$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: Wd6TKNYOC3MVbXySn9B/T6io+uvgYceFKajFuWRBc7U= Subject key identifier: E9:91:0C:8D:E3:A4:2E:AB:39:1D:7C:9E:0D:DC:15:A8:28:9F:D5:3D Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 24D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 24BE Signing time: Wed 08 May 2024 16:06:38 +0000 Manifest this update: Wed 08 May 2024 16:06:37 +0000 Manifest next update: Wed 15 May 2024 16:06:37 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: 04dmeUxJjIpbWp8CirGiRRIMgqOff+z5u+qtTZkptsE=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: au9lymQdG+zcu+LkfXcooSCDteuusPKaYMcpKFL9o8c=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 4o07cxUY5DJ7AK2l5B8US6kLPTuoV56g/2Tj4aTzPZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9425 (0x24d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: May 8 16:06:37 2024 GMT Not After : May 15 16:06:37 2024 GMT Subject: CN=663ba30d-867e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:0c:e2:0e:00:a2:1f:73:22:69:d9:2b:8b: c2:82:ed:85:8d:df:dc:7b:b7:23:bd:54:c0:9a:0f: f9:a2:95:ae:6f:7d:72:27:c6:21:bc:d2:72:a7:04: c4:dc:1f:b5:db:80:bc:a6:59:3d:6a:6e:0b:a3:c2: f5:82:4c:c4:0f:56:09:0e:65:f1:79:ad:b3:f1:6e: c7:7a:93:0f:ef:1a:a7:51:b0:01:e3:b6:c7:d3:2d: ef:f4:24:6b:91:5f:84:f4:19:d0:5c:d7:10:f7:42: 9b:e3:5c:84:92:6a:82:42:9d:78:33:99:1e:86:7f: be:93:cc:d4:9b:0d:ec:21:d4:4e:4c:bb:8e:b8:c4: 6c:91:3a:9f:56:1b:f8:c2:44:6f:5f:21:d2:ad:26: 74:44:9f:8f:ae:2d:5b:da:eb:de:05:0d:3a:d0:0e: b5:71:f9:63:31:d2:b3:f1:85:f3:33:87:51:5c:c0: 09:e5:37:df:bb:e3:39:e1:25:0d:a2:ee:b1:b9:93: a5:88:5d:dd:26:cb:06:b3:86:c9:c9:d5:1a:ad:1a: 49:e2:a3:d8:a6:c4:5c:bf:1c:d1:75:0c:26:92:58: e8:05:64:fe:ec:1e:6a:c5:ef:c6:08:8f:11:6f:ce: 52:fc:0f:1b:86:39:2a:c7:40:0f:b4:39:7e:26:29: 89:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:0C:8D:E3:A4:2E:AB:39:1D:7C:9E:0D:DC:15:A8:28:9F:D5:3D X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c0:2e:73:bf:c6:ab:8b:0b:ee:f6:95:3c:df:1d:8d:6d:9f: 7c:14:2c:3e:41:07:00:de:b4:cc:09:c5:8a:54:b7:d0:6f:de: 54:d2:f1:24:cc:02:86:cb:80:e2:56:61:79:1b:6f:cb:cc:5a: fd:0d:bb:cf:6a:6f:e1:42:fb:8a:96:b9:36:26:4a:a2:93:4f: aa:b7:7a:9f:45:44:5d:c0:75:18:74:b5:22:34:4b:93:f0:c8: d2:1f:d3:fd:42:64:85:96:a5:7c:45:f2:63:61:56:5b:2e:b0: 81:57:b5:a9:a5:2e:43:92:16:c5:e8:40:8a:17:9f:7c:c4:8c: c0:46:7a:83:32:ab:74:a7:4c:34:33:32:59:97:ae:49:e3:b7: 03:8d:bc:d7:d8:87:d7:f1:dd:18:e1:8e:99:1e:01:8d:05:c8: 13:67:78:a1:6b:68:44:a9:a8:de:9f:e9:20:02:4b:1f:50:2f: 33:4f:e1:50:ef:a3:e0:24:b1:61:06:0f:99:5b:e9:c4:26:ee: 24:b6:f5:84:66:12:60:6b:cc:79:e4:2e:50:6f:29:67:80:20: af:e6:bb:a5:c2:9d:ad:ee:d1:f1:45:d2:8c:ea:64:e5:8b:0f: ae:f9:8d:27:80:f2:40:69:d6:c4:0f:34:49:ff:6b:f0:61:db: d1:d5:06:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjQwNTA4MTYwNjM3WhcNMjQwNTE1MTYwNjM3WjAYMRYwFAYD VQQDEw02NjNiYTMwZC04NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMQM4g4Aoh9zImnZK4vCgu2Fjd/ce7cjvVTAmg/5opWub31yJ8YhvNJypwTE 3B+124C8plk9am4Lo8L1gkzED1YJDmXxea2z8W7HepMP7xqnUbAB47bH0y3v9CRr kV+E9BnQXNcQ90Kb41yEkmqCQp14M5kehn++k8zUmw3sIdROTLuOuMRskTqfVhv4 wkRvXyHSrSZ0RJ+Pri1b2uveBQ060A61cfljMdKz8YXzM4dRXMAJ5Tffu+M54SUN ou6xuZOliF3dJssGs4bJydUarRpJ4qPYpsRcvxzRdQwmkljoBWT+7B5qxe/GCI8R b85S/A8bhjkqx0APtDl+JimJZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmRDI3j pC6rOR18ng3cFagon9U9MB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOwC5zv8ariwvu9pU83x2NbZ98FCw+QQcA3rTMCcWKVLfQb95U0vEk zAKGy4DiVmF5G2/LzFr9DbvPam/hQvuKlrk2Jkqik0+qt3qfRURdwHUYdLUiNEuT 8MjSH9P9QmSFlqV8RfJjYVZbLrCBV7WppS5DkhbF6ECKF598xIzARnqDMqt0p0w0 MzJZl65J47cDjbzX2IfX8d0Y4Y6ZHgGNBcgTZ3iha2hEqajen+kgAksfUC8zT+FQ 76PgJLFhBg+ZW+nEJu4ktvWEZhJga8x55C5QbylngCCv5rulwp2t7tHxRdKM6mTl iw+u+Y0ngPJAadbEDzRJ/2vwYdvR1QaF -----END CERTIFICATE-----Generated at Wed May 8 18:13:51 2024 by rpki-client on console-fra.rpki-client.org