$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft File: MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft (raw, json) Hash identifier: 6ftI4jsi7DXT4DU9IQO9NpCwnrPgqQkie8qOJP1XCH0= Subject key identifier: 51:CF:05:7E:2D:A5:5D:5C:26:A1:E4:5D:83:2B:16:BC:1D:4B:CE:9E Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft Manifest number: C1 Signing time: Sat 23 Nov 2024 04:07:44 +0000 Manifest this update: Sat 23 Nov 2024 04:07:43 +0000 Manifest next update: Sat 30 Nov 2024 04:07:43 +0000 Files and hashes: 1: MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl (hash: 2kkKXSJq7x0314wTB/mr2j5aC1jXlMktrFL25c+LIKU=) 2: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (hash: 6W6Gywd7YHiIdjjDyCFNskNZyB3wgY++Ir7hfO/X2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Validity Not Before: Nov 23 04:07:43 2024 GMT Not After : Nov 30 04:07:43 2024 GMT Subject: CN=67415510-c2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:2a:c2:b6:a4:f2:f8:e1:6e:04:6d:5d:35: 0e:64:72:20:02:13:4f:eb:30:a3:6d:b7:66:b4:54: 14:f5:19:b8:27:3d:8f:23:13:f2:a0:83:2c:9d:7e: 2c:42:20:cc:31:c7:64:05:6f:8f:bf:90:87:48:c6: d8:3c:2d:0f:28:ed:9b:50:af:f6:6d:b1:19:36:74: 4f:9d:05:54:6a:a2:ee:9d:2d:07:a3:df:af:96:ad: 67:90:07:73:b4:e0:31:d6:a9:6a:f8:b0:68:bf:89: 6b:d2:75:67:53:b9:d5:e2:2e:7b:29:5c:8c:f7:23: ec:7f:8e:34:5a:81:a0:c9:e6:b1:d8:ca:7a:8b:cc: ea:d8:17:2e:46:7c:74:e3:c5:f1:13:87:85:9c:83: dd:cb:dc:6b:6f:43:d9:b9:5f:05:2d:24:eb:1a:7e: f3:ef:df:18:39:d6:ce:cf:9f:2c:5c:15:1b:35:2e: 09:5b:b6:e2:16:19:bb:c4:66:fc:c1:ef:44:22:8f: 70:b3:b6:d9:78:05:cc:2e:18:30:84:89:cd:d5:31: 2d:c6:72:d5:31:e7:1e:7c:07:78:89:60:05:1e:40: 2c:d8:80:e1:d8:0c:69:7a:a4:e5:b1:08:11:aa:60: 67:48:6a:7b:4c:67:cc:af:64:a3:72:36:d5:1d:75: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CF:05:7E:2D:A5:5D:5C:26:A1:E4:5D:83:2B:16:BC:1D:4B:CE:9E X509v3 Authority Key Identifier: keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:19:20:0c:08:57:14:9f:bb:c6:0e:98:03:a6:87:8a:23:86: 41:d1:7e:d3:bd:d8:07:03:db:4b:89:1b:99:77:cb:60:d9:40: 48:92:79:d8:40:64:81:17:93:18:10:03:fe:75:40:ba:f8:fc: e8:50:28:74:87:6f:ce:34:19:f5:a7:0c:99:44:25:76:11:bb: 64:64:6a:6f:e4:38:db:89:cc:f8:49:2a:af:35:33:f3:c9:81: c5:e1:4b:2d:b5:66:01:55:aa:d8:98:c8:ac:e2:d7:10:03:28: ea:2c:38:02:15:cf:5e:9b:fc:11:5e:cf:36:7c:f7:73:6f:71: 4b:8a:c5:95:25:70:c4:73:1b:af:5b:be:04:13:e5:f8:a3:18: 97:5a:87:0c:36:5a:a0:c5:27:d8:cd:bf:44:d1:27:84:f7:3b: 97:d2:73:21:44:0b:14:52:c5:86:6c:18:76:08:ba:13:8d:4c: 8e:3a:71:ea:a1:52:ed:b9:fa:2a:33:07:6f:2f:ed:6b:aa:d5: de:9e:3f:1c:40:fb:ba:f5:38:60:6b:b5:ba:df:71:9f:d7:f8: b5:b9:76:5b:25:2f:c8:d6:60:66:07:7d:05:32:ac:f9:88:5d: d1:e7:59:46:ed:3c:29:30:0e:fc:d9:81:fe:c5:a7:94:1c:8c: e8:b8:8e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQzcxMTAvBgNVBAUTKDMwNkUzNEZBODREQTA5MEM2MDAxQjM1NDY0QkI4QzQy NjM1N0Q5MjgwHhcNMjQxMTIzMDQwNzQzWhcNMjQxMTMwMDQwNzQzWjAYMRYwFAYD VQQDEw02NzQxNTUxMC1jMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26Eqwrak8vjhbgRtXTUOZHIgAhNP6zCjbbdmtFQU9Rm4Jz2PIxPyoIMsnX4s QiDMMcdkBW+Pv5CHSMbYPC0PKO2bUK/2bbEZNnRPnQVUaqLunS0Ho9+vlq1nkAdz tOAx1qlq+LBov4lr0nVnU7nV4i57KVyM9yPsf440WoGgyeax2Mp6i8zq2BcuRnx0 48XxE4eFnIPdy9xrb0PZuV8FLSTrGn7z798YOdbOz58sXBUbNS4JW7biFhm7xGb8 we9EIo9ws7bZeAXMLhgwhInN1TEtxnLVMecefAd4iWAFHkAs2IDh2AxpeqTlsQgR qmBnSGp7TGfMr2SjcjbVHXUy+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHPBX4t pV1cJqHkXYMrFrwdS86eMB8GA1UdIwQYMBaAFDBuNPqE2gkMYAGzVGS7jEJjV9ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVDNy9FNjNGMkY4QTgy QTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9UYUNReGdBYk5VWkx1TVFtTlgy U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01HNDAtb1RhQ1F4Z0FiTlVaTHVNUW1OWDJTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVDNy9FNjNGMkY4QTgyQTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9UYUNR eGdBYk5VWkx1TVFtTlgyU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSGSAMCFcUn7vGDpgDpoeKI4ZB0X7TvdgHA9tLiRuZd8tg2UBIknnY QGSBF5MYEAP+dUC6+PzoUCh0h2/ONBn1pwyZRCV2EbtkZGpv5Djbicz4SSqvNTPz yYHF4UsttWYBVarYmMis4tcQAyjqLDgCFc9em/wRXs82fPdzb3FLisWVJXDEcxuv W74EE+X4oxiXWocMNlqgxSfYzb9E0SeE9zuX0nMhRAsUUsWGbBh2CLoTjUyOOnHq oVLtufoqMwdvL+1rqtXenj8cQPu69Thga7W633Gf1/i1uXZbJS/I1mBmB30FMqz5 iF3R51lG7TwpMA782YH+xaeUHIzouI7r -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org