$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: yDOvPEUG2PxAUavtD+SmKhkZRJIGYKKnMn2eETzsEkw= Subject key identifier: 31:F1:12:D9:F9:42:59:D2:21:3C:8D:45:33:69:57:52:D0:19:42:66 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 2588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 2573 Signing time: Thu 24 Apr 2025 15:45:01 +0000 Manifest this update: Thu 24 Apr 2025 15:45:00 +0000 Manifest next update: Thu 01 May 2025 15:45:00 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: aqUENe/VePTL3mJf7iybdAlUVGpPYeA//Ze3lTzX7uY=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9608 (0x2588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Apr 24 15:45:00 2025 GMT Not After : May 1 15:45:00 2025 GMT Subject: CN=680a5c7d-8586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:ae:fb:6c:44:24:d2:a1:3d:50:df:9b:ca: 12:5d:d6:96:e3:54:e5:a2:a5:da:91:d7:de:96:66: 3d:79:de:87:46:2f:02:8b:97:31:82:77:7a:ba:03: 7a:b2:5e:d7:22:59:a8:e8:8a:4f:79:be:e9:a6:6c: b3:98:36:61:1e:9a:cd:57:f9:0a:f3:ce:b0:58:62: e0:40:8c:29:54:88:a7:61:2c:fd:44:cd:40:ae:a9: 84:ce:55:a3:2a:e3:da:43:30:f7:aa:87:cc:c2:e8: 52:0e:9e:f8:3f:f6:0f:9c:30:ad:55:69:d5:6a:6e: 65:9c:ed:a1:8d:39:a3:f9:58:6d:b0:4f:64:a0:3e: 45:e4:22:b8:2b:52:d0:ac:f3:cd:8b:16:2e:f0:78: 82:ff:5e:2f:15:23:af:98:35:5f:80:39:b7:dd:8f: e5:0f:e1:be:07:a0:5a:c0:fc:36:29:d4:46:b8:02: d3:54:48:b8:40:54:d6:8e:b0:3c:22:dd:13:0f:3d: 45:0c:8d:19:92:80:34:be:c3:8f:14:ec:69:43:a9: 5d:ad:30:cf:2a:ee:9a:36:54:11:58:5d:0e:53:3c: 76:f3:50:5c:2a:c8:d1:61:2a:56:cc:99:61:c7:11: 49:6b:bc:bd:e3:27:09:3a:f4:db:73:50:83:0b:c3: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F1:12:D9:F9:42:59:D2:21:3C:8D:45:33:69:57:52:D0:19:42:66 X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b2:89:50:b9:2d:c5:82:b9:e4:2c:34:d1:1b:16:c3:c0:80: d7:fb:d1:ac:0d:82:b4:06:90:b0:90:03:38:ba:22:13:57:fa: e1:bf:70:6a:03:86:3d:4f:a1:35:30:42:61:33:e0:4f:41:70: 93:72:77:3b:04:7e:6a:fa:7f:a5:47:33:34:15:3f:4a:ee:2e: 37:81:f5:68:81:39:a8:6f:ba:ab:2f:83:99:d4:1f:49:3d:3a: 2f:5e:96:be:6c:32:7e:92:45:40:64:6a:ab:8d:72:0e:6f:6e: af:1a:11:dc:64:b6:82:cf:1c:a6:d5:c7:4d:ee:10:f7:5f:2e: b7:41:b2:84:a8:b7:05:2e:c7:1a:61:97:38:b7:25:b3:08:f5: f1:0e:49:f8:9a:4f:b8:55:50:1f:89:bf:86:3f:a0:fd:28:e7: e4:de:3d:c5:b2:97:f0:cb:db:be:61:93:8c:e5:ac:a2:e4:6b: 4f:c5:ba:29:7f:f9:a1:3f:60:77:be:ba:6e:65:c1:a9:ac:8b: d0:c7:a1:02:61:23:40:9f:7b:1a:5c:e5:5b:17:b6:16:bb:34: 47:19:05:df:9e:66:49:89:f6:c2:3b:d1:35:86:5d:1d:1c:0d: 1f:7f:e9:64:02:ea:f1:fa:7d:78:07:f6:a2:fd:90:24:26:c0: e1:b5:4d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNDI0MTU0NTAwWhcNMjUwNTAxMTU0NTAwWjAYMRYwFAYD VQQDEw02ODBhNWM3ZC04NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMGu+2xEJNKhPVDfm8oSXdaW41TloqXakdfelmY9ed6HRi8Ci5cxgnd6ugN6 sl7XIlmo6IpPeb7ppmyzmDZhHprNV/kK886wWGLgQIwpVIinYSz9RM1ArqmEzlWj KuPaQzD3qofMwuhSDp74P/YPnDCtVWnVam5lnO2hjTmj+VhtsE9koD5F5CK4K1LQ rPPNixYu8HiC/14vFSOvmDVfgDm33Y/lD+G+B6BawPw2KdRGuALTVEi4QFTWjrA8 It0TDz1FDI0ZkoA0vsOPFOxpQ6ldrTDPKu6aNlQRWF0OUzx281BcKsjRYSpWzJlh xxFJa7y94ycJOvTbc1CDC8PCSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHxEtn5 QlnSITyNRTNpV1LQGUJmMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCsolQuS3FgrnkLDTRGxbDwIDX+9GsDYK0BpCwkAM4uiITV/rhv3Bq A4Y9T6E1MEJhM+BPQXCTcnc7BH5q+n+lRzM0FT9K7i43gfVogTmob7qrL4OZ1B9J PTovXpa+bDJ+kkVAZGqrjXIOb26vGhHcZLaCzxym1cdN7hD3Xy63QbKEqLcFLsca YZc4tyWzCPXxDkn4mk+4VVAfib+GP6D9KOfk3j3Fspfwy9u+YZOM5ayi5GtPxbop f/mhP2B3vrpuZcGprIvQx6ECYSNAn3saXOVbF7YWuzRHGQXfnmZJifbCO9E1hl0d HA0ff+lkAurx+n14B/ai/ZAkJsDhtU0p -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:45 2025 by rpki-client