$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: utRuHTvYri4JKelLLxvr1tOqggZjIdblLE/NVEXUP64= Subject key identifier: D5:9E:5F:7A:47:B0:3B:A9:24:32:86:07:EA:33:C2:57:35:E1:C2:92 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0368 Signing time: Tue 01 Jul 2025 01:31:35 +0000 Manifest this update: Tue 01 Jul 2025 01:31:35 +0000 Manifest next update: Tue 08 Jul 2025 01:31:35 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: v5FSMgiT7uL+xF0ZgkrmpdIJZ+iPmVjqF7AY0WX1t9w=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Jul 1 01:31:35 2025 GMT Not After : Jul 8 01:31:35 2025 GMT Subject: CN=68633a77-55dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:a2:c8:76:7d:05:f3:3f:9a:88:66:ad:83: 74:2a:5d:5f:f4:56:2c:72:13:42:f8:6c:77:b6:9c: 4a:94:7c:4d:1c:0e:48:e7:0a:43:7d:18:19:4f:21: b8:62:a4:a7:6d:33:2e:e3:43:a9:9f:8d:51:d4:9b: a3:3b:33:47:cb:15:88:ff:3a:0e:d3:7c:77:2c:e4: 35:b4:ae:8a:76:9e:c1:5d:45:fb:67:3e:8c:a7:a4: cb:90:f9:d3:4d:a3:ba:52:fb:05:21:64:f6:fe:f9: f6:29:5a:08:49:32:f2:54:63:42:25:17:cc:11:21: d0:44:0d:e3:74:11:97:a6:62:1e:e5:3a:f2:78:4d: 82:0f:02:78:72:20:fa:e7:4a:86:7c:92:08:4d:ae: f0:13:f0:8a:0b:e3:1d:e9:0d:50:04:d3:6a:7a:ec: 1b:f3:24:5f:a9:66:da:f9:dd:e5:07:18:f9:2f:2d: fe:86:e1:cc:ba:83:41:37:2c:38:ca:be:da:cb:50: 5b:41:2e:c9:2b:6d:a8:7d:d9:e7:c2:a9:f4:f7:b7: 53:3a:e4:cb:b1:9f:79:50:6a:b0:14:52:40:71:da: ea:cc:9e:4c:37:0e:e4:42:e5:d7:08:b0:30:9e:64: cb:b8:24:2f:84:4d:9d:91:04:9d:e7:38:d6:43:1d: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:5F:7A:47:B0:3B:A9:24:32:86:07:EA:33:C2:57:35:E1:C2:92 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:72:0e:23:87:d9:54:a4:2e:8b:8f:ad:0d:c0:93:54:dc:8f: 0e:90:cb:b6:b2:f8:ff:30:2c:f5:48:e6:9b:54:ce:22:47:03: 84:a9:8a:5a:ec:20:45:00:a5:82:df:eb:8d:4c:33:28:82:a6: 1a:3a:22:98:2a:36:a5:63:3c:87:f7:79:ed:b0:84:90:bb:81: 73:e7:4a:95:6e:00:04:30:9b:dc:d3:c7:b2:b0:0f:2e:44:95: df:11:87:87:07:6d:70:47:81:ec:af:7e:aa:59:78:bd:42:55: 8f:9d:92:8a:f6:30:af:38:2e:1f:b7:f4:d9:90:79:d3:d0:4d: 8c:a1:a9:63:83:95:69:2d:6e:67:8d:21:9e:6f:5b:bf:75:00: ca:43:2b:e6:16:a4:8e:df:47:04:49:ff:ab:ab:9b:b6:c4:c7: 9d:9e:c8:8e:ce:1c:24:c9:77:a2:ab:69:bb:21:7e:43:fa:b3: 15:04:da:cb:c5:74:a4:d7:d8:da:7e:08:80:4d:3d:e1:f4:05: 8d:17:35:f6:e0:e1:06:99:60:e5:50:14:6e:44:be:20:c1:0c: c1:6c:fb:25:9c:58:21:ca:2a:61:9d:2d:26:97:ca:8e:f8:bd: 21:9f:41:f6:74:e1:30:36:9d:73:11:e0:16:9a:af:a5:46:08: 79:ac:aa:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwNzAxMDEzMTM1WhcNMjUwNzA4MDEzMTM1WjAYMRYwFAYD VQQDEw02ODYzM2E3Ny01NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfWiyHZ9BfM/mohmrYN0Kl1f9FYschNC+Gx3tpxKlHxNHA5I5wpDfRgZTyG4 YqSnbTMu40Opn41R1JujOzNHyxWI/zoO03x3LOQ1tK6Kdp7BXUX7Zz6Mp6TLkPnT TaO6UvsFIWT2/vn2KVoISTLyVGNCJRfMESHQRA3jdBGXpmIe5TryeE2CDwJ4ciD6 50qGfJIITa7wE/CKC+Md6Q1QBNNqeuwb8yRfqWba+d3lBxj5Ly3+huHMuoNBNyw4 yr7ay1BbQS7JK22ofdnnwqn097dTOuTLsZ95UGqwFFJAcdrqzJ5MNw7kQuXXCLAw nmTLuCQvhE2dkQSd5zjWQx3jTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWeX3pH sDupJDKGB+ozwlc14cKSMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKcg4jh9lUpC6Lj60NwJNU3I8OkMu2svj/MCz1SOabVM4iRwOEqYpa 7CBFAKWC3+uNTDMogqYaOiKYKjalYzyH93ntsISQu4Fz50qVbgAEMJvc08eysA8u RJXfEYeHB21wR4Hsr36qWXi9QlWPnZKK9jCvOC4ft/TZkHnT0E2Moaljg5VpLW5n jSGeb1u/dQDKQyvmFqSO30cESf+rq5u2xMednsiOzhwkyXeiq2m7IX5D+rMVBNrL xXSk19jafgiATT3h9AWNFzX24OEGmWDlUBRuRL4gwQzBbPslnFghyiphnS0ml8qO +L0hn0H2dOEwNp1zEeAWmq+lRgh5rKqN -----END CERTIFICATE-----Generated at Wed Jul 2 06:16:10 2025 by rpki-client