$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: hUT70dX8v/nNxvRMPzSHWi3yBs9pzLDBRoicXhZOdak= Subject key identifier: 62:FC:2C:A5:E1:EC:76:AE:B8:DF:79:1E:F9:44:F9:72:FC:1A:9D:DA Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 040C Signing time: Wed 13 May 2026 00:32:07 +0000 Manifest this update: Wed 13 May 2026 00:32:07 +0000 Manifest next update: Wed 20 May 2026 00:32:07 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: HPRr/UlEJduhncTV3uq6+Kf2F9aE/uaQjSXMu2vaKWM=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: XSP7ZSZTeVaO1+WnIL3Y0mc2TaKveZBmZSaWEtYBj60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: May 13 00:32:07 2026 GMT Not After : May 20 00:32:07 2026 GMT Subject: CN=6a03c687-290f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:ac:61:64:95:2c:b5:84:0b:22:2b:bf:b3: 59:0a:40:a4:c8:92:e8:68:59:46:9a:d2:62:d5:02: 96:f9:38:9f:46:c4:86:b9:78:e3:ce:a0:98:1d:37: 30:5e:ae:49:9f:99:b3:95:99:f2:79:8e:ad:68:93: da:7c:ef:c2:1e:ce:0d:3e:50:8c:03:91:aa:d0:8f: 76:c8:a1:11:bc:f1:37:9a:38:5f:64:35:b5:6a:5e: 27:f1:2c:d4:f7:f1:43:ab:e2:e4:78:71:ea:56:22: 75:ff:55:18:cc:29:6f:38:50:e6:9a:b9:6a:0c:f8: f8:ab:e6:23:4e:7c:c5:a8:9a:33:1c:6a:16:72:39: 72:6d:f3:96:16:18:75:f6:ca:8a:07:be:fa:17:8a: 7d:30:07:00:47:5c:4f:94:94:09:b0:e3:65:d1:69: 12:dc:10:57:6e:df:95:98:f0:33:a9:65:28:f1:cf: a2:21:69:77:ab:8a:48:c6:97:30:29:f9:77:6a:c8: 4e:70:dc:a6:c7:a3:06:58:35:7b:93:3c:7b:b2:bf: 15:a6:5e:a5:6b:b7:85:31:2f:fa:7c:46:72:16:3f: 36:86:de:63:53:c5:a0:b3:19:17:78:36:91:03:8e: 01:dd:39:b1:0c:51:d1:7d:39:14:29:89:51:aa:8a: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FC:2C:A5:E1:EC:76:AE:B8:DF:79:1E:F9:44:F9:72:FC:1A:9D:DA X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0d:fd:d5:d2:91:2e:da:12:58:a8:eb:72:6d:06:87:7f:c1: 12:db:9f:e0:0e:03:29:b0:88:21:d7:c5:e0:b0:0e:f6:d4:00: fd:b4:fe:8f:4c:aa:e3:4c:6f:42:a1:97:08:4e:f2:d8:02:b8: fd:b7:3e:26:1d:42:83:fa:2a:6a:19:b4:f9:98:f7:ac:ac:2c: a2:c3:43:09:f6:1b:5b:6f:d5:96:16:c1:98:ef:cc:c1:75:ae: 68:2f:c2:b1:f0:47:86:8f:40:36:6c:a0:66:69:7e:23:b1:c8: cc:d0:be:9f:70:d2:f3:17:78:a1:31:de:08:43:f9:50:c0:c4: 39:1e:d0:6c:4d:76:f0:fb:df:77:d4:0a:60:06:c4:00:ba:cd: d1:1d:e7:f1:88:4a:90:f9:72:f7:01:19:c3:bb:2d:01:e4:f9: 72:b2:4b:1e:47:ac:15:3a:b1:d9:9d:51:5f:6a:42:22:b1:50: 5b:86:8f:09:06:a3:c0:71:fa:c8:ae:2e:94:47:6a:33:aa:91: 59:8a:b0:e5:67:0c:ea:66:9b:9d:73:df:c5:cf:ae:f6:0b:95: 10:93:ce:c8:95:e5:4b:00:cf:e2:1d:d3:81:25:e1:07:f3:04: 64:8c:18:03:34:57:d0:72:be:10:60:95:9a:78:7d:9b:c8:42: 17:f9:fb:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjYwNTEzMDAzMjA3WhcNMjYwNTIwMDAzMjA3WjAYMRYwFAYD VQQDEw02YTAzYzY4Ny0yOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm12sYWSVLLWECyIrv7NZCkCkyJLoaFlGmtJi1QKW+TifRsSGuXjjzqCYHTcw Xq5Jn5mzlZnyeY6taJPafO/CHs4NPlCMA5Gq0I92yKERvPE3mjhfZDW1al4n8SzU 9/FDq+LkeHHqViJ1/1UYzClvOFDmmrlqDPj4q+YjTnzFqJozHGoWcjlybfOWFhh1 9sqKB776F4p9MAcAR1xPlJQJsONl0WkS3BBXbt+VmPAzqWUo8c+iIWl3q4pIxpcw Kfl3ashOcNymx6MGWDV7kzx7sr8Vpl6la7eFMS/6fEZyFj82ht5jU8WgsxkXeDaR A44B3TmxDFHRfTkUKYlRqoruFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGL8LKXh 7HauuN95HvlE+XL8Gp3aMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKg391dKRLtoSWKjrcm0Gh3/BEtuf4A4DKbCIIdfF4LAO9tQA/bT+j0yq40xv QqGXCE7y2AK4/bc+Jh1Cg/oqahm0+Zj3rKwsosNDCfYbW2/VlhbBmO/MwXWuaC/C sfBHho9ANmygZml+I7HIzNC+n3DS8xd4oTHeCEP5UMDEOR7QbE128Pvfd9QKYAbE ALrN0R3n8YhKkPly9wEZw7stAeT5crJLHkesFTqx2Z1RX2pCIrFQW4aPCQajwHH6 yK4ulEdqM6qRWYqw5WcM6mabnXPfxc+u9guVEJPOyJXlSwDP4h3TgSXhB/MEZIwY AzRX0HK+EGCVmnh9m8hCF/n7bw== -----END CERTIFICATE-----Generated at Wed May 13 07:19:02 2026 by rpki-client