$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: LiPfGDvzxT00z0sqbfeGV5jnUnml+kntWh+JE+LDRAQ= Subject key identifier: 3C:B3:9C:F5:34:42:C1:C1:F6:94:F7:06:65:46:C4:3A:CA:C9:F5:E1 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 01FD Signing time: Thu 15 May 2025 02:03:15 +0000 Manifest this update: Thu 15 May 2025 02:03:14 +0000 Manifest next update: Thu 22 May 2025 02:03:14 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: V6QqRsw/i36uSJk86vh9iNC4qC3hKHTLS1XOy1zThR0=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: May 15 02:03:14 2025 GMT Not After : May 22 02:03:14 2025 GMT Subject: CN=68254b63-a238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:30:43:cd:97:1f:df:5d:38:69:b5:0e:d5:50: 11:2b:6d:9c:43:d2:63:31:ea:68:5c:a0:b4:ed:e1: 9a:8f:0b:97:6b:f3:d2:bf:39:aa:78:dc:14:67:e0: 1b:e5:7c:c9:da:55:cf:51:4d:49:5c:07:88:b9:ac: a5:95:ae:79:cc:01:a6:f9:fe:2b:69:df:13:58:14: eb:00:92:7a:82:80:db:2f:11:1d:61:a2:20:05:f5: da:c2:91:42:8d:35:77:a6:57:41:3b:6d:6a:24:2d: a7:e1:22:c2:34:80:c6:b9:24:7a:85:20:59:22:c3: 1c:24:ce:77:48:e5:47:41:6c:a2:3f:31:74:55:6b: cb:fb:af:e7:4c:87:2c:40:ea:ae:13:a9:d0:ea:6a: 3e:b8:b0:be:ad:39:17:61:e8:7e:d7:15:4a:a0:ec: 2b:ba:ea:e5:ef:91:e4:a9:c3:89:ae:bb:0a:ef:b4: 1f:dd:92:67:95:df:d4:68:21:15:77:83:8e:e3:86: 35:c3:8b:f7:1b:7b:9d:46:0b:34:12:6a:d5:98:ac: bd:33:6a:9c:54:7c:6d:5e:ea:26:a2:21:19:37:ba: 0f:63:5f:91:5b:77:b9:d4:ae:e1:a7:dc:94:52:7d: 7e:97:64:64:c5:b0:d7:54:35:46:88:38:10:f9:c9: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:9C:F5:34:42:C1:C1:F6:94:F7:06:65:46:C4:3A:CA:C9:F5:E1 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ca:8a:c9:68:29:8c:d1:ec:91:d9:a1:91:8d:d0:25:95:8d: dd:a5:67:a5:5a:3c:c3:07:ed:b3:86:c0:10:80:99:ec:a3:f3: 86:31:e0:23:24:d0:54:45:ed:19:c6:7f:2e:f8:ea:38:2d:58: d2:9d:e3:a2:47:c1:cb:d9:d7:47:ca:b7:b5:ec:16:48:81:f7: c4:c0:a6:eb:a1:57:0d:f9:96:bd:10:cd:15:57:31:6b:56:2b: 3e:a3:8e:de:50:c7:15:1c:a7:12:7c:a4:8f:62:f8:26:12:b3: b4:46:4c:6d:2e:a2:9b:1c:21:06:6b:19:ae:38:3b:95:3b:6f: 59:dc:e7:68:52:b2:a8:5e:25:bb:ab:d6:1c:41:77:cf:50:bd: 54:ed:ca:3f:73:9c:8a:25:d5:a0:fd:a9:5f:ae:58:03:3e:67: 28:62:62:d7:4e:d6:65:53:8d:77:bc:56:9b:0a:b8:99:f5:92: cc:b7:e9:ed:c3:c0:75:74:75:51:03:40:b8:d8:53:b5:e2:77: 7e:9f:93:c0:f9:05:8b:09:df:a5:1f:e1:8b:13:19:5d:23:61: fd:de:26:28:51:8f:75:c6:7d:af:61:ea:9b:e7:5e:a6:eb:e5: 88:8c:03:0a:96:77:93:53:68:ef:66:95:fb:16:28:c6:d8:41: 0e:69:58:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwNTE1MDIwMzE0WhcNMjUwNTIyMDIwMzE0WjAYMRYwFAYD VQQDEw02ODI1NGI2My1hMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TBDzZcf3104abUO1VARK22cQ9JjMepoXKC07eGajwuXa/PSvzmqeNwUZ+Ab 5XzJ2lXPUU1JXAeIuaylla55zAGm+f4rad8TWBTrAJJ6goDbLxEdYaIgBfXawpFC jTV3pldBO21qJC2n4SLCNIDGuSR6hSBZIsMcJM53SOVHQWyiPzF0VWvL+6/nTIcs QOquE6nQ6mo+uLC+rTkXYeh+1xVKoOwruurl75HkqcOJrrsK77Qf3ZJnld/UaCEV d4OO44Y1w4v3G3udRgs0EmrVmKy9M2qcVHxtXuomoiEZN7oPY1+RW3e51K7hp9yU Un1+l2RkxbDXVDVGiDgQ+cnM3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyznPU0 QsHB9pT3BmVGxDrKyfXhMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAyorJaCmM0eyR2aGRjdAllY3dpWelWjzDB+2zhsAQgJnso/OGMeAj JNBURe0Zxn8u+Oo4LVjSneOiR8HL2ddHyre17BZIgffEwKbroVcN+Za9EM0VVzFr Vis+o47eUMcVHKcSfKSPYvgmErO0RkxtLqKbHCEGaxmuODuVO29Z3OdoUrKoXiW7 q9YcQXfPUL1U7co/c5yKJdWg/alfrlgDPmcoYmLXTtZlU413vFabCriZ9ZLMt+nt w8B1dHVRA0C42FO14nd+n5PA+QWLCd+lH+GLExldI2H93iYoUY91xn2vYeqb516m 6+WIjAMKlneTU2jvZpX7FijG2EEOaViI -----END CERTIFICATE-----Generated at Fri May 16 03:15:51 2025 by rpki-client