$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: Jgd56PMe2ZZeNlma1ysAmRAxDNZazgl268xEiDeqq2Y= Subject key identifier: 39:76:9F:08:E9:FE:B4:0C:78:54:25:1A:65:76:2B:E2:74:2B:55:DE Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 24D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 24C3 Signing time: Sat 18 May 2024 16:02:41 +0000 Manifest this update: Sat 18 May 2024 16:02:41 +0000 Manifest next update: Sat 25 May 2024 16:02:41 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: ekY3GPpBXbD30gnxOVRKx4NIPYfUmAcNecNVtiyvSUA=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: au9lymQdG+zcu+LkfXcooSCDteuusPKaYMcpKFL9o8c=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 4o07cxUY5DJ7AK2l5B8US6kLPTuoV56g/2Tj4aTzPZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9430 (0x24d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: May 18 16:02:41 2024 GMT Not After : May 25 16:02:41 2024 GMT Subject: CN=6648d121-a99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:6b:91:d7:23:33:b3:b7:94:2d:d9:95:4b: 1d:6e:be:68:f6:fc:b7:00:1d:45:19:4a:ee:2c:b8: b9:37:72:70:3e:4a:95:ba:2f:b1:55:5e:97:13:28: d1:1d:84:6d:db:6c:49:0d:da:d8:b1:7c:34:ed:40: 2d:10:9c:55:02:94:ac:d9:c1:34:6e:2a:b2:a1:07: 36:b7:d5:1f:e0:bb:29:0b:49:a7:d2:53:30:16:e1: f9:f1:e3:4e:26:4a:a8:85:eb:45:21:4a:8f:b7:70: 1c:e3:44:a7:a7:49:bd:4c:56:a4:74:42:ac:8a:c5: 1b:59:4b:44:69:be:ab:3d:d1:c3:2f:b9:25:2d:b3: da:ce:d4:a8:28:54:67:cb:5d:f8:4d:d4:93:8f:ae: f9:68:ba:c6:5e:18:cb:53:6c:da:1e:97:09:4a:2b: 44:44:dc:c1:9f:c1:36:6b:50:ab:6c:d2:15:b1:b9: 62:c5:f6:58:40:a2:13:98:24:a5:ca:55:ff:59:2a: 1e:39:09:81:fe:10:18:d4:af:98:3a:09:58:4a:ba: b5:a9:12:d4:32:57:44:81:18:1f:f4:8a:57:2e:a5: c2:96:a5:6b:d6:f1:bc:28:c5:36:f4:3e:db:b0:d3: 43:17:41:b6:54:1b:0e:64:db:77:7f:47:63:37:ac: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:9F:08:E9:FE:B4:0C:78:54:25:1A:65:76:2B:E2:74:2B:55:DE X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:fc:87:5e:16:0a:60:2f:ed:66:05:76:52:db:26:76:33:de: ab:c1:59:f9:86:a6:02:1c:51:6e:97:88:58:5d:db:16:96:d8: 98:fe:d6:84:85:99:78:84:98:e6:a5:9b:ac:a1:49:1b:4c:40: a9:9c:26:bc:c0:47:52:e2:a1:83:1d:32:d0:0c:61:40:c8:3f: d9:6d:7b:19:62:23:97:36:cf:24:86:e2:e7:62:8e:5c:2c:56: 4c:06:69:9e:88:7e:4b:91:8b:72:d9:44:0f:f2:8a:69:e9:35: fa:7e:5d:ce:35:e9:c0:e1:8d:b0:28:77:5f:96:43:f2:d2:1b: cd:de:91:61:c7:7b:a5:27:44:d9:ea:96:16:89:ed:08:2b:f5: 4b:31:a6:0d:96:34:e9:71:3c:fa:57:40:44:8c:02:45:f6:a8: 41:4a:cb:b0:86:62:dd:6b:47:60:25:18:c1:8f:71:93:04:ef: a9:ee:26:88:2c:67:b9:37:70:ee:bc:65:27:ef:3c:84:74:94: 55:32:3e:98:e1:88:3a:e4:15:de:31:a4:25:75:53:df:d8:0a: d8:50:f0:40:d8:fe:75:d9:c2:de:29:99:34:0a:c6:c7:a6:6a: a6:40:fc:a1:1c:78:73:33:54:f2:60:3f:00:cf:71:1b:81:8b: b5:81:b5:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjQwNTE4MTYwMjQxWhcNMjQwNTI1MTYwMjQxWjAYMRYwFAYD VQQDEw02NjQ4ZDEyMS1hOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zJrkdcjM7O3lC3ZlUsdbr5o9vy3AB1FGUruLLi5N3JwPkqVui+xVV6XEyjR HYRt22xJDdrYsXw07UAtEJxVApSs2cE0biqyoQc2t9Uf4LspC0mn0lMwFuH58eNO JkqohetFIUqPt3Ac40Snp0m9TFakdEKsisUbWUtEab6rPdHDL7klLbPaztSoKFRn y134TdSTj675aLrGXhjLU2zaHpcJSitERNzBn8E2a1CrbNIVsblixfZYQKITmCSl ylX/WSoeOQmB/hAY1K+YOglYSrq1qRLUMldEgRgf9IpXLqXClqVr1vG8KMU29D7b sNNDF0G2VBsOZNt3f0djN6xTZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDl2nwjp /rQMeFQlGmV2K+J0K1XeMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy/IdeFgpgL+1mBXZS2yZ2M96rwVn5hqYCHFFul4hYXdsWltiY/taE hZl4hJjmpZusoUkbTECpnCa8wEdS4qGDHTLQDGFAyD/ZbXsZYiOXNs8khuLnYo5c LFZMBmmeiH5LkYty2UQP8opp6TX6fl3ONenA4Y2wKHdflkPy0hvN3pFhx3ulJ0TZ 6pYWie0IK/VLMaYNljTpcTz6V0BEjAJF9qhBSsuwhmLda0dgJRjBj3GTBO+p7iaI LGe5N3DuvGUn7zyEdJRVMj6Y4Yg65BXeMaQldVPf2ArYUPBA2P512cLeKZk0CsbH pmqmQPyhHHhzM1TyYD8Az3EbgYu1gbUq -----END CERTIFICATE-----Generated at Sat May 18 16:57:52 2024 by rpki-client on console-fra.rpki-client.org