$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: jLitlgvrSMKBjiiMFihb+tGCO/otmUuD7asmUw1HLXc= Subject key identifier: 1D:2C:4F:18:F4:D5:83:CE:A9:39:46:3B:27:EE:C8:7E:E2:C9:9E:AC Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 03 Signing time: Sat 19 Jul 2025 08:31:20 +0000 Manifest this update: Sat 19 Jul 2025 08:31:19 +0000 Manifest next update: Sat 26 Jul 2025 08:31:19 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: m0OFb2UEPMSPTTiv0tj9nZ5tVHtNuljgMXBLKIlZ3QM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Jul 19 08:31:19 2025 GMT Not After : Jul 26 08:31:19 2025 GMT Subject: CN=687b57d8-240c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9e:a8:27:1e:79:b0:f3:db:70:26:fb:e3:a6: 15:6a:d6:bc:83:3b:93:bd:b5:d7:ca:1b:8f:2c:6f: e6:fe:76:40:3c:79:c4:ad:6b:12:53:5f:ad:00:c0: 67:b9:9c:04:9b:d3:b0:5e:95:06:c5:c3:d9:79:6f: e0:83:d4:d0:e7:0b:69:e7:0b:7a:65:66:49:ca:b7: b9:c4:ea:cb:d6:a3:47:9f:42:67:c8:a1:02:73:1c: cb:ec:df:77:38:78:c3:fa:2e:02:37:48:08:93:e3: 27:be:7a:88:7a:4e:5e:5a:e1:94:31:3f:5c:92:5f: a1:ac:a6:44:9b:0c:af:ad:6d:91:87:30:e8:c2:bd: 9c:7c:18:86:45:24:54:5a:e7:47:54:0a:b0:7f:d9: 51:60:b7:6d:05:55:dd:af:84:6c:c5:d9:be:ef:73: 60:9b:c3:de:4d:44:20:0e:d4:68:c3:d6:c1:46:e7: 30:eb:ed:ed:58:4c:b0:c4:08:e3:d7:88:12:8e:ec: cd:c7:e5:c5:37:bf:46:7c:87:85:94:76:80:ff:21: 97:c3:8c:18:a9:b4:7b:cd:4f:cc:af:6c:e8:32:a3: 28:0d:59:56:e5:d2:b2:a5:b0:6b:53:5e:5b:0e:ec: 45:38:3f:a0:79:ca:62:d6:68:ed:90:8e:90:b4:6f: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2C:4F:18:F4:D5:83:CE:A9:39:46:3B:27:EE:C8:7E:E2:C9:9E:AC X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:31:43:64:eb:34:82:31:81:55:4c:22:50:4d:51:2b:25:3b: 8d:d8:95:95:33:c0:a4:42:2f:0b:dc:91:ab:9a:23:d9:94:3b: 2d:e9:87:ec:75:df:ec:ba:67:9f:1d:1b:9e:9b:b7:a7:84:94: 47:32:5b:f9:97:6e:63:dc:ab:f5:c4:69:95:7b:03:d5:0e:b2: af:4c:04:cd:dd:6c:02:a1:88:ab:70:93:04:7d:1e:13:42:03: 8a:a4:44:56:bd:01:1d:67:ab:74:06:d7:54:f6:80:64:21:3b: 10:ef:f9:59:86:c0:51:10:46:4a:0b:90:a7:90:43:4b:d8:45: b4:7f:78:75:21:30:c4:a9:a3:c1:ee:3a:12:2c:f7:5f:2e:e1: 77:ba:1b:74:73:25:c5:14:af:4a:74:91:e6:4b:2b:08:d6:53: e7:d5:f7:6a:df:b5:94:36:f1:9a:02:ae:fb:e6:09:21:7c:97: 92:b9:04:71:f6:fb:07:2a:5f:5f:b1:49:0d:74:2e:f5:06:d3: 39:b8:60:bb:52:d4:1e:c0:86:a2:24:1a:1f:d1:f0:2d:3e:29: 1b:23:d2:65:78:15:e0:b6:8a:39:20:c4:fc:67:3f:3d:35:fd: 93:fc:64:c3:6f:67:90:1b:4c:04:97:2b:3e:4e:65:08:f9:b3: 69:21:82:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTA3MTkwODMxMTlaFw0yNTA3MjYwODMxMTlaMBgxFjAUBgNV BAMTDTY4N2I1N2Q4LTI0MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvnqgnHnmw89twJvvjphVq1ryDO5O9tdfKG48sb+b+dkA8ecStaxJTX60AwGe5 nASb07BelQbFw9l5b+CD1NDnC2nnC3plZknKt7nE6svWo0efQmfIoQJzHMvs33c4 eMP6LgI3SAiT4ye+eoh6Tl5a4ZQxP1ySX6GspkSbDK+tbZGHMOjCvZx8GIZFJFRa 50dUCrB/2VFgt20FVd2vhGzF2b7vc2Cbw95NRCAO1GjD1sFG5zDr7e1YTLDECOPX iBKO7M3H5cU3v0Z8h4WUdoD/IZfDjBiptHvNT8yvbOgyoygNWVbl0rKlsGtTXlsO 7EU4P6B5ymLWaO2QjpC0b1MtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHSxPGPTV g86pOUY7J+7IfuLJnqwwHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4xQ2TrNIIxgVVMIlBNUSslO43YlZUzwKRCLwvckauaI9mUOy3ph+x1 3+y6Z58dG56bt6eElEcyW/mXbmPcq/XEaZV7A9UOsq9MBM3dbAKhiKtwkwR9HhNC A4qkRFa9AR1nq3QG11T2gGQhOxDv+VmGwFEQRkoLkKeQQ0vYRbR/eHUhMMSpo8Hu OhIs918u4Xe6G3RzJcUUr0p0keZLKwjWU+fV92rftZQ28ZoCrvvmCSF8l5K5BHH2 +wcqX1+xSQ10LvUG0zm4YLtS1B7AhqIkGh/R8C0+KRsj0mV4FeC2ijkgxPxnPz01 /ZP8ZMNvZ5AbTASXKz5OZQj5s2khgnc= -----END CERTIFICATE-----Generated at Sun Jul 20 03:24:10 2025 by rpki-client