$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: qsTeyKE43OKVeM1RwOXpXVpJnl4exszE4NeEEbPtRSI= Subject key identifier: A9:EA:07:97:D8:2B:B0:ED:81:5B:C3:B3:AB:DE:4A:95:1B:65:B7:E0 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 01F4 Signing time: Sun 27 Apr 2025 01:42:21 +0000 Manifest this update: Sun 27 Apr 2025 01:42:20 +0000 Manifest next update: Sun 04 May 2025 01:42:20 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: 6azmVtJRdgkKkxrItN3URN0UYo8IzNBK5Sv6Nj5k94c=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Apr 27 01:42:20 2025 GMT Not After : May 4 01:42:20 2025 GMT Subject: CN=680d8b7d-94a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8d:1a:c7:ac:21:1e:b0:53:0f:91:72:f4:fe: 81:74:63:c9:4e:7c:b7:00:2d:11:18:5b:2b:72:68: 5e:86:82:34:29:d9:7d:3d:b1:82:3e:f5:51:e9:2b: c9:62:dc:7d:16:f3:1c:c3:16:e1:6c:f1:82:b4:cb: 87:0f:cb:eb:4e:58:2f:00:48:2c:31:23:5f:da:2b: 36:8d:0b:b6:3f:46:b7:1d:a8:56:b5:86:06:7b:f2: 12:5e:d5:9d:2c:03:12:a1:1c:7a:81:70:d1:33:7b: 32:59:b4:97:ef:45:76:ec:a7:21:b9:07:c5:15:41: 1c:87:f7:2b:e6:12:3a:b5:51:a9:c5:46:5d:f4:80: 46:7c:89:33:73:d2:32:a7:cb:94:d4:6f:af:d4:2f: 20:0f:42:47:d3:04:c3:37:f0:9c:23:40:3e:9a:6f: 90:8a:1b:cc:05:59:ad:61:5d:38:4d:f3:35:53:e1: 50:25:6b:a6:ba:ef:fe:70:7f:ba:ef:80:fc:63:1b: 7a:b7:ac:7f:2a:08:28:64:d3:13:51:27:06:41:73: b4:15:17:33:d9:5f:72:e2:33:86:5e:63:93:e8:85: 32:08:e5:68:54:e4:f6:3b:43:ed:c6:b7:f9:2f:e8: ed:e4:b2:3b:9c:8c:25:78:1c:03:39:6a:81:c8:de: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:07:97:D8:2B:B0:ED:81:5B:C3:B3:AB:DE:4A:95:1B:65:B7:E0 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:42:6c:4f:42:59:58:55:95:c3:1d:28:c1:fe:5e:0a:32:06: 88:f6:b4:a7:34:e6:53:35:6d:a7:e3:94:36:9f:85:7b:e6:74: f5:0d:01:c6:20:9d:e8:e2:19:94:4f:0a:20:b3:d8:7d:d5:9d: 55:60:e4:04:42:e7:b4:50:8e:08:a2:16:e2:81:01:b4:60:16: 28:87:c5:80:fd:a8:c7:a0:c9:89:c3:32:d9:04:e9:25:8a:51: d6:5f:5f:87:48:e0:2a:7a:5f:93:1d:3e:c6:39:d4:5c:20:a4: 1f:29:41:06:6c:db:d8:65:28:65:d4:6e:b2:01:e7:74:bf:ff: d1:df:a6:a2:72:d6:bf:48:bb:22:90:05:a0:b8:6a:68:ee:78: 77:5d:6b:2b:0e:d4:c3:e3:09:85:51:96:b4:de:48:31:6a:d5: 56:93:7b:27:14:cb:72:6a:5b:cc:42:3b:ff:10:7d:94:e1:69: 17:d6:80:7a:1e:6e:5e:9d:46:2d:4b:0a:0b:1f:4b:88:75:4b: 0e:41:b9:f4:3b:40:ba:b5:e7:3e:67:5f:4d:13:4e:03:bc:43: 65:ad:e2:97:f7:dd:4b:9a:7a:de:5e:99:91:9d:39:12:45:7a: b9:86:07:1a:a9:fc:79:35:6d:25:87:9c:a1:14:e4:ee:70:67: 67:35:85:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwNDI3MDE0MjIwWhcNMjUwNTA0MDE0MjIwWjAYMRYwFAYD VQQDEw02ODBkOGI3ZC05NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA740ax6whHrBTD5Fy9P6BdGPJTny3AC0RGFsrcmhehoI0Kdl9PbGCPvVR6SvJ Ytx9FvMcwxbhbPGCtMuHD8vrTlgvAEgsMSNf2is2jQu2P0a3HahWtYYGe/ISXtWd LAMSoRx6gXDRM3syWbSX70V27KchuQfFFUEch/cr5hI6tVGpxUZd9IBGfIkzc9Iy p8uU1G+v1C8gD0JH0wTDN/CcI0A+mm+QihvMBVmtYV04TfM1U+FQJWumuu/+cH+6 74D8Yxt6t6x/KggoZNMTUScGQXO0FRcz2V9y4jOGXmOT6IUyCOVoVOT2O0Ptxrf5 L+jt5LI7nIwleBwDOWqByN7L7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnqB5fY K7DtgVvDs6veSpUbZbfgMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHQmxPQllYVZXDHSjB/l4KMgaI9rSnNOZTNW2n45Q2n4V75nT1DQHG IJ3o4hmUTwogs9h91Z1VYOQEQue0UI4IohbigQG0YBYoh8WA/ajHoMmJwzLZBOkl ilHWX1+HSOAqel+THT7GOdRcIKQfKUEGbNvYZShl1G6yAed0v//R36aicta/SLsi kAWguGpo7nh3XWsrDtTD4wmFUZa03kgxatVWk3snFMtyalvMQjv/EH2U4WkX1oB6 Hm5enUYtSwoLH0uIdUsOQbn0O0C6tec+Z19NE04DvENlreKX991LmnreXpmRnTkS RXq5hgcaqfx5NW0lh5yhFOTucGdnNYVy -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:34 2025 by rpki-client on console.sobornost.net