$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft File: agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json) Hash identifier: rAsP0cQCTHg8cJlePB2K9D/CDKPBmrrfp13tFD+IJAs= Subject key identifier: 1C:FC:C8:8D:FE:65:1E:F9:AF:EF:0A:56:6F:AF:B7:7A:77:6A:55:52 Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 Certificate issuer: /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft Manifest number: 069D Signing time: Mon 30 Jun 2025 23:54:02 +0000 Manifest this update: Mon 30 Jun 2025 23:54:01 +0000 Manifest next update: Mon 07 Jul 2025 23:54:01 +0000 Files and hashes: 1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: OVXCbgjdozNSyhIzkkQephq8cCtJk4Nos0VyFvS+1y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Validity Not Before: Jun 30 23:54:01 2025 GMT Not After : Jul 7 23:54:01 2025 GMT Subject: CN=68632399-9ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:eb:7c:ae:97:94:57:83:8d:08:da:88:ab: e7:12:0e:b0:68:9e:de:18:5d:bf:31:9a:25:dd:69: a6:db:9c:d0:91:46:11:28:fd:e0:5c:d9:0c:79:c5: e8:fa:80:88:35:e3:d6:16:13:f0:91:87:b8:f4:28: 4f:84:ae:57:10:e3:da:e1:78:85:b8:a8:11:f4:81: c1:0a:0d:c1:46:b1:2f:03:95:71:e0:a6:37:f5:d8: e8:3c:b5:8c:f1:a9:a4:90:b6:dd:52:76:29:8a:9a: dc:50:a7:aa:3f:94:04:30:ea:18:e7:4e:a6:2b:63: dc:cc:28:93:06:3c:79:da:ae:44:02:7a:6d:cd:c2: 7f:c4:7e:1b:de:db:a9:53:1f:20:5f:34:ca:5b:34: c0:1d:f7:fc:9b:3f:14:c1:19:89:ec:6f:d0:3a:bf: 79:7a:29:45:07:eb:1c:43:ee:98:2e:61:9a:e1:54: 8d:ae:93:14:19:70:e7:aa:44:65:39:9e:a6:ef:73: 47:b6:f3:2f:69:03:21:55:19:c3:c4:35:35:c1:e1: 2a:9e:f4:c5:46:a9:44:fc:e5:c2:c3:4a:c5:5f:2e: 74:43:67:a5:33:fc:c3:fe:fb:a7:71:e5:92:27:0d: 8d:26:a9:aa:07:2c:54:6f:2a:bc:af:27:b7:72:19: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FC:C8:8D:FE:65:1E:F9:AF:EF:0A:56:6F:AF:B7:7A:77:6A:55:52 X509v3 Authority Key Identifier: keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:de:b4:06:36:fb:09:d9:39:c3:6a:98:49:62:10:43:2a:cc: 6a:9c:30:82:4a:55:61:61:8b:52:92:1e:93:7e:e0:60:43:69: 6f:f2:75:fb:9f:18:44:45:72:51:65:a5:50:76:5f:fe:3c:7a: 21:09:21:55:b3:fe:d1:3b:bf:26:56:08:5e:1f:f7:80:c5:e8: a0:53:59:bc:6b:a9:b0:40:57:73:21:40:8c:47:12:83:3e:7a: 11:21:4f:a9:91:67:1a:cb:3f:4d:96:ac:b1:95:f4:97:3c:23: ef:c1:3c:97:f6:1b:79:34:41:f5:6f:78:b4:3b:d8:ce:17:6f: 0f:3d:bd:3f:19:da:6f:76:29:21:43:5c:39:fd:62:c5:9e:ec: d7:96:58:94:ab:65:99:52:72:27:02:e0:38:f8:86:45:c3:4f: ca:5c:40:6b:bd:e5:8a:64:bf:84:05:21:fe:9b:ce:71:88:8b: 1f:3d:b8:49:15:b1:b1:c0:9e:0c:aa:c4:b0:b6:3c:93:a8:9b: 5d:e3:b6:40:36:c2:b9:3b:1b:78:d1:31:8c:39:ec:9d:95:c2: 0e:52:81:9c:24:20:93:d6:4c:5f:e1:28:58:e7:1c:b5:d3:17: 59:9f:e5:c2:c0:55:dd:25:57:bb:35:3f:6b:66:ae:0b:64:bc: de:fa:d2:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw RTJEOUU4NjcwHhcNMjUwNjMwMjM1NDAxWhcNMjUwNzA3MjM1NDAxWjAYMRYwFAYD VQQDEw02ODYzMjM5OS05YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxfrfK6XlFeDjQjaiKvnEg6waJ7eGF2/MZol3Wmm25zQkUYRKP3gXNkMecXo +oCINePWFhPwkYe49ChPhK5XEOPa4XiFuKgR9IHBCg3BRrEvA5Vx4KY39djoPLWM 8amkkLbdUnYpiprcUKeqP5QEMOoY506mK2PczCiTBjx52q5EAnptzcJ/xH4b3tup Ux8gXzTKWzTAHff8mz8UwRmJ7G/QOr95eilFB+scQ+6YLmGa4VSNrpMUGXDnqkRl OZ6m73NHtvMvaQMhVRnDxDU1weEqnvTFRqlE/OXCw0rFXy50Q2elM/zD/vunceWS Jw2NJqmqByxUbyq8rye3chln8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz8yI3+ ZR75r+8KVm+vt3p3alVSMB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl3rQGNvsJ2TnDaphJYhBDKsxqnDCCSlVhYYtSkh6TfuBgQ2lv8nX7 nxhERXJRZaVQdl/+PHohCSFVs/7RO78mVgheH/eAxeigU1m8a6mwQFdzIUCMRxKD PnoRIU+pkWcayz9NlqyxlfSXPCPvwTyX9ht5NEH1b3i0O9jOF28PPb0/Gdpvdikh Q1w5/WLFnuzXlliUq2WZUnInAuA4+IZFw0/KXEBrveWKZL+EBSH+m85xiIsfPbhJ FbGxwJ4MqsSwtjyTqJtd47ZANsK5Oxt40TGMOeydlcIOUoGcJCCT1kxf4ShY5xy1 0xdZn+XCwFXdJVe7NT9rZq4LZLze+tKJ -----END CERTIFICATE-----Generated at Tue Jul 1 08:15:14 2025 by rpki-client