$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: rGN/xNCYkAxuBfHYyIMs0s08cYFLxOEfJzZflpTHam4= Subject key identifier: D9:4D:B5:AC:62:71:56:F1:3A:43:F1:98:63:2D:D6:06:9E:EB:0C:2D Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 03F9 Signing time: Sat 23 Aug 2025 00:44:04 +0000 Manifest this update: Sat 23 Aug 2025 00:44:03 +0000 Manifest next update: Sat 30 Aug 2025 00:44:03 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: oB3nVHQt1DonGuBJeoibbx6FA6SRf2u6JINyogPqJ0U=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Aug 23 00:44:03 2025 GMT Not After : Aug 30 00:44:03 2025 GMT Subject: CN=68a90ed4-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:2f:1c:7a:f0:65:c7:4f:ff:cc:9f:da:c0: 1b:5c:d6:b6:90:03:68:98:0e:64:9d:75:80:60:2a: 8b:cc:0e:b7:98:f8:7f:f0:9d:01:92:b2:93:2c:30: 0c:23:c3:2c:68:40:4e:dd:16:31:ee:7e:85:6a:97: 13:a4:92:d3:ff:79:e9:79:1b:79:da:b7:be:f4:a6: 05:f3:ef:39:f2:ef:1b:7c:15:35:fb:f0:71:69:bf: e1:ad:a1:d7:60:8c:1e:a6:b9:00:5d:1c:04:a8:c7: c5:60:85:2b:ef:f3:3d:f0:40:03:4b:87:1d:4c:91: 8f:69:93:34:fc:35:93:09:18:bd:d0:e5:db:6a:8b: 50:55:f0:3d:20:19:a6:59:83:1a:e2:d5:88:37:48: f5:71:d9:4d:55:6d:76:17:5e:91:a4:ff:16:89:73: a5:f6:26:a6:c0:88:11:4b:e0:98:d3:4b:05:9c:6e: d4:b0:61:e8:5a:39:93:3e:8b:5f:eb:f2:f4:4b:d8: 8d:d5:95:cc:9f:11:e4:9f:29:67:5f:60:70:be:3d: 4b:f4:5a:4d:66:6b:55:43:6b:17:22:17:60:b0:b8: 16:50:c2:42:fe:51:85:1d:95:0a:22:af:4e:c1:d6: 26:a9:bb:d9:3f:56:cd:e7:b6:77:35:ee:c0:0b:c5: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4D:B5:AC:62:71:56:F1:3A:43:F1:98:63:2D:D6:06:9E:EB:0C:2D X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:10:2d:5a:fc:8a:13:ad:9b:f7:7f:48:1c:bc:3c:b3:4a:bf: fc:30:2b:fc:88:eb:27:77:66:62:de:ad:6a:31:78:c6:a1:e8: f5:3f:e4:2a:85:15:31:4c:a0:db:b8:95:98:1f:6b:27:bf:96: d0:5c:88:33:43:96:cc:47:5b:82:82:5e:ec:1f:28:85:12:e6: 2d:51:05:0d:1c:64:b4:bf:3c:f7:72:3f:ce:5d:c2:8c:4d:87: b0:3c:c3:78:11:d8:ff:54:e5:83:21:80:7f:5f:f6:d6:bf:1a: 11:c6:47:d8:c0:b2:e8:04:2a:06:4b:8c:c3:0b:2b:bb:d9:7e: 83:3a:fe:0c:a8:75:91:06:1a:08:6e:aa:fc:b8:f3:95:8c:a4: f4:3f:96:3e:79:00:7b:43:e4:87:dd:6e:5d:6a:1d:a1:60:76: 56:6c:15:59:3b:24:4e:39:30:d2:d0:4b:7e:73:12:43:a4:1f: 66:24:5c:2b:1a:06:12:e0:bd:00:b0:af:c2:ee:1c:4d:6f:8c: e4:39:15:d6:11:41:23:8d:63:18:cb:c7:2a:2a:31:fd:96:59: bb:2f:c9:07:be:d6:31:4f:8b:a4:06:6a:97:56:23:1e:88:f8: 7a:9f:ba:9e:e0:7a:26:fa:95:a2:66:e3:c3:df:7e:09:eb:ee: 3e:8c:0d:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUwODIzMDA0NDAzWhcNMjUwODMwMDA0NDAzWjAYMRYwFAYD VQQDEw02OGE5MGVkNC1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcUvHHrwZcdP/8yf2sAbXNa2kANomA5knXWAYCqLzA63mPh/8J0BkrKTLDAM I8MsaEBO3RYx7n6FapcTpJLT/3npeRt52re+9KYF8+858u8bfBU1+/Bxab/hraHX YIweprkAXRwEqMfFYIUr7/M98EADS4cdTJGPaZM0/DWTCRi90OXbaotQVfA9IBmm WYMa4tWIN0j1cdlNVW12F16RpP8WiXOl9iamwIgRS+CY00sFnG7UsGHoWjmTPotf 6/L0S9iN1ZXMnxHknylnX2Bwvj1L9FpNZmtVQ2sXIhdgsLgWUMJC/lGFHZUKIq9O wdYmqbvZP1bN57Z3Ne7AC8XqgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlNtaxi cVbxOkPxmGMt1gae6wwtMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjEC1a/IoTrZv3f0gcvDyzSr/8MCv8iOsnd2Zi3q1qMXjGoej1P+Qq hRUxTKDbuJWYH2snv5bQXIgzQ5bMR1uCgl7sHyiFEuYtUQUNHGS0vzz3cj/OXcKM TYewPMN4Edj/VOWDIYB/X/bWvxoRxkfYwLLoBCoGS4zDCyu72X6DOv4MqHWRBhoI bqr8uPOVjKT0P5Y+eQB7Q+SH3W5dah2hYHZWbBVZOyROOTDS0Et+cxJDpB9mJFwr GgYS4L0AsK/C7hxNb4zkORXWEUEjjWMYy8cqKjH9llm7L8kHvtYxT4ukBmqXViMe iPh6n7qe4Hom+pWiZuPD334J6+4+jA31 -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:54 2025 by rpki-client