$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: 2nxtVWNb/psqIzkeAMOwrVqntsQJGcVfYvUN0rThNdE= Subject key identifier: 1A:4F:54:BB:86:1C:B5:F3:82:EF:F1:E7:8E:2C:38:C3:57:84:31:22 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 01F3 Signing time: Fri 25 Apr 2025 01:51:23 +0000 Manifest this update: Fri 25 Apr 2025 01:51:23 +0000 Manifest next update: Fri 02 May 2025 01:51:22 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: lqqnLCcnT4jnlsxdRP8Nndd2WUHdBPDlLGlbodkogA0=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Apr 25 01:51:23 2025 GMT Not After : May 2 01:51:22 2025 GMT Subject: CN=680aea9b-9994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:c3:cc:e9:1c:9e:84:98:56:bd:10:2b:a1: 31:f7:19:8b:0b:16:e7:88:c7:07:7e:a9:97:06:dd: 29:bf:32:43:67:9d:23:b6:dd:6f:ff:78:68:ac:c4: 29:d7:a9:f6:ad:ac:1f:ae:34:4e:3c:42:50:ed:04: 3a:d6:0a:a4:a5:89:69:da:e9:b7:22:76:93:b7:ab: 60:b1:4a:6f:b8:fa:a4:6d:fe:b4:37:58:e8:9d:5b: d4:70:3c:ae:c8:12:c1:b4:86:5e:4d:32:68:e8:1c: a0:c9:3e:02:89:12:47:9e:f8:c9:78:15:d0:78:e8: 12:6b:31:7b:50:b2:87:4d:b7:72:6e:49:1e:ea:2e: d6:af:9a:db:6d:7f:85:56:8f:b4:cf:18:e0:f3:7f: 37:48:e6:30:57:d8:21:20:8a:e2:15:eb:5d:ca:3a: 0b:c2:90:ff:81:bf:a0:0f:4e:d5:1e:82:ca:59:99: c8:bd:b7:e6:5f:55:a7:a0:2f:72:65:13:cc:58:2d: 47:81:41:f0:a7:96:7a:67:9f:2b:cc:01:99:df:b3: 6b:4a:c1:be:b3:e3:02:3d:89:5c:28:21:cb:ba:43: dd:01:43:c1:3c:b5:e7:4f:86:32:eb:78:77:61:48: 69:a4:e5:09:f4:db:bb:91:28:10:fb:fc:30:e5:a2: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4F:54:BB:86:1C:B5:F3:82:EF:F1:E7:8E:2C:38:C3:57:84:31:22 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:75:3c:3b:52:a5:ee:9d:9e:96:bd:df:0b:cc:da:0d:78:f6: 45:3b:55:9c:78:a4:3d:12:88:ce:34:04:f3:f6:70:3e:cf:6a: 22:ca:24:8a:58:a4:7b:35:68:80:da:e7:62:0b:8f:d0:38:6d: 74:a1:bb:e7:a0:6b:90:3f:43:0d:cb:d0:ec:a5:fa:e1:c5:5e: 4b:b5:bc:85:18:ec:4a:16:a3:7b:d9:37:fa:eb:03:f8:f5:73: 4a:9b:12:5a:33:ef:cb:38:c1:73:34:c0:a7:c6:25:b2:f6:cc: 94:43:b5:03:35:fa:f7:a3:16:a0:0f:87:e3:66:ba:04:4c:a1: 39:9f:1e:e4:f9:c1:34:de:0f:f1:9c:3c:ba:89:ad:c8:e7:40: dd:50:a8:4f:57:02:a4:9c:7c:f7:3d:99:ef:a6:23:32:64:58: d9:65:ba:c1:6e:b9:be:c0:14:10:73:c2:7f:ff:f0:5c:ab:49: 2c:40:27:51:e9:89:ef:06:e0:26:04:9c:fc:7f:e6:ab:80:97: 47:ac:d5:c5:7a:4e:e4:62:a1:78:05:6a:67:98:f3:77:11:75: 86:aa:b1:a0:c1:5d:27:a0:7b:cd:f8:ab:da:6c:8a:4c:0c:9e: 34:9e:e1:29:93:d1:cd:59:7e:8e:27:ec:6e:95:15:b8:a8:17: 77:ef:b4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwNDI1MDE1MTIzWhcNMjUwNTAyMDE1MTIyWjAYMRYwFAYD VQQDEw02ODBhZWE5Yi05OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto/DzOkcnoSYVr0QK6Ex9xmLCxbniMcHfqmXBt0pvzJDZ50jtt1v/3horMQp 16n2rawfrjROPEJQ7QQ61gqkpYlp2um3InaTt6tgsUpvuPqkbf60N1jonVvUcDyu yBLBtIZeTTJo6BygyT4CiRJHnvjJeBXQeOgSazF7ULKHTbdybkke6i7Wr5rbbX+F Vo+0zxjg8383SOYwV9ghIIriFetdyjoLwpD/gb+gD07VHoLKWZnIvbfmX1WnoC9y ZRPMWC1HgUHwp5Z6Z58rzAGZ37NrSsG+s+MCPYlcKCHLukPdAUPBPLXnT4Yy63h3 YUhppOUJ9Nu7kSgQ+/ww5aJ3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpPVLuG HLXzgu/x544sOMNXhDEiMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdTw7UqXunZ6Wvd8LzNoNePZFO1WceKQ9EojONATz9nA+z2oiyiSK WKR7NWiA2udiC4/QOG10obvnoGuQP0MNy9DspfrhxV5LtbyFGOxKFqN72Tf66wP4 9XNKmxJaM+/LOMFzNMCnxiWy9syUQ7UDNfr3oxagD4fjZroETKE5nx7k+cE03g/x nDy6ia3I50DdUKhPVwKknHz3PZnvpiMyZFjZZbrBbrm+wBQQc8J///Bcq0ksQCdR 6YnvBuAmBJz8f+argJdHrNXFek7kYqF4BWpnmPN3EXWGqrGgwV0noHvN+KvabIpM DJ40nuEpk9HNWX6OJ+xulRW4qBd377SA -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:29 2025 by rpki-client