$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft File: MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft (raw, json) Hash identifier: ZVhNyCa4xDAJTFyVfriUz3CktJ2VFQdETze8n6x1PjQ= Subject key identifier: 2E:7C:DC:A0:EC:C3:4B:6D:73:D5:AA:2C:50:AD:B2:EA:C0:59:B7:45 Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft Manifest number: 65 Signing time: Wed 29 May 2024 08:15:13 +0000 Manifest this update: Wed 29 May 2024 08:15:13 +0000 Manifest next update: Wed 05 Jun 2024 08:15:13 +0000 Files and hashes: 1: MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl (hash: HsksonaGozFUfMtSDSdnYTFKKPfoiYostHd6bSQwFN8=) 2: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (hash: aHDAGIdqb3+uef3dy3v5/B5Dp7bJ8icDirVS1hpRF+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Validity Not Before: May 29 08:15:13 2024 GMT Not After : Jun 5 08:15:13 2024 GMT Subject: CN=6656e411-f6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:7e:a6:96:f1:f7:9a:3e:a4:a2:63:11:43: 30:41:84:0a:48:df:b6:84:f8:e3:82:06:88:48:cb: d2:8d:15:7f:4d:a0:d4:72:75:72:7d:ce:13:9f:c5: fe:b3:05:97:36:c9:55:e1:69:21:1f:91:17:db:0f: 1e:29:28:a4:ab:1d:24:06:1f:b9:4f:05:b3:90:03: c3:41:dc:4b:b4:7c:8b:38:3d:41:51:e7:7f:d4:74: 26:73:a8:52:df:f5:2f:8f:ca:20:f9:1a:0b:c2:c2: 91:e9:28:2e:1f:41:c9:fc:71:5e:b1:59:69:ab:a4: 9d:a1:54:6a:2b:b4:01:b9:8b:df:f4:77:9b:59:30: 34:22:29:0b:00:a0:f6:86:a9:2e:e0:d6:a4:10:0c: 98:f4:c2:12:6e:62:80:38:8c:98:c4:db:3a:85:ff: 0b:5c:8e:c3:c2:cc:8a:c0:f3:f2:be:35:4e:4f:de: 0c:7e:2b:9b:2e:33:d2:dd:a3:dd:b7:16:cb:d1:6b: cd:29:00:4e:27:2c:9a:c0:5f:9c:72:bf:9b:a4:47: 0d:29:32:2f:c2:02:53:06:52:e1:cc:02:37:45:a8: 86:91:75:bd:bb:dd:d4:f6:f4:09:41:60:2f:ff:c9: 47:c3:06:f9:f9:73:6d:36:42:9f:af:23:81:84:a1: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7C:DC:A0:EC:C3:4B:6D:73:D5:AA:2C:50:AD:B2:EA:C0:59:B7:45 X509v3 Authority Key Identifier: keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:93:c1:fe:93:53:96:4e:a6:a7:a8:9a:1e:8f:ee:29:77: 85:7f:09:59:38:10:51:f2:2f:01:60:3d:9e:3a:82:9c:b9:00: 65:e8:0b:6f:ac:99:8c:92:81:0c:7c:29:a3:83:0b:f3:e5:51: 09:35:ea:ea:06:51:f3:88:53:e2:21:20:ed:29:d4:a5:68:47: 09:d8:7a:fd:cc:bc:c5:78:70:ba:d5:d4:25:fd:ee:7d:6e:4a: 3e:63:be:ca:ba:0a:c2:03:89:3c:28:c6:e8:76:f6:a5:e8:08: d7:94:de:24:85:a3:c6:90:f6:7c:48:bc:ed:f7:7a:b6:c6:3a: be:97:e3:3b:03:96:9c:a3:ae:1c:67:ae:81:2c:c6:7c:f1:d8: 11:8d:a6:36:1b:ea:da:e0:eb:6f:73:aa:6f:47:d2:1c:bd:67: 09:81:f4:8b:cf:50:a5:30:c5:24:89:8c:89:7c:7e:fb:19:5b: da:9b:dd:af:56:74:a7:e5:19:44:b2:e8:ec:bf:dc:30:dd:96: 17:aa:97:82:92:6c:2c:71:94:5d:00:e4:9d:45:6c:13:39:f7: 7c:df:30:dd:bc:36:47:a4:3f:7f:d9:f7:a4:bb:43:9d:28:dc: 4b:3c:b4:80:49:7a:6b:ec:2d:63:91:40:a7:47:77:e8:f7:41: 83:84:96:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUVDNzExMC8GA1UEBRMoMzA2RTM0RkE4NERBMDkwQzYwMDFCMzU0NjRCQjhDNDI2 MzU3RDkyODAeFw0yNDA1MjkwODE1MTNaFw0yNDA2MDUwODE1MTNaMBgxFjAUBgNV BAMTDTY2NTZlNDExLWY2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgLX6mlvH3mj6komMRQzBBhApI37aE+OOCBohIy9KNFX9NoNRydXJ9zhOfxf6z BZc2yVXhaSEfkRfbDx4pKKSrHSQGH7lPBbOQA8NB3Eu0fIs4PUFR53/UdCZzqFLf 9S+PyiD5GgvCwpHpKC4fQcn8cV6xWWmrpJ2hVGortAG5i9/0d5tZMDQiKQsAoPaG qS7g1qQQDJj0whJuYoA4jJjE2zqF/wtcjsPCzIrA8/K+NU5P3gx+K5suM9Ldo923 FsvRa80pAE4nLJrAX5xyv5ukRw0pMi/CAlMGUuHMAjdFqIaRdb273dT29AlBYC// yUfDBvn5c202Qp+vI4GEobWFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULnzcoOzD S21z1aosUK2y6sBZt0UwHwYDVR0jBBgwFoAUMG40+oTaCQxgAbNUZLuMQmNX2Sgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5RUM3L0U2M0YyRjhBODJB MzExRUU5QjExNzM1N0M0RjlBRTAyL01HNDAtb1RhQ1F4Z0FiTlVaTHVNUW1OWDJT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUc0MC1vVGFDUXhnQWJOVVpMdU1RbU5YMlNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 RUM3L0U2M0YyRjhBODJBMzExRUU5QjExNzM1N0M0RjlBRTAyL01HNDAtb1RhQ1F4 Z0FiTlVaTHVNUW1OWDJTZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbMk8H+k1OWTqanqJoej+4pd4V/CVk4EFHyLwFgPZ46gpy5AGXoC2+s mYySgQx8KaODC/PlUQk16uoGUfOIU+IhIO0p1KVoRwnYev3MvMV4cLrV1CX97n1u Sj5jvsq6CsIDiTwoxuh29qXoCNeU3iSFo8aQ9nxIvO33erbGOr6X4zsDlpyjrhxn roEsxnzx2BGNpjYb6trg629zqm9H0hy9ZwmB9IvPUKUwxSSJjIl8fvsZW9qb3a9W dKflGUSy6Oy/3DDdlheql4KSbCxxlF0A5J1FbBM593zfMN28NkekP3/Z96S7Q50o 3Es8tIBJemvsLWORQKdHd+j3QYOEloI= -----END CERTIFICATE-----Generated at Wed May 29 09:16:48 2024 by rpki-client on console-fra.rpki-client.org