$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: UTyN5f9s2U/vNfzn8RBRfyhcxhErp2Ld7TvXx34wSts= Subject key identifier: 7B:B7:29:90:65:50:F6:5A:B7:9A:D6:BC:18:F7:48:B0:91:6F:A9:A9 Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 08:15:28 +0000 Manifest this update: Sat 23 Aug 2025 08:15:27 +0000 Manifest next update: Sat 30 Aug 2025 08:15:27 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: unZ2D7PkyX6mne6ZPTw97M3dlYtKWqF9iJ3Y+JcvQt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Aug 23 08:15:27 2025 GMT Not After : Aug 30 08:15:27 2025 GMT Subject: CN=68a9789f-b5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:dc:7f:2d:fb:61:f3:47:80:2b:17:72:cc: cd:9f:db:cc:ab:85:a2:5f:16:25:73:f3:bc:e5:7e: db:f2:8f:b6:c0:cb:e4:04:86:10:9f:85:82:d4:6b: 83:a1:79:aa:e8:52:52:10:95:e2:c9:1c:8e:1b:17: ba:57:5d:dc:22:60:08:d6:4f:b1:22:d2:8d:fb:69: 06:21:50:4b:3d:c4:59:f0:c0:2c:73:31:fe:7f:da: 25:d5:bd:9f:fd:7a:cc:b4:e7:e2:3d:c4:71:c2:86: 04:50:e4:2d:62:d2:a4:00:ac:35:79:09:1c:ae:47: ca:9f:4c:40:9c:d9:67:24:25:98:24:31:bc:77:ee: 72:25:78:88:3d:06:26:ef:ec:46:47:68:b2:c4:a9: b3:1e:82:83:c5:33:57:d7:90:c7:8b:a0:c2:97:c2: 37:63:f9:72:45:9a:37:4b:bd:78:42:9a:6d:25:73: d4:9e:48:47:45:de:77:f2:00:03:dc:fb:ed:7e:04: ba:90:b7:94:b7:3a:2b:8b:c1:17:9a:77:43:63:7d: b1:8f:d3:b5:ed:c7:4b:3e:33:91:0f:65:8c:3a:89: 71:75:dd:b3:c3:75:c6:ea:d5:6a:9b:78:81:f7:da: e2:b5:10:ea:61:b3:ad:1a:19:1e:dd:90:1d:d6:80: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B7:29:90:65:50:F6:5A:B7:9A:D6:BC:18:F7:48:B0:91:6F:A9:A9 X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:62:eb:dd:b3:60:7e:df:04:6f:50:d8:16:c5:f8:79:2e:30: d9:b9:53:9b:91:d3:b9:50:9a:c6:58:50:28:29:36:61:50:89: 14:ba:37:f2:f6:03:44:fb:ca:35:72:4e:7b:ce:7d:01:6d:d3: 5e:71:00:a6:cb:0f:5c:e7:4a:bc:e2:0b:3f:84:c5:a6:ed:92: 03:09:ce:79:f7:ed:72:e0:30:80:f5:de:bb:14:7b:23:56:42: 4a:cf:64:48:bd:28:90:df:66:c2:5f:85:29:19:9a:2e:d9:5f: c7:49:3d:af:1a:9d:17:fc:09:33:d9:8c:95:a3:f1:45:f3:40: 36:ba:ad:6e:8e:77:67:1a:60:54:d7:30:3b:5c:d5:67:3f:fb: 69:e2:55:02:3f:de:63:42:72:8c:b7:08:c1:fc:67:01:5b:35: da:95:f0:ad:2c:7b:99:38:65:3e:d3:01:b7:6d:b7:6b:53:f5: 1c:84:d7:57:60:95:5c:e5:19:c7:0d:3b:1e:f0:5b:81:50:72: 24:08:9b:ca:07:a0:7c:ca:96:2f:1f:e5:db:22:ca:71:8a:4b: 9d:58:ff:0b:42:e3:83:ad:e5:a5:d3:11:d4:0d:88:d1:4d:62: 96:71:ad:6a:88:fc:47:eb:ce:c4:f9:eb:27:a9:dd:62:2e:47: c2:d4:b5:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTA4MjMwODE1MjdaFw0yNTA4MzAwODE1MjdaMBgxFjAUBgNV BAMTDTY4YTk3ODlmLWI1YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfzNx/Lfth80eAKxdyzM2f28yrhaJfFiVz87zlftvyj7bAy+QEhhCfhYLUa4Oh earoUlIQleLJHI4bF7pXXdwiYAjWT7Ei0o37aQYhUEs9xFnwwCxzMf5/2iXVvZ/9 esy05+I9xHHChgRQ5C1i0qQArDV5CRyuR8qfTECc2WckJZgkMbx37nIleIg9Bibv 7EZHaLLEqbMegoPFM1fXkMeLoMKXwjdj+XJFmjdLvXhCmm0lc9SeSEdF3nfyAAPc ++1+BLqQt5S3OiuLwRead0NjfbGP07Xtx0s+M5EPZYw6iXF13bPDdcbq1WqbeIH3 2uK1EOphs60aGR7dkB3WgChPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe7cpkGVQ 9lq3mta8GPdIsJFvqakwHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVi692zYH7fBG9Q2BbF+HkuMNm5U5uR07lQmsZYUCgpNmFQiRS6N/L2 A0T7yjVyTnvOfQFt015xAKbLD1znSrziCz+ExabtkgMJznn37XLgMID13rsUeyNW QkrPZEi9KJDfZsJfhSkZmi7ZX8dJPa8anRf8CTPZjJWj8UXzQDa6rW6Od2caYFTX MDtc1Wc/+2niVQI/3mNCcoy3CMH8ZwFbNdqV8K0se5k4ZT7TAbdtt2tT9RyE11dg lVzlGccNOx7wW4FQciQIm8oHoHzKli8f5dsiynGKS51Y/wtC44Ot5aXTEdQNiNFN YpZxrWqI/EfrzsT56yep3WIuR8LUtZs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:13 2025 by rpki-client