$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: pKAVH/WzfSnT/T0TFYzpnqgiahMZq7hXHg939eRRYRE= Subject key identifier: D7:DB:27:EC:22:44:E9:1A:A5:7E:01:11:1B:65:0C:29:AC:CD:B9:D6 Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0B59 Signing time: Wed 02 Jul 2025 19:18:59 +0000 Manifest this update: Wed 02 Jul 2025 19:18:58 +0000 Manifest next update: Wed 09 Jul 2025 19:18:58 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: 9ZPO76d8zsBXnVXJcKh+HM9Sn/3Veq2K5gEj6gBhvi8=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: KCGgayyIaV9bw3+jN02UdfN4476+RHEdK89wpH03TIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: Jul 2 19:18:58 2025 GMT Not After : Jul 9 19:18:58 2025 GMT Subject: CN=68658623-691d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:57:d4:99:0c:90:e9:61:7a:f5:0b:62:b8: 23:bb:db:98:6e:2f:66:67:79:cb:cf:1b:e7:0d:5f: 8a:bb:0d:64:33:03:02:33:e4:c3:98:ff:5a:ac:1e: 5a:bf:5f:02:f3:6a:ed:e9:b9:f3:e2:3d:24:e0:87: a2:47:da:da:48:98:10:f1:50:1d:f0:03:ed:ff:66: ed:59:20:48:9d:bb:a8:23:e3:d1:19:3d:91:19:92: cd:3f:a2:1a:d6:5e:1e:6d:9c:14:21:df:b5:ac:53: 41:34:34:56:ff:1e:aa:9c:39:44:86:2c:3c:90:b9: a0:09:ae:d9:44:57:70:5d:75:74:94:00:d5:8e:68: 0a:7d:9c:62:a8:b7:33:7a:f3:7e:e8:93:c4:cf:ed: fe:03:84:8a:d8:74:dd:a0:4a:5c:32:ac:f9:92:2e: 9d:40:06:6c:d7:07:e2:59:98:a4:0b:dc:3c:9b:a5: 9c:34:51:6a:f1:e2:c6:d1:bd:26:98:00:89:2a:b3: cc:63:e7:29:66:ad:d7:5a:b7:07:73:eb:46:5f:75: dd:60:12:6c:d4:45:f3:32:5a:a2:b6:cf:a9:91:47: df:d3:e2:d4:4c:13:52:1d:ef:be:47:48:53:69:aa: c5:d9:48:5f:42:b0:92:36:09:5b:3b:24:31:3b:5a: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DB:27:EC:22:44:E9:1A:A5:7E:01:11:1B:65:0C:29:AC:CD:B9:D6 X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:f3:07:56:5f:b4:35:2f:d2:90:99:44:12:b1:f6:c9:44:be: b3:59:98:32:48:e3:16:31:82:16:53:93:c0:fb:26:35:0a:47: 01:2e:c0:6b:44:48:d8:8d:13:62:db:01:e4:64:ea:26:9b:7e: 30:9b:8f:9d:e6:94:cf:1b:b8:14:a8:6c:b6:4f:88:2c:c3:ad: ca:9a:4e:c7:a5:cd:6f:c3:f5:e2:60:0d:c8:37:18:ec:37:ea: f1:b7:09:6a:42:b7:90:69:ae:3b:4e:bc:de:d4:4b:d1:a5:df: a8:d6:66:95:a8:ff:d8:35:5b:36:d6:97:49:89:0e:fe:89:55: 47:06:61:f1:b9:1c:79:59:0a:bc:b2:ad:d1:37:f6:b0:f8:d2: ed:fd:c4:84:d1:bc:a1:87:14:c0:87:05:70:e7:8a:a4:51:db: fa:0b:bb:12:50:8c:bf:eb:9f:b2:2c:55:1a:5b:a0:c1:8b:31: d3:52:46:03:9b:79:ca:05:0c:2c:42:5d:2b:f8:2e:5a:5f:3d: 8c:fc:fc:21:40:2a:4c:99:67:ea:f4:1a:fb:68:28:b3:4b:df: 79:ae:53:c2:45:8c:78:8d:43:d7:17:bb:94:e4:73:15:72:ab: ce:c1:df:19:59:53:25:b3:7c:00:ff:2b:4f:63:7c:0f:37:88: d7:e8:c8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjUwNzAyMTkxODU4WhcNMjUwNzA5MTkxODU4WjAYMRYwFAYD VQQDEw02ODY1ODYyMy02OTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytRX1JkMkOlhevULYrgju9uYbi9mZ3nLzxvnDV+Kuw1kMwMCM+TDmP9arB5a v18C82rt6bnz4j0k4IeiR9raSJgQ8VAd8APt/2btWSBInbuoI+PRGT2RGZLNP6Ia 1l4ebZwUId+1rFNBNDRW/x6qnDlEhiw8kLmgCa7ZRFdwXXV0lADVjmgKfZxiqLcz evN+6JPEz+3+A4SK2HTdoEpcMqz5ki6dQAZs1wfiWZikC9w8m6WcNFFq8eLG0b0m mACJKrPMY+cpZq3XWrcHc+tGX3XdYBJs1EXzMlqits+pkUff0+LUTBNSHe++R0hT aarF2UhfQrCSNglbOyQxO1oU9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfbJ+wi ROkapX4BERtlDCmszbnWMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN8wdWX7Q1L9KQmUQSsfbJRL6zWZgySOMWMYIWU5PA+yY1CkcBLsBr REjYjRNi2wHkZOomm34wm4+d5pTPG7gUqGy2T4gsw63Kmk7Hpc1vw/XiYA3INxjs N+rxtwlqQreQaa47Trze1EvRpd+o1maVqP/YNVs21pdJiQ7+iVVHBmHxuRx5WQq8 sq3RN/aw+NLt/cSE0byhhxTAhwVw54qkUdv6C7sSUIy/65+yLFUaW6DBizHTUkYD m3nKBQwsQl0r+C5aXz2M/PwhQCpMmWfq9Br7aCizS995rlPCRYx4jUPXF7uU5HMV cqvOwd8ZWVMls3wA/ytPY3wPN4jX6Mjh -----END CERTIFICATE-----Generated at Wed Jul 2 21:57:36 2025 by rpki-client