$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft File: agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json) Hash identifier: gYgAw+YZl38yjcQuF45jnH+WxLihxosQwu+/XphUx+Q= Subject key identifier: C2:6A:A9:15:F8:9C:2B:BB:41:8D:EB:D5:B4:27:CD:04:DB:C0:3D:15 Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 Certificate issuer: /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft Manifest number: 06D6 Signing time: Fri 22 Aug 2025 23:34:49 +0000 Manifest this update: Fri 22 Aug 2025 23:34:49 +0000 Manifest next update: Fri 29 Aug 2025 23:34:49 +0000 Files and hashes: 1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: ORNrd4fq5CPatbi0iRwpcNcc5idbQpYUxpDjq2T9lTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Validity Not Before: Aug 22 23:34:49 2025 GMT Not After : Aug 29 23:34:49 2025 GMT Subject: CN=68a8fe99-0b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:9b:30:b6:be:80:83:fb:9d:1c:4d:36:d1: de:f8:7e:8c:63:2f:1e:41:1e:e2:ec:21:15:38:45: 64:36:d4:57:f8:ff:f2:f0:7b:a0:19:ed:e6:33:e0: 9b:21:62:09:50:ff:4d:f4:23:ba:83:4a:51:c3:6b: c3:17:3b:db:e1:45:9e:24:ea:3a:00:06:fd:5b:f6: e3:87:c1:18:a2:8a:f3:ce:a9:c3:33:ec:9e:3b:a2: 55:78:3c:c3:f2:12:e9:b9:ca:59:dc:07:97:df:cd: 9d:a3:42:1c:cf:8e:78:85:60:22:32:85:50:24:cf: cf:76:16:39:bd:d0:ce:2d:6d:57:87:83:21:5c:b3: ee:3c:94:c7:9b:4d:55:04:3d:d1:af:21:24:fc:0b: 7f:eb:82:af:42:30:ec:ab:bb:3d:b2:42:99:9c:fc: c3:d8:da:5f:76:ae:36:43:6e:60:39:e4:51:cc:7a: 8e:c3:e1:68:02:05:0d:15:9f:03:f5:7b:79:59:1c: c2:c6:b3:97:38:17:2f:4c:de:65:56:ee:b5:96:03: 5a:b1:49:86:5e:a1:5c:7c:ed:e0:84:d6:35:d4:e6: f1:56:3e:30:3d:30:35:d8:46:fb:04:77:be:85:fa: 28:4b:7e:fc:39:05:73:33:40:52:ff:a8:e8:37:c8: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:A9:15:F8:9C:2B:BB:41:8D:EB:D5:B4:27:CD:04:DB:C0:3D:15 X509v3 Authority Key Identifier: keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:05:75:b2:7c:47:44:9e:8d:8d:bb:02:58:cc:ec:cd:fa:a8: 68:9a:1e:fc:17:fa:8c:1e:ee:9d:c0:c9:d4:4e:fe:a3:c7:38: 45:95:da:1f:26:c5:92:71:f5:0a:a5:90:b1:80:76:46:f0:d7: 21:ba:94:ad:42:c4:4f:5f:52:82:35:de:f2:42:2a:de:e7:81: 70:df:3c:7a:3a:38:85:85:db:d1:5b:e9:91:e4:d2:c5:9e:a9: 73:2a:a5:08:91:8e:26:d3:12:78:60:ae:72:54:c0:6c:db:08: 74:3c:e0:38:26:59:0a:0c:61:a0:a4:44:f5:ad:fe:7a:8f:af: 92:0f:9d:32:2a:6b:ed:7f:2b:2f:45:15:35:46:bf:fb:be:82: 38:14:9f:9c:83:63:49:4e:67:30:11:e6:1e:a0:1c:b8:19:2a: 01:03:a3:0e:5b:3f:77:49:97:77:51:eb:22:aa:4e:40:8e:0a: 5c:f8:0b:f8:52:77:3f:ff:e4:fa:53:15:14:7e:c4:f3:02:0e: cc:45:a1:73:ac:fd:d2:39:14:c3:7b:46:34:ec:ff:ff:d9:9a: ba:da:f6:4e:04:39:52:14:69:3f:92:d6:11:88:12:db:87:aa: 40:05:b4:cd:02:31:b7:e2:3a:a2:ba:72:f1:7c:72:8a:e7:ec: 79:59:f2:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw RTJEOUU4NjcwHhcNMjUwODIyMjMzNDQ5WhcNMjUwODI5MjMzNDQ5WjAYMRYwFAYD VQQDEw02OGE4ZmU5OS0wYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoKbMLa+gIP7nRxNNtHe+H6MYy8eQR7i7CEVOEVkNtRX+P/y8HugGe3mM+Cb IWIJUP9N9CO6g0pRw2vDFzvb4UWeJOo6AAb9W/bjh8EYoorzzqnDM+yeO6JVeDzD 8hLpucpZ3AeX382do0Icz454hWAiMoVQJM/PdhY5vdDOLW1Xh4MhXLPuPJTHm01V BD3RryEk/At/64KvQjDsq7s9skKZnPzD2Npfdq42Q25gOeRRzHqOw+FoAgUNFZ8D 9Xt5WRzCxrOXOBcvTN5lVu61lgNasUmGXqFcfO3ghNY11ObxVj4wPTA12Eb7BHe+ hfooS378OQVzM0BS/6joN8gWEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJqqRX4 nCu7QY3r1bQnzQTbwD0VMB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3BXWyfEdEno2NuwJYzOzN+qhomh78F/qMHu6dwMnUTv6jxzhFldof JsWScfUKpZCxgHZG8NchupStQsRPX1KCNd7yQire54Fw3zx6OjiFhdvRW+mR5NLF nqlzKqUIkY4m0xJ4YK5yVMBs2wh0POA4JlkKDGGgpET1rf56j6+SD50yKmvtfysv RRU1Rr/7voI4FJ+cg2NJTmcwEeYeoBy4GSoBA6MOWz93SZd3Uesiqk5Ajgpc+Av4 Unc//+T6UxUUfsTzAg7MRaFzrP3SORTDe0Y07P//2Zq62vZOBDlSFGk/ktYRiBLb h6pABbTNAjG34jqiunLxfHKK5+x5WfJE -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:00 2025 by rpki-client