$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: npnwkepjxm4gee4HI+VSqXCFjdRorCScyMl3KFoVZVg= Subject key identifier: 6A:C8:46:47:FC:C0:11:97:C5:B4:D4:75:0B:4A:EA:B8:7B:1F:46:2C Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 03C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 03C3 Signing time: Sun 11 May 2025 00:13:54 +0000 Manifest this update: Sun 11 May 2025 00:13:54 +0000 Manifest next update: Sun 18 May 2025 00:13:54 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: 82BWqqUk4Q/L7XyX+GmVGw+ntvmekuf1OpU72c+917Q=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: WzLUdenQ5UXA5eAEZpuKFjLbtHs84su1cxAYTdJsK9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: May 11 00:13:54 2025 GMT Not After : May 18 00:13:54 2025 GMT Subject: CN=681febc2-0174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:c3:a8:9c:89:5f:4b:30:60:43:89:2e:91: 0a:b6:4d:b8:a2:ad:f0:e5:e0:b3:e4:c6:2e:a9:86: af:82:a0:ed:0e:19:37:8f:b9:50:3e:62:4f:14:20: 1e:c1:6f:fb:f7:0d:89:5b:86:0e:8b:7d:fc:ff:3c: 38:b5:5e:44:48:1f:43:89:f1:d2:72:38:9c:4e:63: 11:f2:e0:45:81:19:7c:36:06:d2:9e:f5:8a:8b:11: 9e:07:86:77:2f:6b:b2:59:9a:2d:13:d7:db:ec:10: 43:e2:21:61:b5:a5:22:90:ab:9f:35:da:3e:78:5e: 7a:c4:21:99:09:92:35:ca:42:b0:d6:1e:cb:ac:6e: 92:d0:a4:0d:04:96:12:16:f5:db:9d:63:87:b1:65: 6c:3c:f4:37:98:74:c7:6c:a3:e8:a5:f7:90:c1:fc: 7b:ee:d4:88:91:f8:08:6f:e6:82:d6:12:93:d3:7c: c9:2f:32:90:84:90:c5:f0:19:3b:37:bd:ff:c9:79: 60:89:75:bb:1e:6e:61:c8:44:72:1f:e4:3b:5d:60: 8a:8c:13:5d:da:62:af:1b:dc:f5:9a:d6:46:f8:de: 73:a1:57:72:06:e2:ce:ec:b6:9a:2f:cb:1a:77:c3: 08:6d:d9:eb:e2:b1:6f:13:bd:79:11:84:25:3e:2c: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C8:46:47:FC:C0:11:97:C5:B4:D4:75:0B:4A:EA:B8:7B:1F:46:2C X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:af:d7:4c:91:79:96:db:c0:d9:51:60:73:ec:86:18:e5:de: 9c:2a:11:79:aa:c7:e6:76:3b:6f:08:f3:c5:c7:3e:e2:40:d3: c2:08:5d:b7:b5:e3:a7:69:4d:2b:23:bf:ff:13:b7:2c:0b:d0: 84:1f:e4:16:00:74:fd:ed:34:5f:7e:e8:b5:fe:7d:9b:24:d6: eb:05:ae:08:90:eb:d7:b3:18:56:13:a4:b0:78:1f:d5:ee:ed: 3d:d3:e4:1f:c4:b0:5e:e4:4b:52:aa:5a:2c:5f:22:a0:89:0c: c9:9c:d3:70:da:f7:92:a8:fa:d0:e5:77:ba:a4:cf:8b:0e:59: 3a:75:59:ff:5a:d3:df:77:db:31:af:2f:81:1d:f9:b8:5e:f4: 51:5b:31:15:38:f4:ed:29:11:21:ca:c6:05:f1:bc:bf:22:9a: 6f:44:1a:15:5b:4e:54:e5:2d:20:23:db:bf:bb:ee:23:39:c3: e1:c0:be:f6:eb:05:1e:0c:e2:af:30:aa:c4:b3:38:8e:75:e7: 70:3d:b8:5f:6c:5f:f2:88:c1:be:76:8d:03:69:3d:26:6f:00: 8c:c8:22:17:e0:1c:92:0c:1d:87:84:f2:69:c8:1e:0d:55:56: 1e:10:53:c6:49:b2:1f:99:76:63:b2:f6:8c:60:67:51:b1:99: 08:f9:75:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUwNTExMDAxMzU0WhcNMjUwNTE4MDAxMzU0WjAYMRYwFAYD VQQDEw02ODFmZWJjMi0wMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5vDqJyJX0swYEOJLpEKtk24oq3w5eCz5MYuqYavgqDtDhk3j7lQPmJPFCAe wW/79w2JW4YOi338/zw4tV5ESB9DifHScjicTmMR8uBFgRl8NgbSnvWKixGeB4Z3 L2uyWZotE9fb7BBD4iFhtaUikKufNdo+eF56xCGZCZI1ykKw1h7LrG6S0KQNBJYS FvXbnWOHsWVsPPQ3mHTHbKPopfeQwfx77tSIkfgIb+aC1hKT03zJLzKQhJDF8Bk7 N73/yXlgiXW7Hm5hyERyH+Q7XWCKjBNd2mKvG9z1mtZG+N5zoVdyBuLO7LaaL8sa d8MIbdnr4rFvE715EYQlPiyAEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrIRkf8 wBGXxbTUdQtK6rh7H0YsMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHr9dMkXmW28DZUWBz7IYY5d6cKhF5qsfmdjtvCPPFxz7iQNPCCF23 teOnaU0rI7//E7csC9CEH+QWAHT97TRffui1/n2bJNbrBa4IkOvXsxhWE6SweB/V 7u090+QfxLBe5EtSqlosXyKgiQzJnNNw2veSqPrQ5Xe6pM+LDlk6dVn/WtPfd9sx ry+BHfm4XvRRWzEVOPTtKREhysYF8by/IppvRBoVW05U5S0gI9u/u+4jOcPhwL72 6wUeDOKvMKrEsziOdedwPbhfbF/yiMG+do0DaT0mbwCMyCIX4BySDB2HhPJpyB4N VVYeEFPGSbIfmXZjsvaMYGdRsZkI+XWn -----END CERTIFICATE-----Generated at Sun May 11 20:04:01 2025 by rpki-client