$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: zsjUY+nEvklabKzfnu3SnQOfFCCVad3jo10b1VQ85AE= Subject key identifier: 64:D1:E6:5D:36:FD:85:63:90:59:02:14:C1:CE:48:A1:3C:D3:E6:66 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 024E Signing time: Sun 19 Oct 2025 04:01:00 +0000 Manifest this update: Sun 19 Oct 2025 04:00:59 +0000 Manifest next update: Sun 26 Oct 2025 04:00:59 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: gZKg7fs3vSref9xO5HJxqeWzY/yIrtNj8kjqFWprYt0=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: KFPYG7z3ovj/gDTTmWKC0rC1bedBGEtuFgPr4XMRScs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Oct 19 04:00:59 2025 GMT Not After : Oct 26 04:00:59 2025 GMT Subject: CN=68f4627b-48c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:6f:a7:01:5d:2b:6e:05:d2:0c:ae:22:4a: a6:98:3e:e4:80:38:89:a9:32:18:58:d1:30:18:b4: 82:de:c1:67:82:ab:05:ad:58:68:8b:f0:36:14:26: f8:91:3f:ce:ee:08:2a:c2:95:49:03:bc:b1:11:c1: f3:3a:40:e8:c7:a8:24:a7:f9:b1:04:c7:65:75:8c: 9b:79:43:b7:5e:1e:be:fd:a0:cc:2a:bc:0c:e6:60: 00:d0:73:cb:43:44:37:bd:c0:da:59:ca:1a:6e:1d: 96:f2:2a:47:2e:7c:9b:68:3d:63:6d:07:f6:f8:c3: 7d:d8:f0:6e:af:9f:18:92:fc:42:c8:72:94:11:65: bd:6c:42:ba:c6:3c:8c:29:b6:bf:52:70:20:ee:82: 1b:dd:48:8b:d2:e3:3f:7c:67:9f:01:74:49:ea:98: 3d:02:7f:6c:50:f0:32:82:a7:05:89:12:d0:55:e9: 1e:db:d5:62:72:c9:2d:c3:72:cb:48:fb:aa:78:52: fb:cf:a4:84:16:7b:96:2d:de:47:14:1c:2a:73:44: f0:f3:f8:d2:c7:b6:ed:8a:c0:9a:84:ca:0a:8c:07: bd:2a:d5:07:1b:be:1c:5a:7c:1f:65:72:b9:e3:9f: 78:97:3b:4c:b1:4f:a1:55:90:36:0a:a5:f4:b0:1c: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D1:E6:5D:36:FD:85:63:90:59:02:14:C1:CE:48:A1:3C:D3:E6:66 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e0:4c:12:3e:30:56:21:7b:53:eb:ac:aa:1c:df:10:5a:3e: f9:1b:a1:3b:c9:47:b3:6f:6c:2a:81:74:c1:db:30:92:f2:57: 64:19:8b:fc:c8:4f:1b:ba:75:07:e4:67:88:b6:07:e7:9b:64: 90:f9:08:cb:42:d8:0c:5b:cf:95:92:30:8f:14:83:99:76:ac: ae:e5:35:93:8d:20:83:a9:57:a8:f1:e3:7b:1f:6d:92:1e:39: b8:59:da:a9:52:39:01:e8:d4:9a:a1:4d:c0:79:2e:71:e7:8f: 10:f0:57:c8:cd:0d:de:92:da:38:77:98:50:89:4a:97:e5:3d: d7:a0:1f:c9:61:cd:30:5b:77:55:5d:be:77:50:8c:bd:fe:d3: d6:80:fa:5a:e9:2f:0b:df:a4:76:a8:77:f7:15:fa:de:96:f9: 9c:a9:bf:d7:7e:31:4c:c5:a8:01:24:26:5b:33:4b:3c:d1:f4: 25:6d:98:f1:05:8e:b0:0c:44:b0:06:c8:b7:85:ad:01:e6:5f: 7b:ef:48:1e:6a:08:75:08:7c:6c:f2:02:9d:95:53:52:d5:f6: b1:64:83:c7:46:15:ed:04:04:6b:f8:03:a4:9a:d6:95:35:11: e3:4f:f2:e8:ad:c2:96:22:b3:cd:c9:bb:f9:39:67:7a:26:22: 7e:b4:37:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUxMDE5MDQwMDU5WhcNMjUxMDI2MDQwMDU5WjAYMRYwFAYD VQQDEw02OGY0NjI3Yi00OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlpvpwFdK24F0gyuIkqmmD7kgDiJqTIYWNEwGLSC3sFngqsFrVhoi/A2FCb4 kT/O7ggqwpVJA7yxEcHzOkDox6gkp/mxBMdldYybeUO3Xh6+/aDMKrwM5mAA0HPL Q0Q3vcDaWcoabh2W8ipHLnybaD1jbQf2+MN92PBur58YkvxCyHKUEWW9bEK6xjyM Kba/UnAg7oIb3UiL0uM/fGefAXRJ6pg9An9sUPAygqcFiRLQVeke29Vicsktw3LL SPuqeFL7z6SEFnuWLd5HFBwqc0Tw8/jSx7btisCahMoKjAe9KtUHG74cWnwfZXK5 4594lztMsU+hVZA2CqX0sByUGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTR5l02 /YVjkFkCFMHOSKE80+ZmMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB74EwSPjBWIXtT66yqHN8QWj75G6E7yUezb2wqgXTB2zCS8ldkGYv8 yE8bunUH5GeItgfnm2SQ+QjLQtgMW8+VkjCPFIOZdqyu5TWTjSCDqVeo8eN7H22S Hjm4WdqpUjkB6NSaoU3AeS5x548Q8FfIzQ3ekto4d5hQiUqX5T3XoB/JYc0wW3dV Xb53UIy9/tPWgPpa6S8L36R2qHf3Ffrelvmcqb/XfjFMxagBJCZbM0s80fQlbZjx BY6wDESwBsi3ha0B5l9770geagh1CHxs8gKdlVNS1faxZIPHRhXtBARr+AOkmtaV NRHjT/LorcKWIrPNybv5OWd6JiJ+tDeo -----END CERTIFICATE-----Generated at Mon Oct 20 00:20:49 2025 by rpki-client