$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: bGfMV2nKokXxevFHWg5llWV8OwNUW+RQVy8qV7y0JSo= Subject key identifier: 0F:0D:EE:08:53:16:B2:74:69:44:CD:CA:E9:7A:6D:95:AE:0B:8F:FA Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 020B Signing time: Fri 13 Jun 2025 01:30:34 +0000 Manifest this update: Fri 13 Jun 2025 01:30:33 +0000 Manifest next update: Fri 20 Jun 2025 01:30:33 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: IA5eJ4soPw0EG1EKo8bzeAAuO5M1hi6HzG/t/3YysX0=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Jun 13 01:30:33 2025 GMT Not After : Jun 20 01:30:33 2025 GMT Subject: CN=684b7f3a-9fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:40:61:52:f3:5a:91:85:a1:12:ba:0a:48: eb:97:dd:72:f5:a3:cc:25:83:e8:44:0d:ce:cd:df: 4c:79:35:1d:29:8f:93:19:c4:25:7e:48:27:7b:20: e9:4d:7f:ac:a4:16:16:e9:86:54:bc:dd:d0:81:7a: 6a:96:d1:78:94:d6:3a:89:d1:5e:22:64:b2:39:6c: 2e:ce:95:3b:cf:7f:3f:94:32:1c:a7:5a:ed:40:44: 68:b7:75:0e:db:2d:a6:60:5d:23:f9:25:19:2f:83: 30:e3:7f:b5:a3:96:8e:9a:6d:14:cb:87:b3:d7:5e: f1:f1:7a:9c:35:09:fa:89:d8:8e:e1:0a:9c:55:e9: 97:70:09:e1:bd:bb:a7:0b:cf:b6:9c:5b:c3:d2:4c: 17:47:11:58:58:84:5a:1a:3b:32:39:f1:b3:a2:0a: 1e:df:6b:d4:be:f3:e1:94:d2:10:fc:05:97:1c:3a: 99:8d:08:ba:c3:19:8e:4c:7d:89:53:43:cd:04:b4: 53:7a:8f:a4:31:fc:a4:c6:2b:a5:c7:91:35:57:01: bc:2d:8b:f4:4e:86:c0:96:f9:20:84:d4:42:bb:7e: 32:ca:83:7b:2b:a1:b4:38:9c:ca:18:7e:ac:32:b8: 12:72:04:94:04:85:62:98:3c:15:cb:b5:d2:05:a0: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0D:EE:08:53:16:B2:74:69:44:CD:CA:E9:7A:6D:95:AE:0B:8F:FA X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:a0:3a:f3:d2:c4:73:ab:78:50:5d:72:f7:f9:9e:6f:3d: 35:ea:3f:25:e7:f9:4b:f9:1c:3f:1d:6d:a9:b3:0c:d9:e4:6c: 0a:5f:4a:1e:9b:19:88:99:68:01:d3:24:f6:62:4c:01:d2:07: 45:c3:41:69:1e:78:a6:34:83:0e:bf:49:63:e1:aa:c3:ce:ce: 20:01:7f:d7:d3:31:a4:89:dd:a8:9e:44:5a:9e:62:7b:8d:94: f9:a2:f1:35:84:7a:63:50:13:6f:a3:30:08:a0:89:34:df:2c: 65:7f:ce:29:2d:41:bb:46:e5:c7:b1:04:8b:30:37:87:ae:39: 43:a1:13:a5:51:05:1b:17:6e:f6:e1:a8:d6:d9:b7:cc:fd:bb: 48:df:80:3c:42:c2:68:53:7e:11:bd:d5:0f:6b:a2:7b:9a:d9: 08:4f:27:01:25:39:b2:af:88:35:5a:a8:95:ba:2d:3e:92:f2: 34:5d:02:76:be:da:e8:13:26:44:69:60:c6:b2:6a:76:47:3a: b0:12:ae:42:a4:86:88:5a:bc:ba:da:9f:3b:a0:4b:fa:51:b3: b4:9e:22:a7:77:84:97:1c:d0:eb:fc:0b:4d:da:cb:71:a8:85: d1:48:2f:35:89:e2:55:2d:8a:0a:9e:81:8d:df:c2:c3:ae:b6: 76:39:7e:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwNjEzMDEzMDMzWhcNMjUwNjIwMDEzMDMzWjAYMRYwFAYD VQQDEw02ODRiN2YzYS05ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhxAYVLzWpGFoRK6Ckjrl91y9aPMJYPoRA3Ozd9MeTUdKY+TGcQlfkgneyDp TX+spBYW6YZUvN3QgXpqltF4lNY6idFeImSyOWwuzpU7z38/lDIcp1rtQERot3UO 2y2mYF0j+SUZL4Mw43+1o5aOmm0Uy4ez117x8XqcNQn6idiO4QqcVemXcAnhvbun C8+2nFvD0kwXRxFYWIRaGjsyOfGzogoe32vUvvPhlNIQ/AWXHDqZjQi6wxmOTH2J U0PNBLRTeo+kMfykxiulx5E1VwG8LYv0TobAlvkghNRCu34yyoN7K6G0OJzKGH6s MrgScgSUBIVimDwVy7XSBaAW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8N7ghT FrJ0aUTNyul6bZWuC4/6MB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4qA689LEc6t4UF1y9/mebz016j8l5/lL+Rw/HW2pswzZ5GwKX0oe mxmImWgB0yT2YkwB0gdFw0FpHnimNIMOv0lj4arDzs4gAX/X0zGkid2onkRanmJ7 jZT5ovE1hHpjUBNvozAIoIk03yxlf84pLUG7RuXHsQSLMDeHrjlDoROlUQUbF272 4ajW2bfM/btI34A8QsJoU34RvdUPa6J7mtkITycBJTmyr4g1WqiVui0+kvI0XQJ2 vtroEyZEaWDGsmp2RzqwEq5CpIaIWry62p87oEv6UbO0niKnd4SXHNDr/AtN2stx qIXRSC81ieJVLYoKnoGN38LDrrZ2OX4i -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:50 2025 by rpki-client