$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: 6umaO55CbD5hVFpLDv66nxNePyGghYXkorWW/p3ijMc= Subject key identifier: 03:5E:9B:E8:86:C7:CB:68:0E:B7:9D:F7:46:5F:3E:D7:0D:A3:B2:8D Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 13 Signing time: Wed 05 Feb 2025 06:26:31 +0000 Manifest this update: Wed 05 Feb 2025 06:26:30 +0000 Manifest next update: Wed 12 Feb 2025 06:26:30 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: C4CgdyYc6pMgzwNuHddIDbUm6tpxqzFa6jmN6ZsbjEg=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: 0uD06YfXP8jJiypkQtgg/+0Dg/DOv6s8Gpjo5ybB4rE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4 Validity Not Before: Feb 5 06:26:30 2025 GMT Not After : Feb 12 06:26:30 2025 GMT Subject: CN=67a30496-69ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:6d:cc:57:e0:ca:0a:1b:d5:82:2c:c2:f5: 0d:a9:40:27:31:ae:4b:6b:3e:11:76:dd:96:4f:25: 93:ee:8d:7c:bf:9c:3f:c4:c6:d3:0f:ee:4d:05:59: 4b:2c:f6:48:f8:bf:d4:1b:1d:df:36:40:56:7b:77: 16:66:b3:f9:0c:9a:ec:3f:d1:5d:a8:ca:70:a9:82: c8:a1:94:cd:0a:22:02:c6:f4:71:d9:bc:db:9b:a1: 08:d9:68:e1:f7:d9:ed:46:5d:f8:60:7b:77:00:f2: 0e:03:8e:40:1c:15:b8:ee:4a:22:1f:da:9c:35:3b: 92:70:b0:c7:c9:21:9e:9c:cc:ae:45:fb:7d:c3:4f: 99:2d:96:a2:70:53:b9:3b:fe:83:33:e6:a5:56:d0: fe:f7:df:9b:77:87:ce:c6:73:58:46:c2:74:29:6c: 49:f3:81:73:10:d4:0c:be:8a:6b:29:7f:7c:de:2a: 52:04:10:c5:39:02:d0:f0:9c:43:e5:d8:be:49:69: a4:3d:f0:95:5b:8f:0e:61:de:e1:4a:e4:ac:ec:9d: 70:6e:6a:0d:41:1b:31:13:cc:a6:ab:ed:0d:2e:f8: f4:cb:1b:a2:4c:75:a1:02:e2:41:a2:f0:3a:92:e3: eb:7a:c6:e8:8c:1a:10:e2:bc:c0:8c:8d:12:1d:c3: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:9B:E8:86:C7:CB:68:0E:B7:9D:F7:46:5F:3E:D7:0D:A3:B2:8D X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7b:e4:a6:a3:78:e5:33:8a:9c:86:be:eb:a2:d3:ac:fa:e9: 07:50:f1:98:0a:0e:7f:86:e4:7a:aa:d3:41:f3:68:59:d1:6c: fd:da:4e:73:19:67:cd:2a:97:a6:36:7d:1c:47:fb:60:ba:6b: 8e:9d:32:f8:42:36:1a:0a:f2:fc:d6:06:b9:ab:cd:92:ad:eb: a5:1c:2c:ca:45:ae:0c:b2:d8:e5:aa:2b:f5:7b:66:33:01:27: 22:3b:02:75:5e:da:0a:e6:83:2e:27:ee:4a:9b:86:38:7f:e7: 31:3f:f9:ef:2a:90:ad:d7:d4:23:ce:8b:c6:6e:fa:96:7a:01: 40:64:e2:c1:47:dd:4a:b1:7a:36:c5:3b:6d:8d:06:cd:cd:73: f9:99:16:48:a8:56:cc:09:6b:77:93:5e:8c:91:62:d7:b1:ce: dd:c6:05:47:87:7f:bf:e5:02:bf:53:4c:73:aa:55:af:8e:3c: 20:3a:14:4e:87:5a:37:a2:e1:10:7d:14:20:2a:f9:fa:5b:01: 73:cd:f3:93:b1:cb:a2:8e:7b:c3:09:80:2c:7d:7b:fb:ef:09: a0:e9:d9:25:2c:c2:6d:ae:20:8e:33:26:cc:db:72:18:e4:79: f6:59:ce:51:90:26:2e:76:f7:a4:14:a2:e0:ab:a3:50:5a:60: 31:cd:b5:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoMzA2NDkwREI3NDVDOTVFQzg2NjE0OTlGRkM4MjY0NjY3 QkE2N0Y4QTAeFw0yNTAyMDUwNjI2MzBaFw0yNTAyMTIwNjI2MzBaMBgxFjAUBgNV BAMTDTY3YTMwNDk2LTY5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf1m3MV+DKChvVgizC9Q2pQCcxrktrPhF23ZZPJZPujXy/nD/ExtMP7k0FWUss 9kj4v9QbHd82QFZ7dxZms/kMmuw/0V2oynCpgsihlM0KIgLG9HHZvNuboQjZaOH3 2e1GXfhge3cA8g4DjkAcFbjuSiIf2pw1O5JwsMfJIZ6czK5F+33DT5ktlqJwU7k7 /oMz5qVW0P7335t3h87Gc1hGwnQpbEnzgXMQ1Ay+imspf3zeKlIEEMU5AtDwnEPl 2L5JaaQ98JVbjw5h3uFK5KzsnXBuag1BGzETzKar7Q0u+PTLG6JMdaEC4kGi8DqS 4+t6xuiMGhDivMCMjRIdw7DBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA16b6IbH y2gOt533Rl8+1w2jso0wHwYDVR0jBBgwFoAUMGSQ23RcleyGYUmf/IJkZnumf4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0I4OTBERkQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUdTUTIzUmNsZXlHWVVtZl9JSmtabnVtZjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF N0E0L0I4OTBERkQyQ0MwRjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5 R1lVbWZfSUprWm51bWY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB175KajeOUzipyGvuui06z66QdQ8ZgKDn+G5Hqq00HzaFnRbP3aTnMZ Z80ql6Y2fRxH+2C6a46dMvhCNhoK8vzWBrmrzZKt66UcLMpFrgyy2OWqK/V7ZjMB JyI7AnVe2grmgy4n7kqbhjh/5zE/+e8qkK3X1CPOi8Zu+pZ6AUBk4sFH3UqxejbF O22NBs3Nc/mZFkioVswJa3eTXoyRYtexzt3GBUeHf7/lAr9TTHOqVa+OPCA6FE6H Wjei4RB9FCAq+fpbAXPN85Oxy6KOe8MJgCx9e/vvCaDp2SUswm2uII4zJszbchjk efZZzlGQJi5296QUouCro1BaYDHNtSY= -----END CERTIFICATE-----Generated at Wed Feb 5 20:14:00 2025 by rpki-client