$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft File: agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json) Hash identifier: xhDLZpaE4cQFwORlW6UJMRI4HOS4dJ2wvtaxhug8PXM= Subject key identifier: 11:44:77:C5:A2:37:FC:4F:1B:F5:D6:DA:E4:26:4F:DD:8C:06:91:C7 Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE Certificate issuer: /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft Manifest number: 95 Signing time: Sat 23 Aug 2025 06:40:55 +0000 Manifest this update: Sat 23 Aug 2025 06:40:54 +0000 Manifest next update: Sat 30 Aug 2025 06:40:54 +0000 Files and hashes: 1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: CBNVekW/Z92lDv0CbkkM/glKIRXlamGD1ZS6L6wl0BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE Validity Not Before: Aug 23 06:40:54 2025 GMT Not After : Aug 30 06:40:54 2025 GMT Subject: CN=68a96277-b7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:9f:95:4f:40:d4:3f:9f:50:e6:4c:74:13: 1c:68:38:79:c8:8e:c4:bd:78:e8:d1:ea:aa:d9:a5: 15:a4:3b:23:30:7e:5c:ed:00:d8:13:f1:83:5f:83: e2:d1:4e:2a:f9:fa:d3:7b:ab:76:69:34:be:75:02: a9:28:fe:bd:4f:d4:c4:57:68:38:65:5e:4e:8c:78: 1b:e3:72:17:30:57:b2:be:21:70:55:5c:fd:13:ac: be:cb:27:e7:05:96:9d:9a:d5:32:de:6b:a5:23:ee: 41:8b:64:7d:cc:57:c5:b4:a9:18:82:c4:4c:60:fa: 3d:8b:27:d7:42:71:b6:e1:af:4b:50:02:24:9a:24: 06:65:8c:b1:5e:04:18:fa:5f:60:51:7f:a9:ef:f4: 1e:84:ce:07:60:b8:e6:a3:7d:92:41:cf:00:c9:87: 5b:10:12:a4:3d:25:40:86:b7:07:3e:5a:13:d9:30: c7:45:43:08:8d:fb:af:27:df:3b:1b:22:7e:c4:6c: c3:52:81:b7:f9:2f:0d:aa:29:a0:b1:68:71:ba:37: 2e:de:b7:59:f6:6a:e6:89:73:4d:68:20:91:cd:24: 42:cf:f5:68:9d:cd:1b:8e:67:58:dc:0b:6d:ce:c7: cf:e8:49:64:a9:64:d3:5a:28:59:f0:a2:5a:d2:67: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:44:77:C5:A2:37:FC:4F:1B:F5:D6:DA:E4:26:4F:DD:8C:06:91:C7 X509v3 Authority Key Identifier: keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:71:d3:f6:02:8c:56:e7:10:67:7b:88:70:e4:26:39:3e: cb:31:66:b9:c8:9a:d0:5a:85:5f:a8:1b:54:c3:cc:1c:23:7b: bf:9c:26:38:3f:4d:f6:00:97:dd:7f:68:f1:fa:23:5d:77:ce: b8:05:4b:7d:90:aa:67:c3:81:b0:25:53:98:20:ba:b7:d9:7b: 03:5c:3f:a6:91:b1:4d:c5:e5:71:4b:f7:70:9b:65:87:f2:81: ad:cb:de:dd:9c:cc:4b:d8:f7:98:a9:42:b4:59:d1:fd:8d:c7: 8e:d9:1e:7d:ce:70:7c:9d:78:9b:a3:47:59:ae:3f:14:ac:42: c5:36:56:23:c0:d9:e0:52:fc:b3:ff:31:5a:69:12:36:c1:7d: bd:c3:32:60:5f:e1:42:c1:5e:63:94:21:ae:1d:82:be:be:f1: 99:19:5b:b2:83:50:c2:fb:f7:d0:8b:03:c1:38:b3:75:3e:1e: 35:0c:03:ea:43:15:77:32:07:32:86:f7:af:8b:49:eb:8b:59: 30:fe:40:be:2b:28:3a:fd:99:42:8b:f9:8c:58:1a:84:c6:c3: 27:38:aa:dd:6d:09:d4:b5:fd:31:f9:38:13:c2:b9:8f:3a:e3: ed:c8:f9:13:79:54:ff:26:23:0a:cb:63:c6:f9:e0:5f:04:81: ed:3f:fa:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MUExMTAvBgNVBAUTKDZBMDRFQjM0QTNERkYwNjVGRDBFRjMxMkUyQ0UzODNG QUI1MDI0REUwHhcNMjUwODIzMDY0MDU0WhcNMjUwODMwMDY0MDU0WjAYMRYwFAYD VQQDEw02OGE5NjI3Ny1iN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9WaflU9A1D+fUOZMdBMcaDh5yI7EvXjo0eqq2aUVpDsjMH5c7QDYE/GDX4Pi 0U4q+frTe6t2aTS+dQKpKP69T9TEV2g4ZV5OjHgb43IXMFeyviFwVVz9E6y+yyfn BZadmtUy3mulI+5Bi2R9zFfFtKkYgsRMYPo9iyfXQnG24a9LUAIkmiQGZYyxXgQY +l9gUX+p7/QehM4HYLjmo32SQc8AyYdbEBKkPSVAhrcHPloT2TDHRUMIjfuvJ987 GyJ+xGzDUoG3+S8NqimgsWhxujcu3rdZ9mrmiXNNaCCRzSRCz/Vonc0bjmdY3Att zsfP6ElkqWTTWihZ8KJa0me/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFEd8Wi N/xPG/XW2uQmT92MBpHHMB8GA1UdIwQYMBaAFGoE6zSj3/Bl/Q7zEuLOOD+rUCTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkxQS80Nzg5MzE3OEEx OUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQZjhHWDlEdk1TNHM0NFA2dFFK TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnVHJOS1BmOEdYOUR2TVM0czQ0UDZ0UUpONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkxQS80Nzg5MzE3OEExOUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQZjhH WDlEdk1TNHM0NFA2dFFKTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6XHT9gKMVucQZ3uIcOQmOT7LMWa5yJrQWoVfqBtUw8wcI3u/nCY4 P032AJfdf2jx+iNdd864BUt9kKpnw4GwJVOYILq32XsDXD+mkbFNxeVxS/dwm2WH 8oGty97dnMxL2PeYqUK0WdH9jceO2R59znB8nXibo0dZrj8UrELFNlYjwNngUvyz /zFaaRI2wX29wzJgX+FCwV5jlCGuHYK+vvGZGVuyg1DC+/fQiwPBOLN1Ph41DAPq QxV3Mgcyhvevi0nri1kw/kC+Kyg6/ZlCi/mMWBqExsMnOKrdbQnUtf0x+TgTwrmP OuPtyPkTeVT/JiMKy2PG+eBfBIHtP/pA -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:49 2025 by rpki-client