$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft File: emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json) Hash identifier: h6A+MNhOtavT4wTDYi4ReW3xV9zz4jhflo2YyceECQg= Subject key identifier: 68:1F:25:DF:3A:C0:B7:25:91:36:3B:A3:0B:18:7D:64:B9:61:BE:6C Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E Certificate issuer: /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft Manifest number: 02B6 Signing time: Thu 21 Nov 2024 01:02:00 +0000 Manifest this update: Thu 21 Nov 2024 01:01:59 +0000 Manifest next update: Thu 28 Nov 2024 01:01:59 +0000 Files and hashes: 1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: ZEKSUKEDvTebbAKHUXnq1VQfOiuGJqiMV7RMn6+b5ms=) 2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: QmW7ERQ7XtSV+LKRbD9HvKtCzDVw0ZgXn7nJqoLq070=) 3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: kUvCjEVzOnXvj3af0H/rwPhQ+mpBBHdNSz4oe9kq7dQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E Validity Not Before: Nov 21 01:01:59 2024 GMT Not After : Nov 28 01:01:59 2024 GMT Subject: CN=673e8687-1b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:e4:eb:f3:d0:c0:36:b4:ee:cc:b3:dd:38: 4f:21:9f:5c:f2:56:84:3d:27:da:4b:b0:6e:48:7c: 7b:81:cd:22:bd:b6:20:83:5e:e7:03:9d:59:33:3d: b9:25:ea:e4:f0:31:7a:31:2f:ec:c4:02:65:7a:da: 0f:87:79:92:42:99:09:1a:53:ef:2c:1b:49:e5:62: 15:5b:53:48:fe:f0:8a:6b:4e:ea:ea:dd:6c:2b:48: 14:e3:dc:ef:13:87:df:73:8c:1e:38:1e:a7:2c:bf: 67:a6:82:4d:d4:40:5a:c1:c2:4e:cf:b3:9c:1a:b5: 07:a0:f8:ce:20:6b:b1:10:db:3a:d0:43:b3:9e:47: ee:7b:b7:aa:84:70:b7:c2:2e:1e:36:3e:c9:51:28: 9c:25:e1:bb:ed:ff:bb:1a:97:2e:fc:db:5b:af:67: b9:d3:92:ae:e2:4b:f8:85:27:79:62:de:b5:3a:14: f2:32:0e:d4:8a:27:0b:51:57:0a:9d:52:d8:6f:5a: 53:53:4e:fd:1a:4d:48:51:5d:7c:28:bc:f0:c6:28: 9f:d2:1f:14:be:f3:5c:b5:9d:82:c2:17:65:65:44: 44:9a:30:c3:ca:5d:20:b1:57:04:5b:b9:7f:75:6b: 7f:f1:a2:10:bd:51:99:3a:94:5a:45:e1:7c:42:fc: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1F:25:DF:3A:C0:B7:25:91:36:3B:A3:0B:18:7D:64:B9:61:BE:6C X509v3 Authority Key Identifier: keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e1:6b:a0:84:e5:98:a5:d9:2f:9d:1f:02:c2:2a:0a:57:20: 43:07:c0:56:37:51:80:c5:68:9b:ea:22:68:4e:32:ef:34:7e: e3:73:32:99:a5:17:37:f1:78:00:9e:73:f0:5d:c9:be:4d:b5: 30:9c:57:88:b5:d6:77:ce:0f:1f:03:65:fb:51:97:80:15:87: ed:d9:f6:35:d0:c4:33:3d:b6:10:df:60:fd:06:3f:e4:26:dc: 44:4a:80:96:70:d3:86:10:c3:31:43:37:a0:08:52:a5:2e:cc: 25:cc:d5:56:cd:0e:e6:28:7a:7e:25:39:82:ea:ae:ec:90:71: 80:dd:aa:a8:66:0b:81:a2:6b:ad:62:e9:07:04:b7:cd:ad:71: c3:4b:5f:48:d3:01:3c:aa:96:da:ae:ec:46:4e:1f:d0:9d:bb: 1c:0b:ad:8b:13:a4:1e:6d:cd:06:22:4b:d9:25:ac:98:3d:cb: e2:52:d3:5f:87:c8:4b:5d:86:1f:21:04:4d:d3:71:5b:ed:fa: b9:01:06:2d:d6:34:9d:eb:45:01:2c:c9:3b:38:d8:7c:d6:8a: 85:79:56:21:1f:8c:99:21:3c:2c:d4:1c:21:9e:0f:e0:d9:f3: 1f:08:91:30:7e:eb:cf:c5:2f:72:8c:c3:7c:57:60:b8:2d:a6: d5:c3:e7:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5MzUxMTAvBgNVBAUTKDdBNjBDMDRCODdENkM2Q0IyNTFGMTUyOTdFRTI1QUQy REE1MDVFMEUwHhcNMjQxMTIxMDEwMTU5WhcNMjQxMTI4MDEwMTU5WjAYMRYwFAYD VQQDEw02NzNlODY4Ny0xYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWXk6/PQwDa07syz3ThPIZ9c8laEPSfaS7BuSHx7gc0ivbYgg17nA51ZMz25 Jerk8DF6MS/sxAJletoPh3mSQpkJGlPvLBtJ5WIVW1NI/vCKa07q6t1sK0gU49zv E4ffc4weOB6nLL9npoJN1EBawcJOz7OcGrUHoPjOIGuxENs60EOznkfue7eqhHC3 wi4eNj7JUSicJeG77f+7Gpcu/Ntbr2e505Ku4kv4hSd5Yt61OhTyMg7UiicLUVcK nVLYb1pTU079Gk1IUV18KLzwxiif0h8UvvNctZ2CwhdlZUREmjDDyl0gsVcEW7l/ dWt/8aIQvVGZOpRaReF8QvyAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgfJd86 wLclkTY7owsYfWS5Yb5sMB8GA1UdIwQYMBaAFHpgwEuH1sbLJR8VKX7iWtLaUF4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDkzNS8zMUIzRDE2MEQw NDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hzc2xIeFVwZnVKYTB0cFFY ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtREFTNGZXeHNzbEh4VXBmdUphMHRwUVhnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDkzNS8zMUIzRDE2MEQwNDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hz c2xIeFVwZnVKYTB0cFFYZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo4WughOWYpdkvnR8CwioKVyBDB8BWN1GAxWib6iJoTjLvNH7jczKZ pRc38XgAnnPwXcm+TbUwnFeItdZ3zg8fA2X7UZeAFYft2fY10MQzPbYQ32D9Bj/k JtxESoCWcNOGEMMxQzegCFKlLswlzNVWzQ7mKHp+JTmC6q7skHGA3aqoZguBomut YukHBLfNrXHDS19I0wE8qpbaruxGTh/QnbscC62LE6Qebc0GIkvZJayYPcviUtNf h8hLXYYfIQRN03Fb7fq5AQYt1jSd60UBLMk7ONh81oqFeVYhH4yZITws1Bwhng/g 2fMfCJEwfuvPxS9yjMN8V2C4LabVw+f7 -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org