$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: xAhnkA/MlDosud6BJ2P1YLbvPRE5HtrEhnsRQ4AoMng= Subject key identifier: B6:A0:A9:80:7E:5E:BA:5E:4E:8A:EC:AF:B2:6B:73:C0:F1:70:BA:62 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 257E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 2569 Signing time: Fri 04 Apr 2025 15:46:59 +0000 Manifest this update: Fri 04 Apr 2025 15:46:58 +0000 Manifest next update: Fri 11 Apr 2025 15:46:58 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: 0oIN/UAbDEwu8JQ/JIMppanZG9DU/myTtHWhxUeA86M=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9598 (0x257e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E Validity Not Before: Apr 4 15:46:58 2025 GMT Not After : Apr 11 15:46:58 2025 GMT Subject: CN=67effef3-95ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:6b:5b:63:c3:7c:3d:67:a0:f3:54:91:03: a1:50:fd:d0:45:73:72:23:42:24:34:a9:de:3f:65: 0c:87:a2:28:d2:77:25:75:5f:65:f5:dd:3d:13:cd: 4f:48:b9:a8:90:56:82:c3:85:15:3f:c4:eb:7e:ab: b2:99:a2:d8:78:cc:56:3e:07:2f:04:23:d3:91:88: 7e:c8:18:01:f2:b3:34:c5:8a:54:f4:66:f2:36:b4: bd:b7:d2:3b:12:d0:20:55:6a:da:aa:75:eb:af:1d: 63:5d:ff:4e:43:94:c0:98:95:1f:e7:fe:42:c0:17: f4:d9:88:c4:42:ea:e5:c2:8e:99:89:b5:ca:87:80: 7d:5d:3b:d5:bd:fc:70:d5:47:e1:07:d6:4a:68:fa: 84:67:e1:df:23:af:2e:54:bf:e6:77:6b:62:a1:5f: c8:3b:43:db:c5:cc:ff:3d:74:3e:62:f6:6c:05:ac: 05:45:98:92:31:75:62:d7:7c:03:07:fc:69:64:5a: 46:a6:01:50:d8:06:ef:c3:53:c0:b8:2c:e7:82:e9: 85:6a:58:23:fb:2b:2a:87:e3:a3:76:9e:06:9c:8e: 89:8a:1a:76:8a:eb:5b:6c:f6:66:83:00:d9:3f:b8: 50:fb:1a:ea:04:83:f8:a0:a2:7a:dc:d2:e3:a9:fd: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A0:A9:80:7E:5E:BA:5E:4E:8A:EC:AF:B2:6B:73:C0:F1:70:BA:62 X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e8:ec:c5:2c:e6:68:44:8c:62:13:c9:cd:37:59:59:96:11: fb:45:33:18:5f:31:bf:7c:2d:65:68:da:cd:81:44:af:c8:d4: 1d:64:3b:51:8b:59:e7:e7:fb:61:dd:5f:88:e3:f0:61:95:e2: 70:42:74:5b:d4:d9:5c:e1:2f:70:8d:d7:b3:14:6a:f5:f0:15: 4d:02:f0:6f:1a:cd:97:47:5d:d4:84:b4:7b:16:ab:6c:e9:b5: 9e:e5:0c:33:75:ee:c8:90:2a:39:14:3f:52:a6:c5:20:a1:78: cd:63:ca:cc:2f:14:ea:f3:86:3b:23:cd:16:f0:fb:bb:d5:eb: 1a:55:3e:a2:eb:d3:75:31:7c:8b:5d:60:ef:75:43:fb:77:80: ff:9e:a1:ac:da:6a:cd:97:dc:ee:02:bd:a1:68:91:80:ec:87: b3:2d:1a:1c:18:41:1e:a1:60:22:c5:5e:ac:f9:0b:77:6c:b1: ee:3d:98:e6:f4:4e:ac:e0:58:ed:91:20:23:6b:49:2f:73:63: d1:8c:52:58:72:6a:f3:6e:3f:e7:8b:79:65:ba:44:08:51:d9: 19:a0:8b:cb:37:b8:19:37:c4:f4:e2:21:dd:c1:f2:4c:5a:3a: 17:66:80:4e:ff:72:62:c0:dc:d9:8f:45:48:17:15:c8:61:f7: 01:93:a5:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNDA0MTU0NjU4WhcNMjUwNDExMTU0NjU4WjAYMRYwFAYD VQQDEw02N2VmZmVmMy05NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp09rW2PDfD1noPNUkQOhUP3QRXNyI0IkNKneP2UMh6Io0ncldV9l9d09E81P SLmokFaCw4UVP8TrfquymaLYeMxWPgcvBCPTkYh+yBgB8rM0xYpU9GbyNrS9t9I7 EtAgVWraqnXrrx1jXf9OQ5TAmJUf5/5CwBf02YjEQurlwo6ZibXKh4B9XTvVvfxw 1UfhB9ZKaPqEZ+HfI68uVL/md2tioV/IO0Pbxcz/PXQ+YvZsBawFRZiSMXVi13wD B/xpZFpGpgFQ2Abvw1PAuCzngumFalgj+ysqh+Ojdp4GnI6Jihp2iutbbPZmgwDZ P7hQ+xrqBIP4oKJ63NLjqf2g/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLagqYB+ XrpeTorsr7Jrc8DxcLpiMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6OzFLOZoRIxiE8nNN1lZlhH7RTMYXzG/fC1laNrNgUSvyNQdZDtR i1nn5/th3V+I4/BhleJwQnRb1Nlc4S9wjdezFGr18BVNAvBvGs2XR13UhLR7Fqts 6bWe5Qwzde7IkCo5FD9SpsUgoXjNY8rMLxTq84Y7I80W8Pu71esaVT6i69N1MXyL XWDvdUP7d4D/nqGs2mrNl9zuAr2haJGA7IezLRocGEEeoWAixV6s+Qt3bLHuPZjm 9E6s4FjtkSAja0kvc2PRjFJYcmrzbj/ni3llukQIUdkZoIvLN7gZN8T04iHdwfJM WjoXZoBO/3JiwNzZj0VIFxXIYfcBk6XT -----END CERTIFICATE-----Generated at Sun Apr 6 02:56:35 2025 by rpki-client