$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: B/xdbBDK9+vlpWank89GHTgVqEyILIh40K90380Kj2E= Subject key identifier: BD:50:EA:78:50:76:4F:FE:4A:53:F8:D9:24:26:AB:9D:69:DF:B8:93 Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 1915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 18FC Signing time: Sat 18 Oct 2025 16:50:26 +0000 Manifest this update: Sat 18 Oct 2025 16:50:25 +0000 Manifest next update: Sat 25 Oct 2025 16:50:25 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: Jm71H8R697PKK5i9YCYTGfLR9AKjM9Lgt0oMjr6+v2o=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: hzFVXlwfRqwuiNn/Z2NEoFkVKW39Hvwn8Qm2xuVV6R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6421 (0x1915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Validity Not Before: Oct 18 16:50:25 2025 GMT Not After : Oct 25 16:50:25 2025 GMT Subject: CN=68f3c551-f5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:7c:69:b9:ea:99:76:ae:18:0f:0b:dc:76: 16:34:c0:38:c3:cd:83:a9:ed:23:50:47:57:30:f1: 0f:34:b8:8b:cd:95:8d:a4:5b:38:0c:93:44:9f:9a: bd:1a:1d:cd:a5:9d:ff:5d:d0:6d:af:08:c5:e1:84: 1c:c9:19:39:40:fd:0c:52:d9:52:c1:81:3b:19:95: ac:8b:9e:f8:63:f4:16:23:fd:4e:15:52:71:85:23: 05:85:8a:80:ab:d4:62:d9:91:60:34:af:42:d7:83: 65:9b:77:77:5d:44:d8:f9:dd:a0:f3:a5:c5:60:5b: 91:6f:5c:81:37:2b:7d:8b:16:ee:97:6c:4e:17:e2: 87:a5:50:da:b7:9e:3c:29:86:a4:d0:c6:da:bc:26: a2:ed:5f:4e:01:2a:32:74:85:68:dc:0c:bb:1c:bc: 92:17:1e:75:4b:0d:96:78:da:fe:2c:43:b2:09:bf: ca:6b:04:f8:90:9d:d1:a1:b4:ec:e5:c5:c8:a4:9a: 21:b2:9e:fb:85:4b:2b:29:c6:61:32:dd:a0:8f:49: 4f:f9:40:ae:b2:a8:9b:1b:c9:ab:fd:aa:8a:0e:23: 14:d6:a3:46:69:96:47:6a:75:f5:43:4d:54:79:fe: a5:9f:7a:6d:d5:04:17:70:2b:dd:9d:69:15:22:fe: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:EA:78:50:76:4F:FE:4A:53:F8:D9:24:26:AB:9D:69:DF:B8:93 X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a4:36:1d:37:f3:d7:95:b8:26:3d:a1:aa:e9:d2:de:7e:24: 7c:8f:61:46:1b:e5:69:e5:2b:59:a1:b1:15:0d:9f:65:d0:c1: 89:ef:f5:1a:3e:f1:75:b3:3e:16:e8:80:c2:69:7f:4e:0e:a9: c2:17:2d:74:1b:56:c3:4d:01:d1:80:da:b7:bb:ef:5f:92:05: cb:4c:6b:be:cc:d1:b2:ea:8c:71:90:61:11:38:6f:2e:2a:5b: fc:d2:f1:c6:92:da:46:c1:a7:56:fa:db:a5:f0:7a:99:89:e5: 59:fd:79:6a:15:ab:e5:d4:4a:00:64:ea:a0:33:ae:b1:f1:7e: 50:d4:7b:89:cd:8b:70:2c:63:ef:7f:96:4e:30:91:6b:db:31: 1d:f1:c7:51:9e:2f:81:08:c2:af:dc:85:a8:ca:99:61:2f:1e: 2b:63:74:87:f5:81:54:62:34:94:89:ff:a0:0e:1d:de:fc:fe: 0a:82:a4:0b:8a:0c:3f:99:cb:d7:4f:bf:77:18:12:09:53:d5: 6a:d2:6d:8c:99:d6:c7:33:cb:60:47:0d:16:fd:bd:6f:a8:e3: a8:f4:ed:4a:19:b3:0a:5c:e7:b0:3b:fb:b7:49:89:8e:f3:87: c0:9b:27:49:42:5a:02:88:4a:ae:cd:65:bc:6a:55:f0:3e:58: 4d:37:03:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjUxMDE4MTY1MDI1WhcNMjUxMDI1MTY1MDI1WjAYMRYwFAYD VQQDEw02OGYzYzU1MS1mNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtp8abnqmXauGA8L3HYWNMA4w82Dqe0jUEdXMPEPNLiLzZWNpFs4DJNEn5q9 Gh3NpZ3/XdBtrwjF4YQcyRk5QP0MUtlSwYE7GZWsi574Y/QWI/1OFVJxhSMFhYqA q9Ri2ZFgNK9C14Nlm3d3XUTY+d2g86XFYFuRb1yBNyt9ixbul2xOF+KHpVDat548 KYak0MbavCai7V9OASoydIVo3Ay7HLySFx51Sw2WeNr+LEOyCb/KawT4kJ3RobTs 5cXIpJohsp77hUsrKcZhMt2gj0lP+UCusqibG8mr/aqKDiMU1qNGaZZHanX1Q01U ef6ln3pt1QQXcCvdnWkVIv55WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1Q6nhQ dk/+SlP42SQmq51p37iTMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2pDYdN/PXlbgmPaGq6dLefiR8j2FGG+Vp5StZobEVDZ9l0MGJ7/Ua PvF1sz4W6IDCaX9ODqnCFy10G1bDTQHRgNq3u+9fkgXLTGu+zNGy6oxxkGEROG8u Klv80vHGktpGwadW+tul8HqZieVZ/XlqFavl1EoAZOqgM66x8X5Q1HuJzYtwLGPv f5ZOMJFr2zEd8cdRni+BCMKv3IWoyplhLx4rY3SH9YFUYjSUif+gDh3e/P4KgqQL igw/mcvXT793GBIJU9Vq0m2MmdbHM8tgRw0W/b1vqOOo9O1KGbMKXOewO/u3SYmO 84fAmydJQloCiEquzWW8alXwPlhNNwNa -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:51 2025 by rpki-client