$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: aSlM2MWQMFQEuwlor+6oyy3JRP/MNgel+yGbnq5D/lE= Subject key identifier: E1:9B:6E:74:BB:0B:53:7A:0D:72:0E:D6:F0:08:5D:91:28:64:47:DA Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 2592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 257D Signing time: Wed 14 May 2025 15:48:37 +0000 Manifest this update: Wed 14 May 2025 15:48:36 +0000 Manifest next update: Wed 21 May 2025 15:48:36 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: WrtuL/rlcnaiv53lmGvphlH77PD/wdBk4fNF2n/JKvM=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9618 (0x2592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: May 14 15:48:36 2025 GMT Not After : May 21 15:48:36 2025 GMT Subject: CN=6824bb54-18c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:69:42:60:9b:4b:d0:51:53:9e:f1:8d:64: 2b:81:06:f5:15:34:ce:e8:4d:1c:3a:8f:e7:e8:3e: ac:c3:0c:b8:32:e5:73:65:9e:18:a3:a6:da:82:94: 11:b5:36:38:e4:50:02:b0:e5:e2:ca:4c:d9:63:f2: df:60:09:1a:2d:bd:75:7c:2f:40:f5:26:0f:7e:3c: 0a:51:d8:9e:67:ce:63:98:1a:a6:56:0b:d2:31:3e: 23:6d:21:02:9d:ff:68:3f:97:e5:75:42:c6:8f:44: 02:69:a8:f9:84:51:13:c4:5c:04:92:59:6d:3a:5a: 16:71:92:0d:6d:78:1b:10:e9:de:c2:4d:78:dc:be: ef:3c:ca:f7:c1:4d:67:81:b1:d1:56:6a:75:9c:4a: be:5e:8f:0f:e8:c5:70:0d:a9:c4:45:6b:08:a8:e8: 33:58:b7:e4:e5:f1:c5:43:51:6e:49:cc:b6:15:be: 81:d4:8d:ee:b9:ce:b7:e1:d3:69:66:49:88:ac:b6: 70:89:85:80:10:a8:d2:e5:6a:ce:c3:53:9b:87:76: 23:46:93:51:6e:f5:44:c8:6d:f3:cb:2b:97:52:67: 15:58:89:a0:fb:dd:0c:f3:92:a9:49:d0:ef:b3:1f: ab:fc:50:d0:14:e1:e2:4a:b2:5a:fb:47:e8:29:d9: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9B:6E:74:BB:0B:53:7A:0D:72:0E:D6:F0:08:5D:91:28:64:47:DA X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a6:f4:fb:d1:51:12:2e:ee:36:b0:15:52:a0:46:de:aa:5c: 16:bc:f8:41:49:11:ab:01:18:76:14:e7:d7:da:a1:e6:66:d7: 01:19:d5:1c:19:c0:d1:cb:0a:32:e2:dc:d6:5d:e3:42:48:de: e5:05:26:d7:16:c3:da:be:bd:96:0f:bd:c8:46:96:90:fe:fb: fb:c8:e9:63:3d:13:58:a5:75:e4:09:bc:8d:51:b1:89:28:5b: 47:1c:46:ea:5c:86:7d:b8:1a:1e:32:ca:de:3e:71:15:3d:6d: d4:f3:29:39:f6:f5:44:71:24:d6:91:e6:12:8c:3b:ec:31:b5: 37:21:aa:21:10:0d:a8:f1:4c:24:c0:0f:b9:43:6f:4b:95:10: 9d:97:1f:b4:e2:07:81:a5:e6:b6:56:93:18:a7:05:87:17:45: 73:78:84:9b:cd:a9:d1:09:b8:9f:97:2e:02:c8:a0:7b:87:93: cb:9e:b0:ad:36:3d:b5:27:7e:25:07:d0:59:5b:ef:f9:79:49: e2:32:7a:82:17:d9:72:ff:14:cd:1c:36:1d:5f:48:cf:31:a4: fd:4d:1c:c7:29:6c:a4:94:a1:87:c0:ea:31:a2:79:84:71:b8: c4:f1:af:2a:ae:69:e6:9c:61:d9:41:e6:8e:9b:f4:6f:22:09: 24:f3:e1:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNTE0MTU0ODM2WhcNMjUwNTIxMTU0ODM2WjAYMRYwFAYD VQQDEw02ODI0YmI1NC0xOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gJpQmCbS9BRU57xjWQrgQb1FTTO6E0cOo/n6D6swwy4MuVzZZ4Yo6bagpQR tTY45FACsOXiykzZY/LfYAkaLb11fC9A9SYPfjwKUdieZ85jmBqmVgvSMT4jbSEC nf9oP5fldULGj0QCaaj5hFETxFwEklltOloWcZINbXgbEOnewk143L7vPMr3wU1n gbHRVmp1nEq+Xo8P6MVwDanERWsIqOgzWLfk5fHFQ1FuScy2Fb6B1I3uuc634dNp ZkmIrLZwiYWAEKjS5WrOw1Obh3YjRpNRbvVEyG3zyyuXUmcVWImg+90M85KpSdDv sx+r/FDQFOHiSrJa+0foKdm8EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGbbnS7 C1N6DXIO1vAIXZEoZEfaMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOpvT70VESLu42sBVSoEbeqlwWvPhBSRGrARh2FOfX2qHmZtcBGdUc GcDRywoy4tzWXeNCSN7lBSbXFsPavr2WD73IRpaQ/vv7yOljPRNYpXXkCbyNUbGJ KFtHHEbqXIZ9uBoeMsrePnEVPW3U8yk59vVEcSTWkeYSjDvsMbU3IaohEA2o8Uwk wA+5Q29LlRCdlx+04geBpea2VpMYpwWHF0VzeISbzanRCbifly4CyKB7h5PLnrCt Nj21J34lB9BZW+/5eUniMnqCF9ly/xTNHDYdX0jPMaT9TRzHKWyklKGHwOoxonmE cbjE8a8qrmnmnGHZQeaOm/RvIgkk8+GK -----END CERTIFICATE-----Generated at Thu May 15 13:01:58 2025 by rpki-client