$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft File: agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json) Hash identifier: v4JkvnllLu23Hdbt2P+HYH9d8nMIK3Ttke6ZaCaMuQQ= Subject key identifier: 5A:AC:B0:D9:00:91:2F:72:53:82:8E:F7:90:C1:44:EC:DD:02:76:84 Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 Certificate issuer: /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft Manifest number: 04E0 Signing time: Sun 05 May 2024 01:55:01 +0000 Manifest this update: Sun 05 May 2024 01:55:00 +0000 Manifest next update: Sun 12 May 2024 01:55:00 +0000 Files and hashes: 1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: 4PXnUhUZ1++92zNS4kFaddZhArZ3VHCznZDr9dIXRjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Validity Not Before: May 5 01:55:00 2024 GMT Not After : May 12 01:55:00 2024 GMT Subject: CN=6636e6f4-4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0c:c9:ef:bc:19:bb:b9:ed:c7:43:76:31:95: 4b:e3:18:d0:a3:a5:67:60:70:c1:43:71:b3:97:e5: 42:d9:46:1e:ac:6c:09:8d:eb:4c:59:56:d6:0a:25: df:44:f5:91:e9:cc:23:ea:d8:24:79:36:64:79:d5: 95:ec:dd:1a:88:6c:8e:4c:38:b8:3d:7d:ec:4c:e0: 6f:34:d1:2e:53:e4:07:2f:fc:9d:b8:3c:74:a0:04: ca:ca:d0:a4:05:b3:77:e5:1b:69:39:4e:c3:a2:55: de:ee:8c:90:7b:98:df:aa:8c:94:33:35:78:f3:ef: 51:bf:50:86:b9:32:e8:cc:17:2b:1e:c1:6d:1c:a8: f6:89:bd:97:92:cc:ae:c3:84:cb:84:61:87:37:55: b1:22:e3:ee:83:27:d6:5d:82:ed:75:4a:31:9f:e8: 1b:c7:3c:70:67:96:ee:54:b6:99:02:97:bb:d5:d4: ea:ba:e0:38:37:43:e6:68:0f:3b:fa:46:3b:e1:0e: a5:1d:fe:d2:0c:7f:ae:0f:73:ba:a9:0d:74:99:c8: 3b:5c:ef:0c:e8:c5:15:ff:95:26:0f:7b:ad:39:5c: 3b:31:9b:a9:de:f7:bf:b6:c8:c4:5f:81:e8:bf:26: bb:b6:08:d9:6d:6e:80:55:42:c9:fe:be:b2:fa:7c: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:B0:D9:00:91:2F:72:53:82:8E:F7:90:C1:44:EC:DD:02:76:84 X509v3 Authority Key Identifier: keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2d:a1:84:03:48:74:06:fd:49:0e:0d:32:45:b0:a4:d1:d3: b2:22:3e:4e:00:4d:7d:ec:9a:16:c7:f4:86:42:2e:88:27:09: 30:5e:b6:5d:cf:87:38:23:e9:cb:92:b1:e9:0e:8a:d0:e1:e4: 35:83:a7:10:fb:e4:07:ce:8a:ce:f8:8a:ae:78:91:e7:2b:b1: 7d:87:f0:0d:f3:61:c2:1d:fc:3b:82:a1:9c:ad:1b:2c:07:0c: d1:3a:72:f2:24:5a:82:6c:c4:84:09:fe:5f:61:5d:45:97:79: 08:b0:f9:e8:18:55:fc:d8:1d:42:ee:69:48:c9:8a:c8:f0:e5: 4c:0d:ae:0c:1c:eb:41:73:47:15:72:4f:56:8f:64:dc:39:ea: 42:99:30:d5:5a:7b:ab:7c:7a:f4:4b:80:89:0c:23:31:b3:d9: bb:bd:17:35:8b:4e:c8:71:94:ce:a5:67:82:63:9a:82:22:68: 4c:9e:f6:fc:10:b4:1b:96:df:46:ea:9f:4a:b1:c4:a3:be:21: 58:53:fb:78:5b:9e:c0:56:81:47:23:61:bf:bc:d6:a8:65:56: d2:cd:0c:37:ec:2b:1b:8c:e4:50:5c:70:25:6d:6b:28:a2:91: 07:1c:a0:d2:48:d9:b9:ad:c0:7c:a5:40:28:cb:a9:78:f6:74: 30:b2:37:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw RTJEOUU4NjcwHhcNMjQwNTA1MDE1NTAwWhcNMjQwNTEyMDE1NTAwWjAYMRYwFAYD VQQDEw02NjM2ZTZmNC00ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gzJ77wZu7ntx0N2MZVL4xjQo6VnYHDBQ3Gzl+VC2UYerGwJjetMWVbWCiXf RPWR6cwj6tgkeTZkedWV7N0aiGyOTDi4PX3sTOBvNNEuU+QHL/yduDx0oATKytCk BbN35RtpOU7DolXe7oyQe5jfqoyUMzV48+9Rv1CGuTLozBcrHsFtHKj2ib2Xksyu w4TLhGGHN1WxIuPugyfWXYLtdUoxn+gbxzxwZ5buVLaZApe71dTquuA4N0PmaA87 +kY74Q6lHf7SDH+uD3O6qQ10mcg7XO8M6MUV/5UmD3utOVw7MZup3ve/tsjEX4Ho vya7tgjZbW6AVULJ/r6y+nw+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqssNkA kS9yU4KO95DBROzdAnaEMB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0LaGEA0h0Bv1JDg0yRbCk0dOyIj5OAE197JoWx/SGQi6IJwkwXrZd z4c4I+nLkrHpDorQ4eQ1g6cQ++QHzorO+IqueJHnK7F9h/AN82HCHfw7gqGcrRss BwzROnLyJFqCbMSECf5fYV1Fl3kIsPnoGFX82B1C7mlIyYrI8OVMDa4MHOtBc0cV ck9Wj2TcOepCmTDVWnurfHr0S4CJDCMxs9m7vRc1i07IcZTOpWeCY5qCImhMnvb8 ELQblt9G6p9KscSjviFYU/t4W57AVoFHI2G/vNaoZVbSzQw37CsbjORQXHAlbWso opEHHKDSSNm5rcB8pUAoy6l49nQwsje4 -----END CERTIFICATE-----Generated at Sun May 5 03:09:53 2024 by rpki-client on console-ams.rpki-client.org