$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: vqE/OK2kqxXtORq9OcsZIhPcHrpfStmsL4ElvxXuDN8= Subject key identifier: D6:97:83:48:44:98:AA:BA:C3:99:F8:A6:BF:A7:3C:C8:C1:71:18:D5 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 01E5 Signing time: Sat 29 Mar 2025 02:22:23 +0000 Manifest this update: Sat 29 Mar 2025 02:22:22 +0000 Manifest next update: Sat 05 Apr 2025 02:22:22 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: SEvKSReR0a3yry2hkvEgJ1mhFI7xuAPyjaZRaaD9eTE=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F Validity Not Before: Mar 29 02:22:22 2025 GMT Not After : Apr 5 02:22:22 2025 GMT Subject: CN=67e7595f-719b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:e9:83:a5:93:f5:98:4f:0f:64:aa:16:32: 1c:2e:22:e5:77:cf:72:58:46:a6:c8:e0:e9:1f:e6: 5b:ab:74:5a:75:d4:a5:a7:6a:7a:98:c4:df:31:74: 8d:31:83:3f:3a:21:6a:16:20:bd:7e:43:fa:c5:c4: 94:f3:40:77:32:7a:70:e2:94:c1:43:e7:cd:f1:18: e2:1f:d0:1e:fa:84:2c:2e:f6:b5:34:fa:98:4c:75: 24:0f:32:c4:ed:bb:d1:0f:78:cc:39:d4:77:e0:32: e5:e5:a5:66:45:e3:58:30:51:f1:ea:64:8f:27:41: a2:7a:38:6b:14:c7:e7:cf:03:6b:1e:bf:b9:c1:53: ee:41:77:5d:45:5b:6a:6c:31:1a:cd:ca:3b:29:0e: 93:1b:b8:3e:d3:27:9c:5a:76:b4:19:6b:4d:99:b5: 78:4a:c5:c4:99:11:a8:24:fd:87:67:be:41:0d:57: e3:77:dd:6e:22:c6:90:e7:3b:1e:93:a8:79:32:e9: 8c:93:9d:39:53:a9:f1:1e:fb:a1:55:11:ba:a6:1e: 29:7b:6a:f2:50:4e:a2:5d:fa:92:27:34:b5:b5:f4: fa:dd:51:10:e5:6a:df:e4:48:61:48:3f:4e:49:05: c4:99:7d:33:91:33:98:03:30:f0:b8:e7:17:70:13: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:83:48:44:98:AA:BA:C3:99:F8:A6:BF:A7:3C:C8:C1:71:18:D5 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:85:f7:92:30:c0:6d:a8:14:88:9f:7d:4b:04:44:e1:9d:45: fc:e0:c7:ac:37:d9:36:74:c7:9b:43:29:ad:f1:92:7d:7a:14: 57:d3:94:e1:5d:c5:1d:68:5d:c5:1a:b1:30:e9:f5:41:fa:ac: 73:a5:4a:9b:22:02:4d:4c:46:9f:56:d0:35:57:60:3a:ce:51: 25:ac:78:e4:63:04:b3:ee:65:f4:93:04:8f:00:95:00:4d:e7: e2:59:04:b8:ab:d2:8d:e0:ee:08:11:97:59:53:74:5c:00:0d: 09:60:7a:40:7b:bb:fd:db:64:c1:cb:89:00:e1:90:f1:8a:97: 88:c7:26:67:40:10:ee:9b:81:42:48:93:ed:e3:42:a9:94:a9: f5:53:bc:0f:ae:9c:81:84:93:6b:da:b4:81:67:97:60:5d:2f: 3a:4e:78:58:42:95:f2:3e:16:ef:22:ba:46:05:ac:28:0b:a7: 55:ff:29:38:e7:46:11:87:ff:5a:29:33:e1:7f:a7:c8:f7:e8: d4:c0:46:43:f6:a4:59:ed:ec:ec:0c:bc:01:52:b6:f3:20:c5: 91:91:69:3b:7e:88:2e:48:59:53:49:19:5e:19:aa:cb:67:e9: 72:38:57:60:3f:a0:93:c3:20:5c:19:58:1e:60:67:e4:4e:d9: 99:e4:12:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwMzI5MDIyMjIyWhcNMjUwNDA1MDIyMjIyWjAYMRYwFAYD VQQDEw02N2U3NTk1Zi03MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Dpg6WT9ZhPD2SqFjIcLiLld89yWEamyODpH+Zbq3RaddSlp2p6mMTfMXSN MYM/OiFqFiC9fkP6xcSU80B3Mnpw4pTBQ+fN8RjiH9Ae+oQsLva1NPqYTHUkDzLE 7bvRD3jMOdR34DLl5aVmReNYMFHx6mSPJ0GiejhrFMfnzwNrHr+5wVPuQXddRVtq bDEazco7KQ6TG7g+0yecWna0GWtNmbV4SsXEmRGoJP2HZ75BDVfjd91uIsaQ5zse k6h5MumMk505U6nxHvuhVRG6ph4pe2ryUE6iXfqSJzS1tfT63VEQ5Wrf5EhhSD9O SQXEmX0zkTOYAzDwuOcXcBOH9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaXg0hE mKq6w5n4pr+nPMjBcRjVMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARhfeSMMBtqBSIn31LBEThnUX84MesN9k2dMebQymt8ZJ9ehRX05Th XcUdaF3FGrEw6fVB+qxzpUqbIgJNTEafVtA1V2A6zlElrHjkYwSz7mX0kwSPAJUA TefiWQS4q9KN4O4IEZdZU3RcAA0JYHpAe7v922TBy4kA4ZDxipeIxyZnQBDum4FC SJPt40KplKn1U7wPrpyBhJNr2rSBZ5dgXS86TnhYQpXyPhbvIrpGBawoC6dV/yk4 50YRh/9aKTPhf6fI9+jUwEZD9qRZ7ezsDLwBUrbzIMWRkWk7foguSFlTSRleGarL Z+lyOFdgP6CTwyBcGVgeYGfkTtmZ5BLa -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:05 2025 by rpki-client