ohXEKAvjnvCq/1LpAS8oI=) 2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: Nqt6w4JIBJFpy5SdGQGfx3lLcCZPlFZWf2NiMJdYoyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13256 (0x33c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Validity Not Before: May 18 15:10:33 2024 GMT Not After : May 25 15:10:33 2024 GMT Subject: CN=6648c4ea-ade0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:7d:f5:60:21:85:40:ad:f1:3f:c9:99:cf: 75:9c:d2:6a:db:cc:7c:e9:18:6f:f1:30:49:4f:74: 1b:91:eb:f0:4f:24:2b:68:e0:6f:4b:62:0c:dd:89: 9e:e3:c4:fd:45:fe:74:e6:e1:b2:bd:90:2e:b0:51: a6:08:57:a1:42:58:ad:7b:7f:fb:a7:3b:db:9c:f4: 13:57:c1:1b:ce:71:5e:55:08:bf:09:48:a1:22:03: 06:37:c7:c5:a7:73:96:07:b2:26:7b:a1:f1:da:3e: 3c:69:44:c8:d5:64:2d:6f:b8:8f:47:45:a6:9e:88: c1:78:65:17:ef:3a:dc:64:64:4c:33:3d:59:a0:d7: 9f:9b:70:68:3f:34:6b:71:32:d2:b8:f2:46:34:30: ab:0b:f9:f5:8e:b0:c8:2b:5d:ca:ca:50:50:cf:1a: 51:e8:2d:21:34:1d:99:6e:2c:b8:28:89:d3:a7:ad: d7:ea:cf:a8:9a:62:92:b3:db:20:7f:6f:82:6e:3c: 49:12:e8:7e:58:0b:b7:3e:be:05:b5:56:a7:84:43: e0:83:3d:ce:0c:80:19:f6:de:3d:29:18:ec:c2:a2: 4b:6e:cd:f9:1a:3e:6f:3b:d4:67:a1:37:62:18:86: 29:fc:30:4d:76:05:fc:a8:59:9a:1a:79:26:4d:82: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:2A:9E:44:8E:48:85:75:17:71:28:17:97:AE:73:D4:7F:E5:C3 X509v3 Authority Key Identifier: keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:17:07:4c:0d:c1:a4:65:f2:ea:9f:c6:d5:2f:85:17:47:04: c4:76:c1:8e:94:52:0b:4c:5a:69:1c:16:7d:0b:cf:e6:9a:a6: 0d:6c:5d:5d:7f:fc:69:00:44:6e:e0:22:79:02:98:14:94:e1: a4:81:e6:30:18:0e:5c:a9:98:4c:0b:27:1b:06:a5:1d:5a:17: 77:f4:c9:8c:47:7f:71:a9:2d:9e:49:2b:5c:53:b6:8d:c1:24: a2:6a:7c:0b:b7:1d:51:cd:b7:af:59:c4:0b:59:76:2b:31:76: b6:5b:e9:de:3e:eb:65:a9:7d:27:67:65:d4:99:db:a9:47:33: dc:a4:1b:43:37:d6:67:2d:6b:38:52:27:8c:46:68:97:90:ad: 5d:32:29:39:a2:20:9a:69:73:af:b4:e1:9a:3d:06:74:7a:14: 01:b0:08:9c:02:6b:dd:f9:58:50:b9:56:af:e0:ea:e3:62:de: 3b:b3:41:53:cc:85:ad:2b:c4:67:b7:06:82:d3:d4:a7:02:60: 31:d7:9d:90:f7:e3:84:59:64:24:88:61:75:da:30:09:87:09: 92:a1:57:8c:87:2f:aa:04:2b:a9:39:9b:f0:ff:1a:d9:df:58: 8b:93:96:42:71:aa:97:79:29:c5:38:dc:68:9a:9c:15:20:c7: 39:bf:19:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4 QjBDRUQzNUUwHhcNMjQwNTE4MTUxMDMzWhcNMjQwNTI1MTUxMDMzWjAYMRYwFAYD VQQDEw02NjQ4YzRlYS1hZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04R99WAhhUCt8T/Jmc91nNJq28x86Rhv8TBJT3QbkevwTyQraOBvS2IM3Yme 48T9Rf505uGyvZAusFGmCFehQlite3/7pzvbnPQTV8EbznFeVQi/CUihIgMGN8fF p3OWB7Ime6Hx2j48aUTI1WQtb7iPR0WmnojBeGUX7zrcZGRMMz1ZoNefm3BoPzRr cTLSuPJGNDCrC/n1jrDIK13KylBQzxpR6C0hNB2Zbiy4KInTp63X6s+ommKSs9sg f2+CbjxJEuh+WAu3Pr4FtVanhEPggz3ODIAZ9t49KRjswqJLbs35Gj5vO9RnoTdi GIYp/DBNdgX8qFmaGnkmTYKNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD7Kp5E jkiFdRdxKBeXrnPUf+XDMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1 ajdTdWJlWTdLRWVMRE8wMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzFwdMDcGkZfLqn8bVL4UXRwTEdsGOlFILTFppHBZ9C8/mmqYNbF1d f/xpAERu4CJ5ApgUlOGkgeYwGA5cqZhMCycbBqUdWhd39MmMR39xqS2eSStcU7aN wSSianwLtx1RzbevWcQLWXYrMXa2W+nePutlqX0nZ2XUmdupRzPcpBtDN9ZnLWs4 UieMRmiXkK1dMik5oiCaaXOvtOGaPQZ0ehQBsAicAmvd+VhQuVav4OrjYt47s0FT zIWtK8RntwaC09SnAmAx152Q9+OEWWQkiGF12jAJhwmSoVeMhy+qBCupOZvw/xrZ 31iLk5ZCcaqXeSnFONxompwVIMc5vxk/ -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org