$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: frDR7hESro5y/c+CcCeRWKxnhu1NZcbOAAqtzfBjkUA= Subject key identifier: F2:C5:77:54:40:62:A4:B4:81:BA:B6:1A:61:E9:2A:38:1F:20:8B:68 Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0A87 Signing time: Sat 18 May 2024 20:13:45 +0000 Manifest this update: Sat 18 May 2024 20:13:44 +0000 Manifest next update: Sat 25 May 2024 20:13:44 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: yaorl7lbj4qU8YwoRcaxeiMHcLnzJuhgkyVgfTwhjts=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: 4WLk9HTsQgQSzms8cSy1J3xNrPc13F9kW/ty5qQRR4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: May 18 20:13:44 2024 GMT Not After : May 25 20:13:44 2024 GMT Subject: CN=66490bf8-44cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:4f:18:4a:6c:0d:c3:17:a7:be:77:f3:a1: 60:98:45:d3:c3:20:9e:c3:39:41:2c:12:a3:61:44: c0:1c:16:46:e7:0c:2b:68:94:94:3c:47:fe:a5:36: ed:08:62:25:6f:fc:0d:eb:bb:d6:41:30:23:ae:8b: 03:53:0e:4d:78:71:ba:3e:8f:d5:09:8d:93:07:36: dd:c6:bd:f4:80:b3:ea:ff:1b:1a:4a:5a:ef:09:7e: 63:2d:a7:d3:62:8f:7c:89:b5:31:96:ab:db:b7:7a: cd:e3:a6:16:29:56:d0:15:0f:72:d4:33:1c:b8:42: 71:d1:cb:d6:75:bc:45:1a:e9:02:30:8a:4b:01:0a: 4f:9f:7c:09:9f:b0:87:70:fd:64:5e:bc:2c:4a:7b: 9b:97:e1:b1:fd:dd:00:1f:10:36:83:4d:24:21:0d: e2:2b:69:2b:81:03:d4:20:84:e0:d8:d2:79:d0:f0: 8c:5e:4f:c5:7b:d2:63:9e:e5:e0:7e:28:60:d7:83: 4d:f2:1c:5a:07:bf:61:26:d5:95:3b:8d:5a:ce:a8: d6:7c:ce:e2:f7:48:66:c3:31:1b:4d:4a:56:a6:a8: a6:1e:d7:a0:a4:13:43:12:89:f1:7b:a4:83:93:bc: ef:60:24:23:9d:bd:3c:ce:1a:da:3e:af:88:ce:a0: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:77:54:40:62:A4:B4:81:BA:B6:1A:61:E9:2A:38:1F:20:8B:68 X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:aa:18:f2:ca:18:94:41:e4:d4:58:b6:c8:1d:02:f7:25:2f: d3:80:c1:bd:b5:b5:ed:ec:fd:ca:92:1f:23:c1:96:2c:0c:35: 20:3d:df:9d:22:f7:9b:1b:db:e7:27:f5:ff:63:b4:ec:28:0e: ae:1d:fd:b5:78:4a:8c:85:d8:ad:ec:a3:99:75:9a:55:25:2a: 1b:40:91:47:48:b4:30:e0:c6:0c:25:2c:4c:b0:b8:3f:ee:f6: 7f:63:42:f6:de:cc:2c:ea:6e:6c:fd:28:75:fc:a4:8f:c7:5f: e7:bb:c2:de:e1:21:3c:be:9b:a3:4f:17:28:fe:2c:28:f7:30: 7e:bf:9e:1b:d4:ed:3b:d1:94:fa:db:77:39:01:6a:36:dc:fe: 16:43:16:d0:d8:9e:4c:0d:25:61:43:95:99:19:a9:76:3a:c9: e1:47:6c:0c:f2:17:f4:ea:1e:a2:90:6c:8a:3e:18:b6:3a:ee: 60:db:27:9e:99:72:da:a7:72:79:34:d6:94:48:43:90:1e:05: e8:93:57:1d:ac:4e:dd:87:af:a3:9f:3d:0f:e0:31:e4:2b:e4: ff:e5:36:7b:4d:02:c7:ce:c3:15:75:d7:01:24:ef:fc:ee:0f: fa:b5:b3:d0:9f:c7:4e:85:78:a7:43:a3:d2:72:ab:a3:bb:c0: 06:37:c1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjQwNTE4MjAxMzQ0WhcNMjQwNTI1MjAxMzQ0WjAYMRYwFAYD VQQDEw02NjQ5MGJmOC00NGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLVPGEpsDcMXp75386FgmEXTwyCewzlBLBKjYUTAHBZG5wwraJSUPEf+pTbt CGIlb/wN67vWQTAjrosDUw5NeHG6Po/VCY2TBzbdxr30gLPq/xsaSlrvCX5jLafT Yo98ibUxlqvbt3rN46YWKVbQFQ9y1DMcuEJx0cvWdbxFGukCMIpLAQpPn3wJn7CH cP1kXrwsSnubl+Gx/d0AHxA2g00kIQ3iK2krgQPUIITg2NJ50PCMXk/Fe9JjnuXg fihg14NN8hxaB79hJtWVO41azqjWfM7i90hmwzEbTUpWpqimHtegpBNDEonxe6SD k7zvYCQjnb08zhraPq+IzqAoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLFd1RA YqS0gbq2GmHpKjgfIItoMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwqhjyyhiUQeTUWLbIHQL3JS/TgMG9tbXt7P3Kkh8jwZYsDDUgPd+d IvebG9vnJ/X/Y7TsKA6uHf21eEqMhdit7KOZdZpVJSobQJFHSLQw4MYMJSxMsLg/ 7vZ/Y0L23sws6m5s/Sh1/KSPx1/nu8Le4SE8vpujTxco/iwo9zB+v54b1O070ZT6 23c5AWo23P4WQxbQ2J5MDSVhQ5WZGal2OsnhR2wM8hf06h6ikGyKPhi2Ou5g2yee mXLap3J5NNaUSEOQHgXok1cdrE7dh6+jnz0P4DHkK+T/5TZ7TQLHzsMVddcBJO/8 7g/6tbPQn8dOhXinQ6PScquju8AGN8EJ -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org