$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: WodJUmtcj0vW9uylqv0R8DxEb/ryLS/jt8H8BOTUMgs= Subject key identifier: 8E:28:2B:AA:E0:BB:D4:55:7B:CF:0F:72:3A:90:FD:5B:3D:88:67:E1 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 033B Signing time: Sat 05 Apr 2025 01:12:31 +0000 Manifest this update: Sat 05 Apr 2025 01:12:30 +0000 Manifest next update: Sat 12 Apr 2025 01:12:30 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: mfy2Z0MT2hx+0M1hYuTILh5XyXEIHtKdIrsh4G6znHc=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: m1lmrBomInv3RwGPR6n2Hax1CjT2qYjyfLp3Bhn9XcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D Validity Not Before: Apr 5 01:12:30 2025 GMT Not After : Apr 12 01:12:30 2025 GMT Subject: CN=67f0837f-4c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:02:75:b3:0b:ee:1d:be:3b:7f:25:6a:d0: b3:32:b3:1d:f1:f7:80:02:b9:a2:4f:01:cf:14:39: 0f:fa:5f:e6:02:4e:82:d8:99:ff:c5:2e:c1:d8:ba: d2:d9:3d:d1:8a:d3:e0:34:4b:bd:6a:d8:1d:1d:8f: 5e:10:a4:9a:ed:e1:eb:0d:17:6a:de:9b:ff:ed:00: 1c:a2:7b:60:ff:b3:e8:ec:f8:e4:e9:47:57:43:48: bb:0e:91:21:19:d8:8c:ee:65:21:35:a2:f7:bb:61: 72:89:dc:c8:1c:46:17:8d:f9:be:9c:7c:0b:ee:c7: ce:c9:d7:38:54:9e:1d:6e:74:fd:30:76:26:ec:88: b6:38:3a:ef:32:56:93:bc:64:e0:e9:d3:d2:55:19: be:cb:66:14:7c:5f:e3:0d:18:18:54:a5:82:a5:33: 1e:52:b8:6d:39:59:3e:8c:71:8d:a9:47:de:a0:18: ed:bd:e2:48:a1:9a:7c:59:6d:29:57:76:e2:51:aa: b9:53:96:a4:3e:6a:e6:e5:e3:eb:2d:91:fc:3a:1a: ea:4c:03:65:7c:22:fb:4a:0c:67:af:f6:2c:a7:ba: b4:0d:57:1c:fd:5c:18:42:5c:82:96:0c:7d:56:0a: 41:be:24:6e:b2:c3:bf:75:e7:51:68:65:76:70:44: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:2B:AA:E0:BB:D4:55:7B:CF:0F:72:3A:90:FD:5B:3D:88:67:E1 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:67:9a:e1:fc:b3:63:db:3e:1e:2e:c5:3a:de:fe:4f:7d:92: 8e:d2:65:cc:c1:d8:45:6c:9a:c4:9e:47:2e:76:17:e7:97:2c: ea:5f:43:ec:17:65:df:22:bc:6a:d5:ff:7f:87:d3:30:48:34: 6b:56:aa:28:af:c9:6c:3e:41:ae:22:18:a4:01:03:70:b7:14: e2:51:1b:b0:65:54:1c:7a:27:bb:c3:ae:29:9e:2b:2d:b6:b4: 8c:8d:e1:5f:8f:20:a3:7c:4e:16:47:42:e0:b1:7c:16:ac:38: a9:e3:b1:50:c6:52:a9:70:27:b8:93:a9:71:41:ff:f8:f5:fe: 5a:a3:2d:20:ad:55:0e:30:29:b2:45:1a:00:4f:78:77:8b:be: 95:83:c5:33:b9:f2:f3:18:3a:66:45:5c:44:17:2d:91:6e:e1: 50:0e:4d:68:e1:4d:6f:d8:24:6b:6f:35:ba:bb:7c:7d:bd:3e: 1e:19:5d:5f:93:d6:28:3a:1a:3b:8b:17:77:0c:70:03:8a:d2: a2:cb:b3:e4:4e:80:1b:60:80:53:9f:57:22:44:d9:30:20:b7: be:81:67:f3:64:89:90:21:ca:ab:93:29:b5:35:83:76:39:96: 5d:41:d0:be:9f:80:75:ca:65:d2:fb:bc:23:e1:d4:60:74:d9: 35:4e:04:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwNDA1MDExMjMwWhcNMjUwNDEyMDExMjMwWjAYMRYwFAYD VQQDEw02N2YwODM3Zi00YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKECdbML7h2+O38latCzMrMd8feAArmiTwHPFDkP+l/mAk6C2Jn/xS7B2LrS 2T3RitPgNEu9atgdHY9eEKSa7eHrDRdq3pv/7QAcontg/7Po7Pjk6UdXQ0i7DpEh GdiM7mUhNaL3u2FyidzIHEYXjfm+nHwL7sfOydc4VJ4dbnT9MHYm7Ii2ODrvMlaT vGTg6dPSVRm+y2YUfF/jDRgYVKWCpTMeUrhtOVk+jHGNqUfeoBjtveJIoZp8WW0p V3biUaq5U5akPmrm5ePrLZH8OhrqTANlfCL7Sgxnr/Ysp7q0DVcc/VwYQlyClgx9 VgpBviRussO/dedRaGV2cESXSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4oK6rg u9RVe88PcjqQ/Vs9iGfhMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgZ5rh/LNj2z4eLsU63v5PfZKO0mXMwdhFbJrEnkcudhfnlyzqX0Ps F2XfIrxq1f9/h9MwSDRrVqoor8lsPkGuIhikAQNwtxTiURuwZVQceie7w64pnist trSMjeFfjyCjfE4WR0LgsXwWrDip47FQxlKpcCe4k6lxQf/49f5aoy0grVUOMCmy RRoAT3h3i76Vg8UzufLzGDpmRVxEFy2RbuFQDk1o4U1v2CRrbzW6u3x9vT4eGV1f k9YoOho7ixd3DHADitKiy7PkToAbYIBTn1ciRNkwILe+gWfzZImQIcqrkym1NYN2 OZZdQdC+n4B1ymXS+7wj4dRgdNk1TgSG -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:53 2025 by rpki-client