$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: /6BD6A7dvKd6k93Ct7fiGg4Uhn/RQNhJxImJiCtHdiw= Subject key identifier: F7:CD:A5:01:9E:7F:FF:86:1D:22:A9:62:FD:1F:4A:11:A0:BE:D9:25 Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0B40 Signing time: Mon 12 May 2025 18:59:21 +0000 Manifest this update: Mon 12 May 2025 18:59:21 +0000 Manifest next update: Mon 19 May 2025 18:59:21 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: 0T7qaGYyf+JeDycGT6dv+QGfzeLft1NIpaRBz51GXHU=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: KCGgayyIaV9bw3+jN02UdfN4476+RHEdK89wpH03TIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: May 12 18:59:21 2025 GMT Not After : May 19 18:59:21 2025 GMT Subject: CN=68224509-2680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:37:23:49:97:80:79:c9:2f:51:14:d7:f6: d4:fe:49:9a:13:0a:56:34:21:69:e3:35:f2:62:cc: 8a:77:0c:d4:89:05:74:b2:a3:e4:77:80:25:7e:36: f3:35:97:68:6c:89:43:1c:e9:6f:e4:1f:cd:5a:1e: 6c:5d:83:f2:5b:65:59:6c:a5:47:e3:13:4f:52:e8: 6f:27:96:da:3a:7b:65:df:c8:d0:d7:36:cb:c8:93: 27:d3:06:2d:38:4d:7b:8c:6b:0a:76:a7:a6:b6:6a: 11:e0:e0:13:ec:e6:8c:b7:96:c6:e0:c5:3d:31:3d: 9a:58:4b:d3:24:c9:d2:30:0b:96:8a:39:14:ac:37: 47:3c:c2:3a:94:08:e8:f1:77:fd:c7:91:77:47:4e: 00:17:e8:19:e2:84:d0:eb:bc:59:d7:5a:d1:ee:4e: 46:b4:ed:2e:40:f4:71:cd:f2:69:18:49:31:09:92: fb:e4:c4:28:ce:da:29:0a:e7:1e:b0:f0:17:18:a3: 68:f5:17:c0:2c:50:52:3a:ee:c7:25:35:2f:3a:07: 6e:29:78:62:b1:54:e7:b4:68:36:13:35:77:f5:29: 9e:32:55:65:c2:63:18:07:9a:d7:94:ff:e2:0b:13: 80:5a:cc:66:5c:0a:5e:1d:93:ee:6e:53:52:cf:5d: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:A5:01:9E:7F:FF:86:1D:22:A9:62:FD:1F:4A:11:A0:BE:D9:25 X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:dd:85:6c:f7:a1:5a:b8:9a:39:27:c2:0b:60:b2:e1:ff:13: 35:bc:69:bd:e2:ba:27:a6:22:0a:30:e9:7e:cf:bd:17:f0:2b: 5f:76:44:e4:79:96:b5:c6:c7:da:23:37:2d:ad:3c:e6:1c:3d: bf:42:f7:16:f6:93:62:7a:2a:d7:25:1d:e0:cf:ef:97:5e:eb: 3d:53:9c:46:90:af:b1:55:d4:9a:2c:09:40:a8:09:f0:94:09: 82:b9:d3:ac:1f:5d:f4:27:ad:d3:b1:cf:25:68:d7:5f:1f:80: 27:9d:e1:47:6a:d8:ac:5f:89:c9:1f:63:ff:c2:e6:2d:f9:02: 02:0b:ef:0f:86:8f:4d:18:33:f4:50:a4:68:1a:36:3b:12:67: be:eb:ec:fc:aa:66:2e:13:12:31:11:04:1c:66:2d:45:20:a9: c7:f5:8f:2a:42:e8:32:ef:d4:f9:ca:2e:7d:3f:d2:0b:90:08: 18:4c:fe:d5:3e:07:69:2b:93:bf:b3:f7:38:c2:23:10:8c:d2: a3:0e:23:ff:5d:28:23:dd:b2:3f:04:4e:6c:47:62:1d:ca:37: c9:db:e9:9a:55:af:c9:7e:c6:07:d5:eb:d8:92:92:18:bf:00: 6f:83:55:ce:19:d9:99:7d:51:27:a3:d6:79:ff:ab:6d:e7:c9: e3:36:ed:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjUwNTEyMTg1OTIxWhcNMjUwNTE5MTg1OTIxWjAYMRYwFAYD VQQDEw02ODIyNDUwOS0yNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D43I0mXgHnJL1EU1/bU/kmaEwpWNCFp4zXyYsyKdwzUiQV0sqPkd4Alfjbz NZdobIlDHOlv5B/NWh5sXYPyW2VZbKVH4xNPUuhvJ5baOntl38jQ1zbLyJMn0wYt OE17jGsKdqemtmoR4OAT7OaMt5bG4MU9MT2aWEvTJMnSMAuWijkUrDdHPMI6lAjo 8Xf9x5F3R04AF+gZ4oTQ67xZ11rR7k5GtO0uQPRxzfJpGEkxCZL75MQoztopCuce sPAXGKNo9RfALFBSOu7HJTUvOgduKXhisVTntGg2EzV39SmeMlVlwmMYB5rXlP/i CxOAWsxmXApeHZPublNSz10rMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfNpQGe f/+GHSKpYv0fShGgvtklMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn3YVs96FauJo5J8ILYLLh/xM1vGm94ronpiIKMOl+z70X8CtfdkTk eZa1xsfaIzctrTzmHD2/QvcW9pNieirXJR3gz++XXus9U5xGkK+xVdSaLAlAqAnw lAmCudOsH130J63Tsc8laNdfH4AnneFHatisX4nJH2P/wuYt+QICC+8Pho9NGDP0 UKRoGjY7Eme+6+z8qmYuExIxEQQcZi1FIKnH9Y8qQugy79T5yi59P9ILkAgYTP7V PgdpK5O/s/c4wiMQjNKjDiP/XSgj3bI/BE5sR2IdyjfJ2+maVa/JfsYH1evYkpIY vwBvg1XOGdmZfVEno9Z5/6tt58njNu18 -----END CERTIFICATE-----Generated at Tue May 13 11:38:28 2025 by rpki-client