$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: vrF0WDSsbLC0mDz02UAvD1uz6MhK2xB7OchV/w2PV6c= Subject key identifier: 37:7A:28:E3:D0:7C:A3:35:DB:25:5D:C4:3A:21:FD:55:24:32:1B:F5 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 029E Signing time: Fri 31 May 2024 04:12:39 +0000 Manifest this update: Fri 31 May 2024 04:12:39 +0000 Manifest next update: Fri 07 Jun 2024 04:12:39 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: z2InMoTo5itplMSxyNIxbMw9mR226WRkGbAFe9KIGUU=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: m1lmrBomInv3RwGPR6n2Hax1CjT2qYjyfLp3Bhn9XcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: May 31 04:12:39 2024 GMT Not After : Jun 7 04:12:39 2024 GMT Subject: CN=66594e37-75df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:fb:d3:92:03:ed:8c:f8:73:bd:e3:60:e0: 31:7b:90:55:fe:bf:f9:9c:4b:0a:b2:1a:47:d6:6d: 5d:3d:43:c0:db:e8:9b:04:0f:4c:77:f5:65:87:15: d3:eb:64:f1:ba:5c:a2:4a:96:d9:dc:f5:d9:91:87: 62:7b:f5:b1:b9:93:5b:8f:3b:b5:30:f5:a7:59:7d: 1b:08:31:b2:7d:d4:4a:b2:ac:03:37:a0:19:3b:d6: 8e:55:b2:64:d2:9e:72:78:ba:ec:cd:43:4d:18:1c: 3c:e6:a8:8f:40:fa:d3:86:42:2e:00:b3:c1:26:68: 8b:9f:12:40:32:3c:f0:7f:53:57:d5:63:7f:c8:5b: 65:cd:9a:41:a2:8f:8a:43:ab:b2:88:16:84:3c:16: ce:67:e9:ff:2d:3e:d7:3b:ba:b3:12:08:af:5c:a4: c7:10:9b:d2:e1:86:51:8f:d8:91:b8:0d:3a:83:aa: c5:f2:c8:eb:5c:b3:76:1f:e7:2a:18:0e:e8:7e:22: 10:e8:40:ad:f9:49:63:8c:5b:43:61:60:e0:cd:db: 5b:f0:fb:e1:58:54:a0:94:5c:0c:f9:27:91:88:02: e6:1f:5c:74:1f:67:e9:30:c3:a0:15:bd:77:d5:db: eb:62:75:68:27:1b:27:4e:55:aa:d5:43:03:b6:21: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:28:E3:D0:7C:A3:35:DB:25:5D:C4:3A:21:FD:55:24:32:1B:F5 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:16:03:35:cf:b7:f7:7b:10:ad:35:0b:96:e5:4a:b1:58:b5: 4e:72:f1:18:a7:de:8c:7b:41:c2:cd:c0:74:a3:5c:bf:1e:4c: fb:4a:4d:dd:d5:7e:c8:cd:7f:85:f8:cf:0b:57:79:80:53:30: e8:ba:1a:6c:54:4e:34:01:e9:e4:4d:98:2e:bb:00:f2:e3:0a: cf:4d:d3:dc:b3:ef:4e:d7:f5:53:53:b9:72:00:80:18:17:c8: 22:ff:f7:09:3a:63:a2:98:e9:f0:d2:e8:29:36:5f:f0:1c:52: fc:62:f9:48:eb:20:ba:c4:4e:75:a2:0d:21:5c:5a:b0:21:89: 8d:a1:b7:ab:44:1b:ab:a1:72:eb:a3:df:31:ba:57:ea:08:b0: 20:43:14:73:83:e0:1d:31:64:e3:73:a8:80:9e:56:36:b4:b4: 46:e8:88:b1:85:f3:37:77:b4:94:a4:83:d0:5c:d3:4f:fb:01: e9:d7:b3:7e:f2:90:a5:ad:f0:58:0a:3e:ca:06:a6:95:57:2f: b4:25:9d:f5:9c:e5:df:14:a0:1e:25:25:9a:6e:00:20:21:1b: be:8b:a3:5c:c4:e3:64:12:74:8d:9b:1e:b1:90:15:8e:6a:42: 1d:3d:9a:e3:03:69:3f:2b:45:50:3f:a0:15:dc:e9:65:df:ae: 02:9c:39:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjQwNTMxMDQxMjM5WhcNMjQwNjA3MDQxMjM5WjAYMRYwFAYD VQQDEw02NjU5NGUzNy03NWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKP705ID7Yz4c73jYOAxe5BV/r/5nEsKshpH1m1dPUPA2+ibBA9Md/VlhxXT 62TxulyiSpbZ3PXZkYdie/WxuZNbjzu1MPWnWX0bCDGyfdRKsqwDN6AZO9aOVbJk 0p5yeLrszUNNGBw85qiPQPrThkIuALPBJmiLnxJAMjzwf1NX1WN/yFtlzZpBoo+K Q6uyiBaEPBbOZ+n/LT7XO7qzEgivXKTHEJvS4YZRj9iRuA06g6rF8sjrXLN2H+cq GA7ofiIQ6ECt+UljjFtDYWDgzdtb8PvhWFSglFwM+SeRiALmH1x0H2fpMMOgFb13 1dvrYnVoJxsnTlWq1UMDtiFLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd6KOPQ fKM12yVdxDoh/VUkMhv1MB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOFgM1z7f3exCtNQuW5UqxWLVOcvEYp96Me0HCzcB0o1y/Hkz7Sk3d 1X7IzX+F+M8LV3mAUzDouhpsVE40AenkTZguuwDy4wrPTdPcs+9O1/VTU7lyAIAY F8gi//cJOmOimOnw0ugpNl/wHFL8YvlI6yC6xE51og0hXFqwIYmNoberRBuroXLr o98xulfqCLAgQxRzg+AdMWTjc6iAnlY2tLRG6IixhfM3d7SUpIPQXNNP+wHp17N+ 8pClrfBYCj7KBqaVVy+0JZ31nOXfFKAeJSWabgAgIRu+i6NcxONkEnSNmx6xkBWO akIdPZrjA2k/K0VQP6AV3Oll364CnDmI -----END CERTIFICATE-----Generated at Fri May 31 06:49:15 2024 by rpki-client on console-ams.rpki-client.org