$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: O9/ggq/temQWwvZNa/BfvL8ww6+Qxs8MPH9SLYKR2ks= Subject key identifier: 98:70:61:4C:08:76:20:8C:A9:87:C1:E5:C7:99:FD:9B:7D:3B:34:40 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 021D Signing time: Sat 19 Jul 2025 02:24:28 +0000 Manifest this update: Sat 19 Jul 2025 02:24:28 +0000 Manifest next update: Sat 26 Jul 2025 02:24:28 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: xLKxej34t3v88HYTB8pCff4CCxCnoMt+xbFeF03mUNE=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Jul 19 02:24:28 2025 GMT Not After : Jul 26 02:24:28 2025 GMT Subject: CN=687b01dc-4a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:11:6a:d6:9c:aa:ef:21:fc:ff:5a:1f:54:8d: ae:3d:d4:5a:26:7b:a9:1b:f9:3f:95:57:a4:bf:98: e1:7c:91:8c:0d:81:ae:f1:73:5e:3c:a2:c6:65:19: 15:eb:a5:ef:7c:32:30:eb:3d:52:cb:51:b9:88:2b: 22:4c:64:6e:e4:2f:65:28:91:86:42:e6:9d:4a:98: 21:f9:0c:f0:c1:eb:eb:38:aa:73:21:6c:82:0e:dc: c3:2e:fe:b5:46:14:77:4f:cb:49:0e:06:9b:c0:d2: 4e:fe:ee:6d:85:5b:54:ff:a0:e6:ca:46:b4:e8:74: 49:a5:83:45:f3:7e:57:8f:7c:9f:45:0b:cd:cd:a4: c2:67:96:a1:91:7b:ad:2c:2a:f2:1c:62:c0:f8:07: c9:a4:08:1d:8f:0b:ee:2c:48:54:eb:4b:37:32:f6: 2f:d4:fe:bd:69:83:38:fe:53:bf:ca:c8:27:26:3c: 1c:e5:b4:23:da:58:df:ee:42:cf:b6:5a:8e:5e:82: 4c:b8:a7:71:83:9c:31:b9:ef:2f:f7:6d:d1:01:2d: 02:4f:25:4d:96:bf:ec:0c:af:d1:c8:75:67:9f:99: 77:bb:b6:c3:cd:6b:5d:63:38:5f:18:82:dd:8c:d0: c3:a5:40:20:20:ab:56:75:22:19:bb:21:2a:a3:e0: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:61:4C:08:76:20:8C:A9:87:C1:E5:C7:99:FD:9B:7D:3B:34:40 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:78:8e:39:85:fa:b4:9f:93:ef:bd:d0:4a:bd:7b:b3:6a: bd:31:71:a4:42:68:e7:51:7f:b9:1c:a6:4c:62:5e:8a:db:49: ed:1a:3a:a5:e7:3c:c5:28:66:9b:45:49:56:14:9d:9f:2b:93: f5:23:91:fe:ba:45:f6:6a:87:88:bc:1e:0f:57:9e:d6:46:f3: 0c:0e:b0:bc:71:36:da:53:cf:0f:c7:f9:ea:ff:ca:ab:d5:e2: a4:30:29:a3:b2:8e:7d:dc:7a:8a:2a:5c:55:54:89:a8:a7:b2: 84:1d:65:ce:fe:32:f6:99:2d:a9:49:36:07:e2:2f:10:ae:79: 57:74:4b:13:c2:30:05:50:10:00:8f:14:0a:f5:4c:db:c5:24: c2:b9:94:bd:e4:e5:5f:db:9e:39:44:55:1e:76:30:b6:fd:66: 18:5c:95:99:71:d8:6f:f6:64:6a:46:28:53:f1:4e:0f:f4:1b: 1a:89:e0:f5:43:6e:8c:22:84:cc:74:20:d5:28:e0:a4:c4:72: 02:87:8c:4f:42:61:13:1a:09:03:c7:1d:e1:a3:ac:bc:4f:40: 37:e5:01:8d:f4:6e:38:ef:b7:53:30:d2:4d:ca:58:7d:64:0b: e6:d6:42:d1:a7:80:ed:27:83:ce:c0:fc:37:29:e4:54:45:ef: 1b:f3:29:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwNzE5MDIyNDI4WhcNMjUwNzI2MDIyNDI4WjAYMRYwFAYD VQQDEw02ODdiMDFkYy00YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hFq1pyq7yH8/1ofVI2uPdRaJnupG/k/lVekv5jhfJGMDYGu8XNePKLGZRkV 66XvfDIw6z1Sy1G5iCsiTGRu5C9lKJGGQuadSpgh+QzwwevrOKpzIWyCDtzDLv61 RhR3T8tJDgabwNJO/u5thVtU/6Dmyka06HRJpYNF835Xj3yfRQvNzaTCZ5ahkXut LCryHGLA+AfJpAgdjwvuLEhU60s3MvYv1P69aYM4/lO/ysgnJjwc5bQj2ljf7kLP tlqOXoJMuKdxg5wxue8v923RAS0CTyVNlr/sDK/RyHVnn5l3u7bDzWtdYzhfGILd jNDDpUAgIKtWdSIZuyEqo+ApJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhwYUwI diCMqYfB5ceZ/Zt9OzRAMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeLHiOOYX6tJ+T773QSr17s2q9MXGkQmjnUX+5HKZMYl6K20ntGjql 5zzFKGabRUlWFJ2fK5P1I5H+ukX2aoeIvB4PV57WRvMMDrC8cTbaU88Px/nq/8qr 1eKkMCmjso593HqKKlxVVImop7KEHWXO/jL2mS2pSTYH4i8QrnlXdEsTwjAFUBAA jxQK9UzbxSTCuZS95OVf2545RFUedjC2/WYYXJWZcdhv9mRqRihT8U4P9BsaieD1 Q26MIoTMdCDVKOCkxHICh4xPQmETGgkDxx3ho6y8T0A35QGN9G4477dTMNJNylh9 ZAvm1kLRp4DtJ4POwPw3KeRURe8b8ykh -----END CERTIFICATE-----Generated at Sun Jul 20 06:42:10 2025 by rpki-client