$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft File: agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json) Hash identifier: Ft7U6sV9Pwa8DDO/CBtX/4pgI4Cm3PsHAzwhn4GTGpI= Subject key identifier: 70:FD:4A:3B:43:1C:11:7E:57:BE:25:1E:AC:D6:95:16:D7:A5:4A:02 Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE Certificate issuer: /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft Manifest number: 6D Signing time: Thu 05 Jun 2025 06:19:37 +0000 Manifest this update: Thu 05 Jun 2025 06:19:36 +0000 Manifest next update: Thu 12 Jun 2025 06:19:36 +0000 Files and hashes: 1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: LLCxK4ZS3H5yo4SS7vu9TrMMiAMAYnprCkzvQkwviqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE Validity Not Before: Jun 5 06:19:36 2025 GMT Not After : Jun 12 06:19:36 2025 GMT Subject: CN=684136f8-3f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:54:f9:aa:91:e6:48:7c:f2:3c:bb:08:95: a0:bd:7c:1a:25:d2:9e:96:9b:8d:ad:9e:6c:d3:63: c3:49:db:ae:90:0d:4d:2a:7d:55:fd:8e:49:f1:a9: 9d:60:68:41:38:28:ac:1f:8c:e8:40:ee:be:53:63: 46:9c:ca:dc:53:f0:37:1e:27:7c:c9:bc:3a:73:e6: c5:d3:9a:21:96:b0:eb:f4:b2:7c:60:51:d5:fb:18: f5:99:17:09:7c:51:c0:41:39:71:6a:0b:88:bf:7a: 6e:35:24:9a:98:51:d1:b1:db:85:c6:2b:0a:a3:9e: 70:78:46:b5:3f:72:f3:9e:43:9b:29:f9:f4:9c:e2: 1b:a5:0b:a9:a9:7c:9f:24:c9:9c:11:7a:1b:a3:26: 94:2f:74:76:be:4b:d1:96:9d:5c:06:05:82:8b:9c: 94:73:8e:de:8a:36:ba:22:33:8b:cc:d6:7e:17:ad: ec:32:3b:96:fc:e4:8a:5f:33:19:0d:1f:06:cf:0d: 8a:45:7f:49:fe:22:71:f8:a1:5d:51:b8:94:09:2f: 6c:40:f3:83:c3:95:0a:cc:eb:dd:2c:db:ce:1d:b6: e3:88:75:e2:1c:35:e6:0e:aa:cb:b6:4f:12:ee:cf: a7:f8:b7:15:a9:72:65:6f:d1:52:cf:8e:6e:79:04: 0a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:4A:3B:43:1C:11:7E:57:BE:25:1E:AC:D6:95:16:D7:A5:4A:02 X509v3 Authority Key Identifier: keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:88:d0:34:d1:aa:4c:4f:c5:9d:7c:ea:d2:f2:3a:27:09:4a: bc:e9:44:72:e7:95:35:e6:dc:14:82:a1:60:d0:f4:a0:81:45: 52:2e:e6:77:f9:5d:6a:9d:8d:31:22:a8:4e:1b:8d:21:e4:cc: d6:e9:e5:84:af:bd:f9:93:7e:5d:01:f9:47:b9:bc:ef:c3:22: 65:24:39:bb:c1:0d:6f:69:81:30:1d:78:4a:6e:ae:48:48:41: 6c:77:56:b0:dc:7d:5b:c2:b7:7c:40:e0:ad:12:2f:06:99:53: 44:7d:4e:3f:39:fa:6b:d7:6c:1c:70:37:5e:80:dd:0e:39:85: c0:1e:07:6b:28:49:46:17:3b:3f:bf:ec:12:7e:dc:59:5b:96: 70:cd:3c:13:5c:f6:61:32:9e:4b:c4:04:b9:b7:43:19:f9:af: 63:6d:b6:7d:d1:f2:89:12:d5:76:2d:d3:f2:8d:f2:89:b0:fa: 2e:1c:49:d8:80:e4:a2:35:96:fc:54:b8:36:73:42:c9:6f:30: 15:5f:dd:7d:0b:4d:e8:e4:40:8c:be:28:6a:5a:c6:30:3b:7a: ff:90:21:a0:a9:d3:4b:d4:8f:8e:93:f6:5c:ba:11:a6:ac:48: 21:e9:1a:6b:cb:5d:15:6c:21:7b:e2:dd:4a:aa:1d:6c:ae:99: b8:8d:7f:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjkxQTExMC8GA1UEBRMoNkEwNEVCMzRBM0RGRjA2NUZEMEVGMzEyRTJDRTM4M0ZB QjUwMjRERTAeFw0yNTA2MDUwNjE5MzZaFw0yNTA2MTIwNjE5MzZaMBgxFjAUBgNV BAMTDTY4NDEzNmY4LTNmOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn91T5qpHmSHzyPLsIlaC9fBol0p6Wm42tnmzTY8NJ266QDU0qfVX9jknxqZ1g aEE4KKwfjOhA7r5TY0acytxT8DceJ3zJvDpz5sXTmiGWsOv0snxgUdX7GPWZFwl8 UcBBOXFqC4i/em41JJqYUdGx24XGKwqjnnB4RrU/cvOeQ5sp+fSc4hulC6mpfJ8k yZwRehujJpQvdHa+S9GWnVwGBYKLnJRzjt6KNroiM4vM1n4XrewyO5b85IpfMxkN HwbPDYpFf0n+InH4oV1RuJQJL2xA84PDlQrM690s284dtuOIdeIcNeYOqsu2TxLu z6f4txWpcmVv0VLPjm55BAoPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcP1KO0Mc EX5XviUerNaVFtelSgIwHwYDVR0jBBgwFoAUagTrNKPf8GX9DvMS4s44P6tQJN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTFBLzQ3ODkzMTc4QTE5 RDExRUZCRUI1Njk3REM0RjlBRTAyL2FnVHJOS1BmOEdYOUR2TVM0czQ0UDZ0UUpO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWdUck5LUGY4R1g5RHZNUzRzNDRQNnRRSk40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 OTFBLzQ3ODkzMTc4QTE5RDExRUZCRUI1Njk3REM0RjlBRTAyL2FnVHJOS1BmOEdY OUR2TVM0czQ0UDZ0UUpONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2I0DTRqkxPxZ186tLyOicJSrzpRHLnlTXm3BSCoWDQ9KCBRVIu5nf5 XWqdjTEiqE4bjSHkzNbp5YSvvfmTfl0B+Ue5vO/DImUkObvBDW9pgTAdeEpurkhI QWx3VrDcfVvCt3xA4K0SLwaZU0R9Tj85+mvXbBxwN16A3Q45hcAeB2soSUYXOz+/ 7BJ+3FlblnDNPBNc9mEynkvEBLm3Qxn5r2Nttn3R8okS1XYt0/KN8omw+i4cSdiA 5KI1lvxUuDZzQslvMBVf3X0LTejkQIy+KGpaxjA7ev+QIaCp00vUj46T9ly6Eaas SCHpGmvLXRVsIXvi3UqqHWyumbiNf5g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:57:39 2025 by rpki-client