$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: GB0unB6sgODdYmOqUo/M0866KIYz17WeZUDxNsqWlPg= Subject key identifier: DF:D3:CB:B9:6D:44:46:00:B2:D4:04:C5:09:02:61:AA:3D:A6:30:A9 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0383 Signing time: Sat 23 Aug 2025 01:05:31 +0000 Manifest this update: Sat 23 Aug 2025 01:05:30 +0000 Manifest next update: Sat 30 Aug 2025 01:05:30 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: Dehe7FiXsspmPKGW3BeXwlkAfWgTyt2M4H1+MnBtQHc=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Aug 23 01:05:30 2025 GMT Not After : Aug 30 01:05:30 2025 GMT Subject: CN=68a913db-0f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:6c:c4:2f:d0:7c:c8:1d:80:3a:82:7d:e5: 22:72:3e:65:af:01:81:53:fb:25:4a:49:c4:79:cf: 03:c9:2e:dd:a0:99:a9:a6:40:3a:97:df:b7:dc:d1: 93:38:2b:1b:05:8f:1e:d6:7e:2a:06:81:c8:67:9c: 8b:ed:b3:c6:be:39:f3:01:c2:45:eb:b0:3d:e7:a4: 49:c4:5f:5d:d0:22:53:b3:2b:6f:7f:9d:ef:b4:29: c1:6c:73:2d:0f:41:63:88:52:9a:b8:c9:56:86:64: 03:a8:1b:e9:69:f1:17:3b:21:95:db:39:8e:6d:7c: b2:97:78:da:40:bb:fe:67:1f:e4:05:17:60:36:8a: ce:c3:4d:05:67:60:c2:a4:ef:80:c0:19:ae:00:53: 8e:0f:31:5f:d5:dc:4d:0b:18:1f:72:52:9f:f3:ff: 76:58:1f:71:99:5d:4c:16:8f:6f:2e:87:b8:24:45: 78:e3:36:75:e8:8b:22:84:a8:b3:dd:1b:af:44:ba: 76:c1:db:f5:40:06:4a:ae:b1:9e:b2:e9:af:66:ed: 59:29:9c:b8:0c:87:ec:ae:95:52:7b:a3:ab:c3:c9: 73:d7:9e:e9:42:8e:2e:0b:39:7f:64:ba:aa:80:6f: 62:8f:c0:a1:3d:e2:28:84:6d:80:66:be:d1:92:ca: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D3:CB:B9:6D:44:46:00:B2:D4:04:C5:09:02:61:AA:3D:A6:30:A9 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e9:6e:69:4d:9b:ef:a3:df:c7:16:b1:74:a1:17:9e:22:2f: d4:8a:31:2f:d3:f4:6f:3f:f2:c1:7e:46:77:b1:15:43:0e:78: 76:6d:2b:81:05:27:b8:db:58:f5:8b:93:13:f8:b5:2f:9e:4d: 76:28:fa:ae:81:e2:41:c1:43:97:3c:c1:13:44:b7:3b:c3:c0: 28:f2:dd:40:71:59:7a:09:a3:b6:cb:94:65:8c:87:d9:ba:32: 1f:09:17:37:33:5e:cb:94:2f:4e:7c:2b:7a:7d:c6:fc:a8:3f: c2:27:2d:d1:60:3f:9f:e4:3e:b0:6f:fc:b8:76:27:8a:bd:06: 46:c5:a1:bb:43:63:2d:b7:ed:c2:17:d1:f0:bc:9f:87:6e:cf: 69:73:13:dc:75:87:26:b5:9d:c9:75:8f:04:32:d9:2b:73:b6: 9c:8a:a6:99:e4:50:0c:5a:99:2f:a2:d1:d9:34:66:85:47:26: 5f:14:32:af:b0:11:1b:c9:59:87:35:2a:24:67:7a:d1:ce:fd: 52:42:19:34:2e:64:9f:e7:30:18:e6:d7:76:32:93:92:40:68: da:47:ca:31:46:60:75:02:71:76:dc:72:bb:99:0b:d1:27:77: 0d:95:27:89:90:50:6a:68:72:d7:54:00:d9:26:97:67:b4:94: 1c:e0:39:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwODIzMDEwNTMwWhcNMjUwODMwMDEwNTMwWjAYMRYwFAYD VQQDEw02OGE5MTNkYi0wZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOdsxC/QfMgdgDqCfeUicj5lrwGBU/slSknEec8DyS7doJmppkA6l9+33NGT OCsbBY8e1n4qBoHIZ5yL7bPGvjnzAcJF67A956RJxF9d0CJTsytvf53vtCnBbHMt D0FjiFKauMlWhmQDqBvpafEXOyGV2zmObXyyl3jaQLv+Zx/kBRdgNorOw00FZ2DC pO+AwBmuAFOODzFf1dxNCxgfclKf8/92WB9xmV1MFo9vLoe4JEV44zZ16IsihKiz 3RuvRLp2wdv1QAZKrrGesumvZu1ZKZy4DIfsrpVSe6Orw8lz157pQo4uCzl/ZLqq gG9ij8ChPeIohG2AZr7RksoRIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/Ty7lt REYAstQExQkCYao9pjCpMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ6W5pTZvvo9/HFrF0oReeIi/UijEv0/RvP/LBfkZ3sRVDDnh2bSuB BSe421j1i5MT+LUvnk12KPqugeJBwUOXPMETRLc7w8Ao8t1AcVl6CaO2y5RljIfZ ujIfCRc3M17LlC9OfCt6fcb8qD/CJy3RYD+f5D6wb/y4dieKvQZGxaG7Q2Mtt+3C F9HwvJ+Hbs9pcxPcdYcmtZ3JdY8EMtkrc7aciqaZ5FAMWpkvotHZNGaFRyZfFDKv sBEbyVmHNSokZ3rRzv1SQhk0LmSf5zAY5td2MpOSQGjaR8oxRmB1AnF23HK7mQvR J3cNlSeJkFBqaHLXVADZJpdntJQc4Dlu -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:12 2025 by rpki-client