$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: zy/bHmS9wu0x3O0Q1asuaQceSlweAE6TUnwNxWJjLB8= Subject key identifier: 44:CC:0F:3C:90:5C:D5:11:92:1B:85:CB:72:BF:11:A7:10:BE:1E:F3 Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 18A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 188F Signing time: Fri 04 Apr 2025 16:33:44 +0000 Manifest this update: Fri 04 Apr 2025 16:33:44 +0000 Manifest next update: Fri 11 Apr 2025 16:33:44 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: ulTSXybjvL2f1MRWehVBz0gwXt1ryrOBGF6EPsQ0kQk=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: rBSQRTDzDNTdo/Fn8PCTBFu4JOqtjUs4xyOXhorxe8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6308 (0x18a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC Validity Not Before: Apr 4 16:33:44 2025 GMT Not After : Apr 11 16:33:44 2025 GMT Subject: CN=67f009e8-6be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:b9:cf:b1:16:e7:85:69:69:86:ee:7e:a2: 24:22:ef:54:72:9d:47:a7:76:ca:ed:1b:8f:0f:a3: 0a:cd:d8:13:69:66:27:87:b6:2e:9c:21:9d:00:7a: 01:64:e6:d1:26:a6:8f:a7:42:bf:cc:83:29:12:ee: e5:5a:03:d4:fa:29:e1:40:63:87:6a:5b:47:4e:e1: 82:fb:b9:08:85:1d:59:35:85:0f:87:ef:14:ab:0d: f4:e6:e0:5e:68:78:b4:f4:9b:0f:70:8c:33:7a:c9: 9c:b2:51:45:3c:75:87:78:9e:06:65:c3:da:d6:89: 60:fe:4b:f4:6c:62:92:cd:b8:b9:37:7f:46:a0:b7: 75:bd:c4:c1:e0:bc:b4:5a:c0:6e:f0:02:c9:11:d9: 3d:0a:bc:a6:e7:ca:01:4d:e4:30:1b:0c:7f:7a:76: 3c:f6:ed:1b:41:84:3e:bf:b4:e2:69:90:fc:d5:a3: 94:9b:de:98:38:91:68:1a:9a:8f:da:08:fa:3b:d8: 70:4f:34:e3:e5:a2:b2:e0:e8:81:d7:0f:57:78:96: 2e:5f:8a:da:29:51:54:b2:1f:f7:c0:5b:4d:54:53: 81:18:3f:6c:30:ac:25:15:d7:ca:d7:19:1e:98:85: f2:06:13:d9:f7:bd:90:3f:2b:30:a3:68:3f:25:25: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CC:0F:3C:90:5C:D5:11:92:1B:85:CB:72:BF:11:A7:10:BE:1E:F3 X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2a:27:a8:b5:dd:55:93:28:aa:63:32:e5:07:43:6c:05:b2: 93:b7:30:60:79:96:7b:dc:e9:e4:be:99:c1:51:3c:7b:41:b1: df:0d:3e:0f:86:ab:f8:f6:95:2f:b0:33:88:a9:50:f4:aa:d0: 7b:45:2b:22:65:83:c8:9c:4f:99:a3:52:88:5b:26:c0:a9:00: f0:76:12:5b:a4:fa:61:c9:3a:0c:99:7c:aa:36:ea:ca:ee:db: e6:d4:4d:e9:5c:8a:6d:56:ad:37:98:ca:f6:e5:c1:28:b3:36: 3b:cd:1a:aa:8d:c4:f2:9e:dd:00:07:8b:b7:56:ab:eb:c3:31: c3:80:08:86:29:24:93:ba:ca:3c:c5:43:30:7f:19:d4:ef:ec: dd:0a:95:24:c1:33:f1:04:89:01:c5:94:e1:5b:d0:f8:a5:50: c7:76:75:03:9c:f7:34:ba:c9:7c:30:8f:fe:44:c4:3a:76:cb: 69:02:c0:55:1d:4a:49:d8:00:19:78:83:31:01:44:98:ff:d8: 44:1d:33:31:b2:e7:e7:d7:01:65:fa:10:02:0d:58:6c:a7:46: bc:c7:9c:9f:39:29:9e:0e:01:c3:57:b7:a0:ec:29:1d:4a:9f: 13:63:fc:28:a8:96:fb:13:c5:6d:16:a7:c9:d0:fa:aa:f8:25: 87:ee:16:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjUwNDA0MTYzMzQ0WhcNMjUwNDExMTYzMzQ0WjAYMRYwFAYD VQQDEw02N2YwMDllOC02YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6y5z7EW54VpaYbufqIkIu9Ucp1Hp3bK7RuPD6MKzdgTaWYnh7YunCGdAHoB ZObRJqaPp0K/zIMpEu7lWgPU+inhQGOHaltHTuGC+7kIhR1ZNYUPh+8Uqw305uBe aHi09JsPcIwzesmcslFFPHWHeJ4GZcPa1olg/kv0bGKSzbi5N39GoLd1vcTB4Ly0 WsBu8ALJEdk9Crym58oBTeQwGwx/enY89u0bQYQ+v7TiaZD81aOUm96YOJFoGpqP 2gj6O9hwTzTj5aKy4OiB1w9XeJYuX4raKVFUsh/3wFtNVFOBGD9sMKwlFdfK1xke mIXyBhPZ972QPyswo2g/JSWRowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETMDzyQ XNURkhuFy3K/EacQvh7zMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABKieotd1VkyiqYzLlB0NsBbKTtzBgeZZ73OnkvpnBUTx7QbHfDT4P hqv49pUvsDOIqVD0qtB7RSsiZYPInE+Zo1KIWybAqQDwdhJbpPphyToMmXyqNurK 7tvm1E3pXIptVq03mMr25cEoszY7zRqqjcTynt0AB4u3VqvrwzHDgAiGKSSTuso8 xUMwfxnU7+zdCpUkwTPxBIkBxZThW9D4pVDHdnUDnPc0usl8MI/+RMQ6dstpAsBV HUpJ2AAZeIMxAUSY/9hEHTMxsufn1wFl+hACDVhsp0a8x5yfOSmeDgHDV7eg7Ckd Sp8TY/woqJb7E8VtFqfJ0Pqq+CWH7ha9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:43 2025 by rpki-client