$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: SzdIXlDwgSfqVJeRGxy3fEgs8GZ7Z2RWVaTr2gaLxKI= Subject key identifier: 6C:FE:B7:51:8F:03:EC:17:3E:5F:CC:7E:04:3E:A4:87:A3:17:3B:BB Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 1971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 1954 Signing time: Thu 26 Mar 2026 16:24:23 +0000 Manifest this update: Thu 26 Mar 2026 16:24:23 +0000 Manifest next update: Thu 02 Apr 2026 16:24:23 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: wZO1syJfOtnstXJB5z1cqySplK52JMdFyfkgWufh6TE=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: YvchA+iLWK2KzcsGlB5LZ4NkqNmPfmKmRFBKloh/k0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6513 (0x1971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Validity Not Before: Mar 26 16:24:23 2026 GMT Not After : Apr 2 16:24:23 2026 GMT Subject: CN=69c55db7-6262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:b6:10:ca:33:6f:e9:b9:4a:10:f7:5d:76: 78:08:c8:c3:e5:a8:6b:3a:f8:a9:c6:d2:f8:22:a0: 4f:88:36:52:62:7f:ae:60:89:29:05:9a:37:97:70: 3b:d4:75:19:97:d1:0b:53:f8:01:7f:eb:5e:c3:0b: 57:4c:e3:90:3b:29:79:99:6c:16:c6:32:bb:2b:8e: 82:6e:96:be:7c:94:a8:b4:cb:bb:4c:31:43:e4:4d: f9:96:92:ca:94:f9:50:d8:2e:be:ee:bd:4c:a2:71: 35:b0:bc:98:e7:87:3f:4d:b2:bf:30:8d:db:6a:d1: 76:80:ea:9f:c5:08:9a:c5:17:f4:0d:8b:40:9e:7e: 1f:0a:74:96:eb:95:6b:fc:14:68:f6:ca:13:4a:2f: 89:ef:50:d0:40:3c:38:35:3a:fe:cc:7a:8f:ae:fe: 18:7b:ae:77:d3:6f:66:79:9a:cf:08:c2:f1:88:f1: 00:14:cc:37:4b:32:4e:0c:fa:7e:c7:38:01:f3:09: d3:ad:97:1d:07:05:b8:c4:dd:ef:cb:4b:1c:23:78: b4:e7:5a:50:a8:38:c9:eb:f4:37:6c:61:e1:16:82: 94:69:4f:d2:5b:eb:81:9b:de:92:84:b9:df:61:5b: ef:e7:24:69:8b:4a:1c:8a:8d:82:8d:74:e8:7c:72: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FE:B7:51:8F:03:EC:17:3E:5F:CC:7E:04:3E:A4:87:A3:17:3B:BB X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a1:38:94:d0:50:09:6e:fa:1c:86:bf:7f:5e:01:35:01:fe: 5e:d2:f2:f0:87:ba:f4:ab:c4:58:d0:84:52:5e:a7:1a:05:9c: ff:a5:b3:36:1e:cc:b2:ef:bd:bc:48:1c:c9:3f:17:43:5b:3d: 15:dd:7a:f0:08:e3:7f:22:c3:72:c0:91:3c:31:07:51:17:67: bf:4a:5c:5f:7a:0b:7b:fd:63:69:a0:4c:18:8d:f6:41:c7:71: 0f:0c:66:d5:5f:90:fc:da:83:bb:49:d9:53:bd:ed:0a:ea:d2: dd:50:73:c4:88:0c:43:37:b1:0d:dc:50:e1:ac:fc:4d:ec:7c: 90:6b:d8:1a:f6:31:e5:4a:a4:bd:4f:76:83:da:5e:bc:54:b8: 00:da:81:35:7d:3b:87:58:01:51:8d:bd:ee:1c:33:dc:c1:de: 72:1a:02:a3:08:9f:d8:89:01:52:7f:d1:0a:32:72:9d:53:6d: 2f:f4:cf:ee:1a:09:95:8d:fa:b3:62:83:3d:ba:ef:0a:63:e5: 29:55:55:ae:b4:17:d3:40:a2:f4:2d:23:c4:5c:6b:6b:f6:5f: f2:be:5d:bd:82:ed:82:d5:8c:6f:3d:96:06:31:51:50:5d:60: 96:07:16:d2:99:6b:d1:a1:56:0c:63:26:0b:f5:a4:eb:15:32: cb:7c:59:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjYwMzI2MTYyNDIzWhcNMjYwNDAyMTYyNDIzWjAYMRYwFAYD VQQDEw02OWM1NWRiNy02MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4a2EMozb+m5ShD3XXZ4CMjD5ahrOvipxtL4IqBPiDZSYn+uYIkpBZo3l3A7 1HUZl9ELU/gBf+tewwtXTOOQOyl5mWwWxjK7K46Cbpa+fJSotMu7TDFD5E35lpLK lPlQ2C6+7r1MonE1sLyY54c/TbK/MI3batF2gOqfxQiaxRf0DYtAnn4fCnSW65Vr /BRo9soTSi+J71DQQDw4NTr+zHqPrv4Ye653029meZrPCMLxiPEAFMw3SzJODPp+ xzgB8wnTrZcdBwW4xN3vy0scI3i051pQqDjJ6/Q3bGHhFoKUaU/SW+uBm96ShLnf YVvv5yRpi0ocio2CjXTofHITZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGz+t1GP A+wXPl/MfgQ+pIejFzu7MB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkKE4lNBQCW76HIa/f14BNQH+XtLy8Ie69KvEWNCEUl6nGgWc/6WzNh7Msu+9 vEgcyT8XQ1s9Fd168AjjfyLDcsCRPDEHURdnv0pcX3oLe/1jaaBMGI32QcdxDwxm 1V+Q/NqDu0nZU73tCurS3VBzxIgMQzexDdxQ4az8Tex8kGvYGvYx5UqkvU92g9pe vFS4ANqBNX07h1gBUY297hwz3MHechoCowif2IkBUn/RCjJynVNtL/TP7hoJlY36 s2KDPbrvCmPlKVVVrrQX00Ci9C0jxFxra/Zf8r5dvYLtgtWMbz2WBjFRUF1glgcW 0plr0aFWDGMmC/Wk6xUyy3xZRA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:33 2026 by rpki-client