$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: JD8CAXxuu1i14AtVgTwIfjqxqEG4TMUryrm/tcqi88w= Subject key identifier: D5:10:8B:DE:4F:0A:81:53:76:41:6C:BF:F6:70:3A:EC:64:C5:8C:70 Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0A7F Signing time: Tue 30 Apr 2024 20:34:27 +0000 Manifest this update: Tue 30 Apr 2024 20:34:27 +0000 Manifest next update: Tue 07 May 2024 20:34:27 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: Nr002ki/QrhjSD/gLX6RsIWkzKTfr5yhLTVroVTW3Ic=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: 4WLk9HTsQgQSzms8cSy1J3xNrPc13F9kW/ty5qQRR4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: Apr 30 20:34:27 2024 GMT Not After : May 7 20:34:27 2024 GMT Subject: CN=663155d3-646a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:9e:61:1e:79:48:5f:81:63:cf:77:d1:5a: f3:68:76:f1:7f:4a:6d:1b:a6:ef:0c:0e:26:94:c6: 8d:08:f4:3e:82:44:ad:5d:26:8a:41:56:5e:25:15: 76:62:d5:de:2f:e3:46:53:cf:7f:b3:8c:3e:e1:28: 28:da:49:25:4f:c2:63:81:39:79:97:02:b0:bd:62: 3c:b3:ab:c3:f4:af:7c:9e:75:06:87:5d:aa:cc:0c: 3d:7b:aa:16:be:38:37:96:16:49:2c:d2:b9:5a:bd: 5a:11:f5:8b:93:53:ff:12:17:43:e1:08:b2:33:ed: 88:b7:24:cc:1b:a3:bd:09:84:bf:d2:33:a2:ee:89: d8:ba:16:d5:8e:53:4f:9c:81:d6:af:49:a1:68:a5: e1:7f:41:b7:b8:20:a2:06:0c:87:08:d6:ae:3d:b7: ad:50:66:a8:df:76:43:a0:ce:4e:75:9e:b9:ad:6a: 4f:b8:67:c3:41:98:6a:1b:66:bb:fb:63:d1:cb:b6: 0b:26:39:52:36:5b:7f:0a:47:fe:fa:2e:49:61:73: 96:08:22:9d:1c:18:30:3c:cf:1b:99:ab:e7:8f:8f: d4:21:32:c8:88:dd:c8:e3:ba:3f:7b:de:e9:09:ae: 4c:ea:41:cc:f9:f0:27:d1:20:23:4d:70:ce:92:d7: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:10:8B:DE:4F:0A:81:53:76:41:6C:BF:F6:70:3A:EC:64:C5:8C:70 X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f0:6e:e9:a2:bb:87:a9:cf:8d:51:8d:d9:8b:d1:73:e0:4c: 72:4e:cb:27:ec:23:19:47:8f:31:86:95:aa:ca:4c:d7:85:1a: 9d:15:6d:52:48:3e:39:b1:ac:03:a4:0d:12:b1:de:6c:96:d6: 71:c2:15:8c:05:c3:44:8c:4c:46:07:c6:ca:3c:04:b7:23:a9: ec:52:66:af:7c:c3:b3:cb:66:0c:48:8a:61:39:b1:20:8b:6e: 89:bd:82:9f:e5:58:36:91:dd:3e:65:72:88:fa:de:28:ab:76: c1:80:f4:fd:41:2e:31:94:e9:a7:89:01:0f:30:7c:f4:61:28: 6f:0c:69:b5:8c:17:33:45:1b:95:46:78:2d:f8:e5:00:a1:c6: a2:29:90:78:99:f7:10:fc:86:c2:35:89:03:d7:86:7b:90:16: e0:7d:dc:25:c5:fc:e6:59:41:14:4e:b1:0a:eb:ee:ab:9d:7a: c4:26:ae:67:0b:89:33:78:ac:53:05:50:38:b8:82:ce:b4:38: 56:96:1f:a2:ed:8e:61:58:5f:d8:86:20:68:b4:6e:75:14:38: 91:e7:f7:64:69:82:79:dc:3c:74:d6:a8:06:17:76:e4:a4:a7: a3:27:70:65:58:5b:e3:7b:b7:20:8e:05:47:a2:27:3b:bc:b2: 76:64:4c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjQwNDMwMjAzNDI3WhcNMjQwNTA3MjAzNDI3WjAYMRYwFAYD VQQDEw02NjMxNTVkMy02NDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XyeYR55SF+BY8930VrzaHbxf0ptG6bvDA4mlMaNCPQ+gkStXSaKQVZeJRV2 YtXeL+NGU89/s4w+4Sgo2kklT8JjgTl5lwKwvWI8s6vD9K98nnUGh12qzAw9e6oW vjg3lhZJLNK5Wr1aEfWLk1P/EhdD4QiyM+2ItyTMG6O9CYS/0jOi7onYuhbVjlNP nIHWr0mhaKXhf0G3uCCiBgyHCNauPbetUGao33ZDoM5OdZ65rWpPuGfDQZhqG2a7 +2PRy7YLJjlSNlt/Ckf++i5JYXOWCCKdHBgwPM8bmavnj4/UITLIiN3I47o/e97p Ca5M6kHM+fAn0SAjTXDOkteZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUQi95P CoFTdkFsv/ZwOuxkxYxwMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB58G7poruHqc+NUY3Zi9Fz4ExyTssn7CMZR48xhpWqykzXhRqdFW1S SD45sawDpA0Ssd5sltZxwhWMBcNEjExGB8bKPAS3I6nsUmavfMOzy2YMSIphObEg i26JvYKf5Vg2kd0+ZXKI+t4oq3bBgPT9QS4xlOmniQEPMHz0YShvDGm1jBczRRuV Rngt+OUAocaiKZB4mfcQ/IbCNYkD14Z7kBbgfdwlxfzmWUEUTrEK6+6rnXrEJq5n C4kzeKxTBVA4uILOtDhWlh+i7Y5hWF/YhiBotG51FDiR5/dkaYJ53Dx01qgGF3bk pKejJ3BlWFvje7cgjgVHoic7vLJ2ZEwx -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:59 2024 by rpki-client on console-fra.rpki-client.org