$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: A//bLFjoRkWKE5PkquItoiETUVhqxD3puPMCpxmtTsE= Subject key identifier: E0:DF:04:9D:BE:13:53:15:38:AF:CC:32:B7:26:4A:DD:32:E9:C5:03 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1086 Signing time: Sat 18 May 2024 17:56:27 +0000 Manifest this update: Sat 18 May 2024 17:56:27 +0000 Manifest next update: Sat 25 May 2024 17:56:27 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: 9cLdeMrAu4i26H8vpByC9bsOrYkAKuJb04+xviN8xSg=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: i6cJunhUx1IUyrSi+spBz4Du5zWwhOZp61t1jw1sa98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4240 (0x1090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: May 18 17:56:27 2024 GMT Not After : May 25 17:56:27 2024 GMT Subject: CN=6648ebcb-948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:17:d3:93:fe:1a:b7:98:f7:2b:e1:8d:a3: bd:c5:be:be:ee:a1:86:9d:2c:35:ac:3c:ea:76:15: 03:d9:ca:de:1d:a7:44:f1:60:0b:c9:17:fc:33:56: 52:6b:32:f3:fe:f8:ac:31:aa:13:5d:a3:27:58:15: 53:3e:00:b3:a1:27:37:ec:b3:99:e5:4a:5c:55:1a: c3:7e:92:b5:d2:4d:76:23:e6:2b:b8:e6:b4:04:0a: ad:9d:ed:2f:1b:57:b2:73:01:c9:03:1f:14:3a:44: ac:79:b6:c5:22:6f:36:89:b9:f7:41:bc:80:9d:f3: e6:ed:ff:d1:b4:6c:eb:d5:d5:35:39:da:54:2f:a8: d6:9d:76:2b:78:f9:fc:3b:bb:4f:09:be:0f:3b:47: 46:2f:ea:a0:98:a6:55:32:d3:7f:3a:62:5c:9c:5b: 78:9d:14:e8:9a:62:f5:d1:9e:02:87:d6:0f:5d:d1: f6:0c:18:81:8d:f5:48:fb:6c:6b:d3:98:b8:37:b5: 0e:fb:33:73:fe:03:53:6c:cc:89:75:22:64:3d:bf: 10:c0:7f:ab:f4:2d:df:ca:1f:b5:fa:63:fb:8a:36: bc:9f:ec:a3:ef:63:c0:b9:80:92:64:bf:c2:e1:f8: 9c:b5:64:58:4f:02:6b:5f:db:d7:78:26:6c:3a:58: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:04:9D:BE:13:53:15:38:AF:CC:32:B7:26:4A:DD:32:E9:C5:03 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d1:8b:5b:c5:03:f2:77:fa:64:08:ce:3c:bd:24:b0:7a:9f: 75:c8:d9:2c:dc:32:98:2d:58:81:0e:54:b3:45:9e:ea:53:e8: 46:59:0b:5a:0a:1b:43:99:14:2e:99:95:a5:d7:b3:22:fb:a8: a3:fc:90:93:66:ef:2f:2f:92:cd:27:aa:45:32:8d:29:e2:5d: 77:1f:1e:82:f9:5b:1f:c5:90:5f:b4:3b:e3:92:06:c7:22:cd: 84:13:3c:f3:b0:e1:d8:3a:4d:91:e4:24:96:5e:75:8c:97:ed: 0e:4e:99:75:21:83:28:28:03:8c:f9:9a:c0:fa:85:0c:7d:4d: 65:89:90:29:6a:40:2b:e7:8c:0f:76:3e:fc:23:37:be:8c:25: e3:a7:cf:4e:f5:1f:87:be:81:3a:d8:32:d7:dc:3d:64:77:e7: 35:ce:39:3d:7b:79:3b:fe:58:9d:ec:26:3e:4e:e4:7c:c0:f8: 1e:e9:57:6e:06:61:e6:07:34:0a:1b:f0:1b:ff:87:96:87:9d: 6e:0a:97:c4:67:84:d7:10:7b:8a:5c:be:20:1e:d7:bf:7e:9c: 4b:c3:0a:e8:33:51:e7:e9:f2:2c:c4:86:b3:ae:89:c0:6d:6f: 61:b7:a6:4a:f8:ba:65:f8:22:a4:f3:12:28:f5:02:c0:fb:ed: d2:5d:4f:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjQwNTE4MTc1NjI3WhcNMjQwNTI1MTc1NjI3WjAYMRYwFAYD VQQDEw02NjQ4ZWJjYi05NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXsX05P+GreY9yvhjaO9xb6+7qGGnSw1rDzqdhUD2creHadE8WALyRf8M1ZS azLz/visMaoTXaMnWBVTPgCzoSc37LOZ5UpcVRrDfpK10k12I+YruOa0BAqtne0v G1eycwHJAx8UOkSsebbFIm82ibn3QbyAnfPm7f/RtGzr1dU1OdpUL6jWnXYrePn8 O7tPCb4PO0dGL+qgmKZVMtN/OmJcnFt4nRTommL10Z4Ch9YPXdH2DBiBjfVI+2xr 05i4N7UO+zNz/gNTbMyJdSJkPb8QwH+r9C3fyh+1+mP7ija8n+yj72PAuYCSZL/C 4fictWRYTwJrX9vXeCZsOlg9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODfBJ2+ E1MVOK/MMrcmSt0y6cUDMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb0YtbxQPyd/pkCM48vSSwep91yNks3DKYLViBDlSzRZ7qU+hGWQta ChtDmRQumZWl17Mi+6ij/JCTZu8vL5LNJ6pFMo0p4l13Hx6C+VsfxZBftDvjkgbH Is2EEzzzsOHYOk2R5CSWXnWMl+0OTpl1IYMoKAOM+ZrA+oUMfU1liZApakAr54wP dj78Ize+jCXjp89O9R+HvoE62DLX3D1kd+c1zjk9e3k7/lid7CY+TuR8wPge6Vdu BmHmBzQKG/Ab/4eWh51uCpfEZ4TXEHuKXL4gHte/fpxLwwroM1Hn6fIsxIazronA bW9ht6ZK+Lpl+CKk8xIo9QLA++3SXU8t -----END CERTIFICATE-----Generated at Sat May 18 18:46:47 2024 by rpki-client on console-fra.rpki-client.org