$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: f6e+y1TjRU2LbD/Eh9vdcsAUvW+ZCtv6Xw2wQnjuQG4= Subject key identifier: 57:13:22:6A:B2:24:73:16:24:BE:04:7D:0C:ED:C2:5F:8B:51:FD:82 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 0145 Signing time: Fri 31 May 2024 05:37:18 +0000 Manifest this update: Fri 31 May 2024 05:37:17 +0000 Manifest next update: Fri 07 Jun 2024 05:37:17 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: RdrFBOBnMJQwzAWrdaA6APh1FYMdBdtyBPyUUqMbE6g=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: MKqlklmftazoL51pv0hhdUKVdFIr1J8KW/0yMehBjaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: May 31 05:37:17 2024 GMT Not After : Jun 7 05:37:17 2024 GMT Subject: CN=6659620e-5561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4f:25:58:66:51:c9:bd:99:e9:99:70:13:ee: cf:f9:d3:b1:51:85:bc:8e:4a:4c:c7:a8:09:a8:1e: ab:59:73:02:3c:17:a4:2d:23:7f:b2:d8:0f:79:a7: 88:e6:ac:e4:72:63:44:0f:5d:08:16:9d:db:60:e9: dc:b2:53:77:5c:03:7f:db:e3:fb:2e:12:5d:3c:f8: 8c:5c:c7:45:fe:67:f9:87:dd:16:79:2b:10:3d:d9: 7f:61:9c:1e:c7:fa:54:46:fa:a5:2b:87:c2:b4:a5: 24:89:e0:a0:2a:29:28:2c:c5:9b:c5:ce:fd:c4:40: 31:fc:ae:a8:a5:3d:a0:30:5a:ca:6f:79:3e:e6:37: 00:40:23:94:4b:74:c6:36:d1:91:30:4a:a9:c8:1d: 69:43:b5:82:1c:ea:24:7a:c0:b1:da:80:9a:f0:5a: 71:6d:cf:86:b0:94:dc:cd:ec:d7:e8:b0:74:5d:cc: 34:fc:03:c2:58:7c:16:5e:af:0b:66:d9:bc:86:1e: dd:87:59:6a:c6:e4:cb:ba:e7:30:c7:94:24:fb:78: 62:2b:3b:d8:b6:db:a3:be:10:b5:ee:28:13:eb:fb: 30:ef:b2:f1:25:49:cd:5a:79:08:12:60:6b:c4:4f: 6a:84:b8:fa:25:03:c1:4e:61:d6:c7:ec:f6:bd:c1: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:22:6A:B2:24:73:16:24:BE:04:7D:0C:ED:C2:5F:8B:51:FD:82 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:40:ce:94:72:3d:0d:a1:17:f0:cc:82:2c:56:43:97:56:19: 03:f8:81:3d:51:c9:af:35:e2:e4:55:31:c1:9e:83:62:d3:86: 72:b4:a5:0d:c5:d4:20:f1:9c:8d:5c:46:37:77:ca:0d:88:d4: cd:f9:7b:74:44:4c:14:01:af:cd:55:01:1b:9b:f3:9f:26:f1: 0d:12:ca:0a:21:e6:63:5f:79:e0:a2:f5:ec:86:97:14:30:dc: 36:5a:68:4d:55:0e:76:f3:dd:1a:ff:b8:3e:02:bd:42:e2:92: 31:9d:21:29:68:7b:1a:f8:b7:3d:d3:86:f8:4c:7a:63:66:6e: 12:1c:42:78:27:10:af:3d:1b:79:9a:04:f5:cb:8f:a5:f5:ab: 07:14:a7:b9:30:67:66:c3:65:04:fb:48:f5:22:71:ef:54:aa: 58:40:b6:2b:7e:c0:63:9e:fa:95:9d:72:27:e6:ab:55:f0:ef: 01:3b:31:31:b5:13:c3:e4:4e:3e:a0:25:40:fd:36:3c:c9:93: ec:95:e3:ac:70:21:78:d3:26:67:a1:18:57:d2:b6:3b:43:10: 9e:e1:f1:33:00:27:23:f3:a6:54:1e:60:e0:22:11:77:86:d0: cb:c3:9a:48:65:79:9a:ee:2e:99:26:49:a9:a7:88:fd:30:c3: e6:1b:52:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjQwNTMxMDUzNzE3WhcNMjQwNjA3MDUzNzE3WjAYMRYwFAYD VQQDEw02NjU5NjIwZS01NTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5U8lWGZRyb2Z6ZlwE+7P+dOxUYW8jkpMx6gJqB6rWXMCPBekLSN/stgPeaeI 5qzkcmNED10IFp3bYOncslN3XAN/2+P7LhJdPPiMXMdF/mf5h90WeSsQPdl/YZwe x/pURvqlK4fCtKUkieCgKikoLMWbxc79xEAx/K6opT2gMFrKb3k+5jcAQCOUS3TG NtGRMEqpyB1pQ7WCHOokesCx2oCa8Fpxbc+GsJTczezX6LB0Xcw0/APCWHwWXq8L Ztm8hh7dh1lqxuTLuucwx5Qk+3hiKzvYttujvhC17igT6/sw77LxJUnNWnkIEmBr xE9qhLj6JQPBTmHWx+z2vcGznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcTImqy JHMWJL4EfQztwl+LUf2CMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCQM6Ucj0NoRfwzIIsVkOXVhkD+IE9UcmvNeLkVTHBnoNi04ZytKUN xdQg8ZyNXEY3d8oNiNTN+Xt0REwUAa/NVQEbm/OfJvENEsoKIeZjX3ngovXshpcU MNw2WmhNVQ52890a/7g+Ar1C4pIxnSEpaHsa+Lc904b4THpjZm4SHEJ4JxCvPRt5 mgT1y4+l9asHFKe5MGdmw2UE+0j1InHvVKpYQLYrfsBjnvqVnXIn5qtV8O8BOzEx tRPD5E4+oCVA/TY8yZPsleOscCF40yZnoRhX0rY7QxCe4fEzACcj86ZUHmDgIhF3 htDLw5pIZXma7i6ZJkmpp4j9MMPmG1KO -----END CERTIFICATE-----Generated at Fri May 31 06:33:57 2024 by rpki-client on console-fra.rpki-client.org