$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: NcL9YJbCgvDhUxZIZTv7WfRtOu5YYrMETLbVQU1/uDE= Subject key identifier: 09:32:3B:19:C7:7D:B4:5B:9A:07:EF:CD:92:60:E3:93:43:34:F7:0C Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 03A0 Signing time: Sun 19 Oct 2025 02:44:45 +0000 Manifest this update: Sun 19 Oct 2025 02:44:44 +0000 Manifest next update: Sun 26 Oct 2025 02:44:44 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: yiiM60wkGJfLDXv1bpkyQAaOYhlSaAuOFzFSnfGqYzY=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Oct 19 02:44:44 2025 GMT Not After : Oct 26 02:44:44 2025 GMT Subject: CN=68f4509d-da0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:19:a5:e7:24:f7:f1:ee:44:43:69:77:6b: f8:b7:40:63:4a:c5:f5:88:b1:c4:3b:ac:a8:15:3e: cc:40:a4:2f:d4:2c:06:20:e7:0d:40:8b:85:a5:56: 59:9d:68:92:70:ea:f8:60:77:70:b3:cf:f6:69:ac: e5:12:35:dd:09:d0:4b:25:52:6f:e4:1a:5e:f5:4a: 17:4b:08:9b:89:62:6c:74:5e:80:d3:f2:6a:b3:6b: c1:49:b9:cd:e2:05:a8:ab:89:8e:0d:03:b9:b8:26: d9:5d:ce:7f:f6:4b:b2:35:d6:0e:13:5f:7b:44:32: 3a:5e:f0:cd:12:5e:a0:7c:1e:b5:08:02:51:3f:20: b3:8a:d7:6e:da:6a:1e:7e:46:9d:53:1b:00:e3:f1: f7:eb:6d:ab:f3:eb:b1:fa:ff:97:1d:85:61:46:de: ff:86:fa:1e:07:dc:8c:20:ba:51:3c:2d:2f:42:13: 3b:2b:78:a6:f1:0f:43:fe:e8:a6:f3:ec:c1:ea:bd: 6e:23:a6:a8:f0:94:14:f9:36:a7:43:51:60:b8:7f: aa:36:89:d7:48:0b:83:05:e8:52:05:13:76:0d:91: 93:da:de:cf:d1:5d:a9:9b:bd:79:d3:ba:96:99:e0: 5d:f2:ea:69:7c:8b:2f:03:2b:ab:e6:72:3a:9c:9e: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:3B:19:C7:7D:B4:5B:9A:07:EF:CD:92:60:E3:93:43:34:F7:0C X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5a:43:48:dd:ba:57:74:10:61:75:e0:c0:a6:46:dc:a3:b5: f1:38:fa:a1:19:ef:5d:21:c3:9f:a5:ed:fe:af:31:10:32:87: 2f:b4:fc:04:c4:35:5e:0f:a5:ca:52:0a:af:ff:73:b4:89:bd: e8:33:72:64:28:ec:16:e7:d1:4f:05:99:4c:40:b4:81:9e:69: 86:31:2b:f2:3a:92:a1:4c:32:ab:c7:6e:d6:1a:25:ee:77:2a: 19:2b:ec:94:1e:dc:fb:56:10:ff:c9:11:57:09:72:a4:4c:a0: 45:12:64:a4:94:93:e9:0f:ea:9b:34:69:ed:de:6e:a1:df:1e: 0c:cb:02:42:c1:e3:34:c8:18:d6:92:e2:24:98:11:97:9e:64: 73:00:f7:f4:dd:89:71:e1:a0:aa:6f:9c:27:29:5e:8c:1d:f5: e4:91:aa:80:29:37:27:c6:36:d0:48:9d:a5:c1:a1:8e:41:5d: 51:bf:04:e8:f1:4e:f0:0f:19:80:62:c3:ec:97:80:8f:ce:23: 42:32:76:c4:df:5a:57:54:5c:51:cc:66:94:a4:17:32:62:6a: 5d:14:46:c1:6d:55:7b:46:65:ec:e4:32:9f:e0:2d:2c:d1:99: eb:09:41:97:a4:ce:d7:ea:64:16:2f:f2:b1:9b:fe:99:20:c0: 87:16:3f:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUxMDE5MDI0NDQ0WhcNMjUxMDI2MDI0NDQ0WjAYMRYwFAYD VQQDEw02OGY0NTA5ZC1kYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JsZpeck9/HuRENpd2v4t0BjSsX1iLHEO6yoFT7MQKQv1CwGIOcNQIuFpVZZ nWiScOr4YHdws8/2aazlEjXdCdBLJVJv5Bpe9UoXSwibiWJsdF6A0/Jqs2vBSbnN 4gWoq4mODQO5uCbZXc5/9kuyNdYOE197RDI6XvDNEl6gfB61CAJRPyCzitdu2moe fkadUxsA4/H3622r8+ux+v+XHYVhRt7/hvoeB9yMILpRPC0vQhM7K3im8Q9D/uim 8+zB6r1uI6ao8JQU+TanQ1FguH+qNonXSAuDBehSBRN2DZGT2t7P0V2pm71507qW meBd8uppfIsvAyur5nI6nJ7uxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkyOxnH fbRbmgfvzZJg45NDNPcMMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsWkNI3bpXdBBhdeDApkbco7XxOPqhGe9dIcOfpe3+rzEQMocvtPwE xDVeD6XKUgqv/3O0ib3oM3JkKOwW59FPBZlMQLSBnmmGMSvyOpKhTDKrx27WGiXu dyoZK+yUHtz7VhD/yRFXCXKkTKBFEmSklJPpD+qbNGnt3m6h3x4MywJCweM0yBjW kuIkmBGXnmRzAPf03Ylx4aCqb5wnKV6MHfXkkaqAKTcnxjbQSJ2lwaGOQV1RvwTo 8U7wDxmAYsPsl4CPziNCMnbE31pXVFxRzGaUpBcyYmpdFEbBbVV7RmXs5DKf4C0s 0ZnrCUGXpM7X6mQWL/Kxm/6ZIMCHFj+7 -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:25 2025 by rpki-client