$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: diRZ+vLnFoRTRb8MtTxU3YtGQC6XtJjj/iqMkPrszC4= Subject key identifier: CF:DA:46:8B:23:EC:EA:A4:B4:B3:E2:89:DB:D1:E4:8B:F2:D3:7B:FF Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 034F Signing time: Sun 11 May 2025 00:34:02 +0000 Manifest this update: Sun 11 May 2025 00:34:02 +0000 Manifest next update: Sun 18 May 2025 00:34:02 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: qL3FPajWjQCN2tpyhR5JpkikhEH6snjgT5DrdQofvfc=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: May 11 00:34:02 2025 GMT Not After : May 18 00:34:02 2025 GMT Subject: CN=681ff07a-9bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:9d:dd:38:48:1a:ac:13:c0:c7:9e:0d:f7: ec:2e:63:29:7b:33:27:40:e4:97:b4:0e:07:b1:18: e5:c1:fd:07:b9:0a:a9:86:c7:40:da:83:65:ac:2a: 4c:9a:7d:d9:0a:e0:0f:c6:29:f0:c7:cb:77:b7:12: e5:98:b3:5e:cd:49:b6:7e:0c:6c:27:cb:a1:6c:a6: cf:3e:4e:70:68:d4:73:0f:7b:d1:8a:3b:fe:d5:cb: f2:05:53:40:b6:d6:ad:06:fc:a9:a2:3c:bb:1a:bd: 5b:49:b7:a7:b1:92:bf:7d:46:f3:a7:50:11:0d:25: ba:dd:f3:eb:8b:c2:29:c7:09:03:3e:71:e8:48:9b: 75:a9:98:65:b2:c5:76:6c:cc:f5:09:18:9d:43:8d: bf:4c:10:66:4c:36:57:9f:fc:e8:19:7f:42:94:ca: aa:c9:93:1e:7c:05:cc:74:67:c1:63:53:87:b6:c6: 3e:df:37:d0:48:dc:c0:8d:c9:36:a7:2f:ff:39:f3: 64:3a:f2:e1:b0:a2:78:34:04:80:01:49:d2:dd:47: 52:e0:79:a5:27:9a:0f:95:d2:f2:62:c0:d7:04:f6: d7:23:c5:ca:47:7d:d6:bb:ea:d9:a3:45:d5:31:e3: a2:89:ff:97:85:20:c2:99:30:4c:33:15:c2:c6:5f: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:46:8B:23:EC:EA:A4:B4:B3:E2:89:DB:D1:E4:8B:F2:D3:7B:FF X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a0:18:6f:d4:78:ca:f7:bf:49:8f:bc:41:61:3d:50:99:3e: d8:ef:bb:a2:af:5f:6b:b8:6c:f4:8e:94:7f:13:1e:13:81:82: ae:c2:50:da:4c:a4:5e:49:8f:56:f7:c3:58:37:c5:84:a2:f4: 1a:5f:b0:c8:80:34:ce:be:56:fd:50:32:68:53:c9:5b:36:f8: 10:e1:af:2d:42:de:64:13:4b:29:bc:54:1a:20:09:f8:55:19: 59:02:aa:3c:74:b4:48:fe:e9:2d:4d:a6:2e:42:f8:48:e3:f0: dc:3e:e0:99:62:24:df:17:28:fd:d0:f1:86:52:49:76:ef:db: 8c:e8:20:7e:d2:6e:17:8a:62:ec:c9:80:5f:48:0b:93:69:05: 05:80:04:be:68:bb:81:65:62:2c:fd:97:87:82:c6:87:39:74: 8a:b3:23:32:0d:00:fe:69:d6:ba:5f:2f:c0:8c:bb:97:c5:cb: b8:1a:bb:b1:c6:d7:26:93:85:b3:1d:80:be:7a:c5:9c:45:ac: 5d:ea:79:62:42:cd:25:9d:af:ad:08:2b:5b:12:4c:2f:c1:27: f0:63:4f:ce:b6:34:37:df:e6:0f:cb:fd:1c:ed:45:e0:00:7c: d9:0e:4f:a7:ea:88:66:14:1b:e9:ec:b8:b0:14:87:23:72:e7: 0e:1e:98:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwNTExMDAzNDAyWhcNMjUwNTE4MDAzNDAyWjAYMRYwFAYD VQQDEw02ODFmZjA3YS05YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN6d3ThIGqwTwMeeDffsLmMpezMnQOSXtA4HsRjlwf0HuQqphsdA2oNlrCpM mn3ZCuAPxinwx8t3txLlmLNezUm2fgxsJ8uhbKbPPk5waNRzD3vRijv+1cvyBVNA ttatBvypojy7Gr1bSbensZK/fUbzp1ARDSW63fPri8IpxwkDPnHoSJt1qZhlssV2 bMz1CRidQ42/TBBmTDZXn/zoGX9ClMqqyZMefAXMdGfBY1OHtsY+3zfQSNzAjck2 py//OfNkOvLhsKJ4NASAAUnS3UdS4HmlJ5oPldLyYsDXBPbXI8XKR33Wu+rZo0XV MeOiif+XhSDCmTBMMxXCxl8wTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/aRosj 7OqktLPiidvR5Ivy03v/MB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVoBhv1HjK979Jj7xBYT1QmT7Y77uir19ruGz0jpR/Ex4TgYKuwlDa TKReSY9W98NYN8WEovQaX7DIgDTOvlb9UDJoU8lbNvgQ4a8tQt5kE0spvFQaIAn4 VRlZAqo8dLRI/uktTaYuQvhI4/DcPuCZYiTfFyj90PGGUkl279uM6CB+0m4XimLs yYBfSAuTaQUFgAS+aLuBZWIs/ZeHgsaHOXSKsyMyDQD+ada6Xy/AjLuXxcu4Grux xtcmk4WzHYC+esWcRaxd6nliQs0lna+tCCtbEkwvwSfwY0/OtjQ33+YPy/0c7UXg AHzZDk+n6ohmFBvp7LiwFIcjcucOHpix -----END CERTIFICATE-----Generated at Mon May 12 21:10:32 2025 by rpki-client