$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft File: agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json) Hash identifier: +5HyWVB+5swK9/wxPaMKhEu5TwPgZlWf9vOBkmE+HQY= Subject key identifier: F4:CC:3B:85:BA:B2:E5:73:46:4E:88:3B:E4:98:CD:70:2F:B1:75:78 Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 Certificate issuer: /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft Manifest number: 066D Signing time: Mon 12 May 2025 23:20:20 +0000 Manifest this update: Mon 12 May 2025 23:20:20 +0000 Manifest next update: Mon 19 May 2025 23:20:20 +0000 Files and hashes: 1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: uyMejKdmdwn4wjuSQhbj3RSSq3ISEh/T89TDxeKZDHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Validity Not Before: May 12 23:20:20 2025 GMT Not After : May 19 23:20:20 2025 GMT Subject: CN=68228234-84c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:11:3b:41:fb:44:71:4a:9b:d3:db:50:3e: be:ef:28:66:4a:89:2e:30:3a:c1:18:c1:db:bb:dc: 99:d6:7b:06:83:35:8b:6a:3e:2a:18:bc:ea:ed:af: 6d:1d:3d:62:d0:13:ba:74:66:21:18:b2:fa:bc:bc: b3:4d:a1:e2:2f:c8:87:e2:9d:a3:58:f0:60:4d:9c: d6:25:c0:7a:94:06:90:f6:a3:57:db:18:bd:b2:69: c8:94:8c:cf:35:70:5c:b3:22:d4:41:61:b0:c0:4c: 1e:e0:c8:3a:ac:f1:38:3f:fd:ab:a6:e0:e3:8a:56: 32:7f:10:bc:74:ec:c8:56:58:11:e5:c6:2e:30:ad: cc:10:db:df:ce:76:5c:1e:24:f3:cc:22:58:aa:c6: 47:60:07:28:1d:7f:e5:08:d1:21:7d:fa:e0:ef:a8: 9d:e1:62:1b:5d:3f:c6:ed:46:78:bb:c5:29:20:c3: b0:45:ad:27:fb:7c:55:f0:ec:e5:9a:3b:fd:e9:a0: c0:f6:ca:67:80:43:a9:26:3e:c1:de:d1:67:5d:5e: b3:78:f5:05:ad:20:d9:2b:67:06:91:16:95:20:63: a0:38:e3:ec:98:68:a2:dc:7d:c0:aa:ac:60:02:6b: 9d:ec:d1:d9:0f:c2:b8:f1:9b:a6:b4:cc:0d:d9:a6: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CC:3B:85:BA:B2:E5:73:46:4E:88:3B:E4:98:CD:70:2F:B1:75:78 X509v3 Authority Key Identifier: keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:78:9f:7a:b1:8f:31:8b:d5:66:89:df:aa:3d:4b:43:56:1c: e6:2c:ec:66:cc:b0:2b:eb:da:3b:3f:ab:31:b4:d9:71:9a:f2: e7:a4:55:e9:83:53:5b:40:0f:4e:ee:2d:4d:e5:ad:2e:80:1c: df:a8:ae:31:9e:58:5d:ed:45:5c:70:7d:95:f0:e3:07:0f:39: 25:24:90:3e:59:8e:ea:7f:58:55:e4:48:3c:59:82:73:39:67: e0:44:a7:f2:19:50:a6:fa:6a:fc:63:a0:27:6b:ff:22:70:4d: 8d:3e:cb:4b:d6:0d:a3:26:3f:7f:34:2c:24:69:08:54:d7:10: 01:08:b9:02:a7:1e:0c:48:d6:f9:2c:70:64:c7:3c:d6:25:0a: b3:91:d7:f3:27:cd:aa:7f:18:28:4f:4d:e0:74:a5:f9:d1:ad: 83:c9:64:23:bd:8e:3e:ba:5d:5a:64:43:a7:10:60:9c:fe:83: 88:dd:1a:84:98:61:83:38:1b:15:73:54:c4:1d:5b:40:7c:7c: 36:47:6c:11:04:28:94:55:04:96:c4:6e:4c:7f:78:6f:e1:03: 14:40:87:ad:cb:95:d7:e4:e3:96:cb:fa:9e:04:18:e6:05:aa: c4:2c:46:c0:59:64:a9:ed:30:59:81:24:1b:b7:a8:54:45:da: d3:5b:52:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw RTJEOUU4NjcwHhcNMjUwNTEyMjMyMDIwWhcNMjUwNTE5MjMyMDIwWjAYMRYwFAYD VQQDEw02ODIyODIzNC04NGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOcRO0H7RHFKm9PbUD6+7yhmSokuMDrBGMHbu9yZ1nsGgzWLaj4qGLzq7a9t HT1i0BO6dGYhGLL6vLyzTaHiL8iH4p2jWPBgTZzWJcB6lAaQ9qNX2xi9smnIlIzP NXBcsyLUQWGwwEwe4Mg6rPE4P/2rpuDjilYyfxC8dOzIVlgR5cYuMK3MENvfznZc HiTzzCJYqsZHYAcoHX/lCNEhffrg76id4WIbXT/G7UZ4u8UpIMOwRa0n+3xV8Ozl mjv96aDA9spngEOpJj7B3tFnXV6zePUFrSDZK2cGkRaVIGOgOOPsmGii3H3Aqqxg Amud7NHZD8K48ZumtMwN2aZEGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTMO4W6 suVzRk6IO+SYzXAvsXV4MB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJeJ96sY8xi9Vmid+qPUtDVhzmLOxmzLAr69o7P6sxtNlxmvLnpFXp g1NbQA9O7i1N5a0ugBzfqK4xnlhd7UVccH2V8OMHDzklJJA+WY7qf1hV5Eg8WYJz OWfgRKfyGVCm+mr8Y6Ana/8icE2NPstL1g2jJj9/NCwkaQhU1xABCLkCpx4MSNb5 LHBkxzzWJQqzkdfzJ82qfxgoT03gdKX50a2DyWQjvY4+ul1aZEOnEGCc/oOI3RqE mGGDOBsVc1TEHVtAfHw2R2wRBCiUVQSWxG5Mf3hv4QMUQIety5XX5OOWy/qeBBjm BarELEbAWWSp7TBZgSQbt6hURdrTW1KP -----END CERTIFICATE-----Generated at Tue May 13 20:50:35 2025 by rpki-client