$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft File: agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json) Hash identifier: MPgpy9xlKH6ItPOkpDcXNVJr8Vbvau7GAu93q9ixxqQ= Subject key identifier: AB:D6:42:F1:6A:F0:C2:8A:1F:61:AF:79:6F:DD:52:B5:78:C9:21:63 Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 Certificate issuer: /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft Manifest number: 065B Signing time: Thu 24 Apr 2025 23:21:25 +0000 Manifest this update: Thu 24 Apr 2025 23:21:24 +0000 Manifest next update: Thu 01 May 2025 23:21:24 +0000 Files and hashes: 1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: jp1bHFj0kY1z3OhU9387zpqgZQoQ9JCjOc90dXHURAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Validity Not Before: Apr 24 23:21:24 2025 GMT Not After : May 1 23:21:24 2025 GMT Subject: CN=680ac774-5957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:ae:5d:eb:96:89:9b:b6:e4:93:d8:a9:27: a9:56:7e:c2:5a:d5:94:93:bd:eb:24:8c:fa:f9:cb: 7f:e2:79:ed:a2:ea:ec:dd:56:89:35:2e:74:87:25: 3c:80:ff:02:da:af:2c:2c:b0:fc:67:0e:0d:73:fe: f0:69:b6:ba:08:be:f5:0f:d4:6c:1b:27:49:01:39: df:14:2f:9f:76:9e:44:a8:f4:5d:0e:60:b7:33:65: b1:15:8e:cb:31:e3:cc:4b:52:4e:c0:f5:30:b8:23: 10:0d:33:d6:cc:36:ea:21:be:ad:ce:8c:9d:61:4e: e5:74:ad:a5:d7:c2:9d:3d:e5:eb:3b:4b:4b:b0:4e: 3b:41:b8:e1:bf:a9:dc:b9:83:47:b6:44:5e:24:28: 9c:b8:2d:0d:41:1c:30:ae:dd:58:58:04:0d:f9:84: 5e:15:01:20:e7:9e:d0:c7:af:ed:1d:19:65:9a:fa: 0f:d3:eb:7d:a1:8d:91:c3:f8:f7:fb:d2:66:7b:28: 22:cb:22:8f:8c:84:48:52:2a:b5:85:ff:2a:fc:54: 1b:a1:b0:f0:9a:ae:e6:8e:7b:ec:f4:6c:a9:a3:89: 31:cb:7d:a3:5a:e7:bd:9c:e7:9f:37:1d:30:90:b1: fc:30:e3:58:ee:0f:98:83:29:6e:79:e2:63:3b:27: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D6:42:F1:6A:F0:C2:8A:1F:61:AF:79:6F:DD:52:B5:78:C9:21:63 X509v3 Authority Key Identifier: keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:64:54:a9:3e:63:b2:c6:d7:2f:7c:4e:db:ae:f3:db:3c:63: 1a:09:63:d0:3c:43:37:49:82:b2:37:96:a2:e0:26:b4:1e:c2: 88:e5:6f:89:26:f9:f5:67:52:81:8c:36:d0:02:ab:5a:f7:df: 76:a5:36:81:3e:84:93:ef:8d:b3:80:6d:3b:58:e2:00:f9:f0: 51:71:db:71:a1:c8:a8:c2:aa:d8:83:a7:4e:4b:94:a3:52:cb: 41:b8:51:1d:ca:07:50:88:82:dc:9d:5e:a4:26:4a:cc:63:a9: 86:47:12:f9:f5:f3:0a:f9:fd:74:6d:c8:6f:05:61:44:7f:b4: 29:9e:3f:de:3f:18:4c:ac:1d:a9:91:7b:f5:a8:3d:c3:cc:e5: 3b:f6:71:11:4d:d8:a7:dc:b0:46:9e:d3:4f:60:f3:7a:fa:3d: ec:04:44:0f:ff:2c:df:92:a6:71:42:cb:fe:22:fd:61:ad:e4: 1b:cb:26:d6:3f:4e:64:38:b7:22:50:49:a4:64:4f:87:2f:03: cd:6e:f3:5f:15:ad:7c:04:83:79:e8:7a:ff:79:91:56:5d:a8: fb:e9:ed:04:be:13:9e:2d:00:75:1d:47:ef:d1:48:f3:40:21: ff:ab:0d:61:f8:4a:21:b6:26:6d:3d:0e:87:c7:3a:2e:50:4d: 22:d4:0d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw RTJEOUU4NjcwHhcNMjUwNDI0MjMyMTI0WhcNMjUwNTAxMjMyMTI0WjAYMRYwFAYD VQQDEw02ODBhYzc3NC01OTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KauXeuWiZu25JPYqSepVn7CWtWUk73rJIz6+ct/4nntours3VaJNS50hyU8 gP8C2q8sLLD8Zw4Nc/7waba6CL71D9RsGydJATnfFC+fdp5EqPRdDmC3M2WxFY7L MePMS1JOwPUwuCMQDTPWzDbqIb6tzoydYU7ldK2l18KdPeXrO0tLsE47Qbjhv6nc uYNHtkReJCicuC0NQRwwrt1YWAQN+YReFQEg557Qx6/tHRllmvoP0+t9oY2Rw/j3 +9JmeygiyyKPjIRIUiq1hf8q/FQbobDwmq7mjnvs9Gypo4kxy32jWue9nOefNx0w kLH8MONY7g+YgylueeJjOydEMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvWQvFq 8MKKH2GveW/dUrV4ySFjMB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiZFSpPmOyxtcvfE7brvPbPGMaCWPQPEM3SYKyN5ai4Ca0HsKI5W+J Jvn1Z1KBjDbQAqta9992pTaBPoST742zgG07WOIA+fBRcdtxociowqrYg6dOS5Sj UstBuFEdygdQiILcnV6kJkrMY6mGRxL59fMK+f10bchvBWFEf7Qpnj/ePxhMrB2p kXv1qD3DzOU79nERTdin3LBGntNPYPN6+j3sBEQP/yzfkqZxQsv+Iv1hreQbyybW P05kOLciUEmkZE+HLwPNbvNfFa18BIN56Hr/eZFWXaj76e0EvhOeLQB1HUfv0Ujz QCH/qw1h+EohtiZtPQ6HxzouUE0i1A1q -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:04 2025 by rpki-client