$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: UklMyKPoVyOqrOMPZ/XN4WRzbbIDhWh7Qt8+cmjmwS8= Subject key identifier: 3A:85:9C:CC:50:74:7D:EE:09:BC:9E:EB:78:B5:AB:FA:AC:6E:30:ED Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 18EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 18D6 Signing time: Fri 22 Aug 2025 16:34:23 +0000 Manifest this update: Fri 22 Aug 2025 16:34:23 +0000 Manifest next update: Fri 29 Aug 2025 16:34:23 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: liNxyLpVQryXd+HloDxO50ie0V8GYa5fWeveeTVbrFY=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: rBSQRTDzDNTdo/Fn8PCTBFu4JOqtjUs4xyOXhorxe8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6379 (0x18eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Validity Not Before: Aug 22 16:34:23 2025 GMT Not After : Aug 29 16:34:23 2025 GMT Subject: CN=68a89c0f-95d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:4d:bb:95:f5:4e:1d:9f:8b:68:b4:d3:36: 83:91:a5:61:9b:a8:48:ee:e6:0e:b2:66:39:9e:8a: 41:5a:8a:03:91:e2:fa:47:c9:13:3b:f1:18:bd:4d: a4:da:8b:c8:b4:f2:f5:fb:d1:5c:50:41:56:04:82: 86:a7:b0:b6:d4:a5:65:67:59:af:5b:0c:87:20:1f: c0:27:c5:54:79:ce:b9:fe:87:d5:75:cb:8d:ff:84: ed:2f:c9:e6:47:01:39:3a:5b:97:f5:e7:c8:67:82: f7:92:af:f4:28:1f:c5:3d:7d:25:9a:d1:6e:4d:dd: 5c:d6:cc:35:7c:d1:55:c6:36:f9:e0:34:65:20:4a: 96:1e:1c:82:4e:77:86:3a:70:a9:ef:b9:ff:38:ac: 6a:6d:98:31:c7:a7:49:f4:be:02:41:e4:fa:0e:8a: d4:d0:a1:6e:bd:0b:6c:19:55:63:dd:77:7a:6d:f3: e0:02:57:4e:0c:46:11:d8:ce:ff:db:7b:1f:c4:d9: 27:4b:73:1b:4e:d6:f4:c9:12:2b:e2:6e:a9:b0:33: 59:07:4c:61:d3:59:9e:00:fc:84:34:4a:c3:a8:28: 98:89:ed:b2:98:81:58:f5:6f:74:78:38:cb:6a:00: f7:c2:c4:3b:a3:8e:b8:18:b7:5f:0e:4b:c0:78:d3: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:9C:CC:50:74:7D:EE:09:BC:9E:EB:78:B5:AB:FA:AC:6E:30:ED X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:91:88:75:11:86:8e:cc:00:36:88:0c:d7:ba:37:89:94:90: 02:b6:1a:69:d8:e0:6e:13:84:98:fb:63:20:6e:18:7d:c1:b8: c8:af:f7:1e:14:92:73:af:6e:05:8a:58:d5:10:90:cf:66:96: 6d:3c:cc:bb:bd:53:cf:ee:bf:9d:4b:c9:af:43:66:49:02:0c: 92:47:3f:18:d5:4c:75:b6:f2:5d:1d:f2:0d:45:83:8f:47:61: ed:c1:c9:fe:d9:43:48:b4:ff:d3:bd:db:2c:a7:07:7c:f3:68: 66:88:1d:67:f7:50:20:6e:6b:3f:e2:20:bc:c5:d3:5a:46:fe: 96:11:a1:06:5d:e8:2b:c5:5d:bb:f6:7d:bf:d6:d2:9b:57:85: 7a:8e:40:95:f7:71:65:25:68:1e:a9:7c:f0:17:b9:af:a9:65: 99:59:96:22:d4:4d:d7:22:c4:ea:b7:1a:3a:a3:f2:a9:bf:61: 8f:04:b6:c2:bd:b6:47:59:63:2e:b2:6c:cd:d4:89:38:5d:86: f4:32:e8:5c:96:cf:6e:b8:2b:c0:2e:d4:c0:a0:c5:b5:80:44: 50:41:52:3c:67:22:67:eb:5d:74:b8:f0:3a:33:c7:08:c8:0a: aa:69:f3:62:42:7d:ad:c9:e9:91:ca:e4:a2:85:c9:29:f5:35: 42:a9:13:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjUwODIyMTYzNDIzWhcNMjUwODI5MTYzNDIzWjAYMRYwFAYD VQQDEw02OGE4OWMwZi05NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz9Nu5X1Th2fi2i00zaDkaVhm6hI7uYOsmY5nopBWooDkeL6R8kTO/EYvU2k 2ovItPL1+9FcUEFWBIKGp7C21KVlZ1mvWwyHIB/AJ8VUec65/ofVdcuN/4TtL8nm RwE5OluX9efIZ4L3kq/0KB/FPX0lmtFuTd1c1sw1fNFVxjb54DRlIEqWHhyCTneG OnCp77n/OKxqbZgxx6dJ9L4CQeT6DorU0KFuvQtsGVVj3Xd6bfPgAldODEYR2M7/ 23sfxNknS3MbTtb0yRIr4m6psDNZB0xh01meAPyENErDqCiYie2ymIFY9W90eDjL agD3wsQ7o464GLdfDkvAeNNgKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqFnMxQ dH3uCbye63i1q/qsbjDtMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSkYh1EYaOzAA2iAzXujeJlJACthpp2OBuE4SY+2Mgbhh9wbjIr/ce FJJzr24FiljVEJDPZpZtPMy7vVPP7r+dS8mvQ2ZJAgySRz8Y1Ux1tvJdHfINRYOP R2Htwcn+2UNItP/Tvdsspwd882hmiB1n91Agbms/4iC8xdNaRv6WEaEGXegrxV27 9n2/1tKbV4V6jkCV93FlJWgeqXzwF7mvqWWZWZYi1E3XIsTqtxo6o/Kpv2GPBLbC vbZHWWMusmzN1Ik4XYb0Muhcls9uuCvALtTAoMW1gERQQVI8ZyJn6110uPA6M8cI yAqqafNiQn2tyemRyuSihckp9TVCqRNy -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:16 2025 by rpki-client