$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: ohnzWi7fxxGZU9u0RwuvWI1IGetpQz28a618vHb+Ang= Subject key identifier: 77:4E:9B:FA:55:7F:A4:74:37:5F:36:6E:44:F6:B0:56:00:F0:A3:DF Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 02BC Signing time: Thu 21 May 2026 01:30:38 +0000 Manifest this update: Thu 21 May 2026 01:30:38 +0000 Manifest next update: Thu 28 May 2026 01:30:38 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: 94TZZBmGDnk+u4fpOfpTx74JvibuFZ12Vun2TTnL1DQ=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: May 21 01:30:38 2026 GMT Not After : May 28 01:30:38 2026 GMT Subject: CN=6a0e603e-6f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:f1:dc:2c:8d:84:0d:37:e8:e7:2c:60:03: 5c:77:44:3d:a9:d8:d1:3f:75:77:c9:1c:c5:19:4d: 21:02:61:28:af:ae:5a:e8:36:7d:65:fe:cd:00:7d: 50:14:62:eb:14:af:4d:f7:19:dd:e7:fe:78:86:ad: 05:db:7e:e8:a4:c3:09:7f:8d:77:10:a4:25:70:91: 72:fc:62:df:dc:7a:98:49:89:78:fd:2c:fb:ad:c9: f6:45:44:69:91:e1:7c:4c:49:7c:85:65:c6:58:03: 31:33:ef:48:16:a6:6c:29:f1:e7:20:50:3d:84:21: c9:aa:8b:02:55:da:ca:9f:84:40:a1:4b:1a:20:b4: a1:f5:18:17:e6:fb:2f:7c:ad:9f:7f:e1:ed:75:69: 6e:22:08:a5:e8:01:c2:c0:e0:74:9d:60:f5:f4:dd: a3:b4:43:e1:f1:3a:99:90:c8:9d:83:d9:bc:e7:30: 62:81:52:d5:bc:26:50:56:e2:90:60:6d:57:32:c8: 7f:37:37:d7:5f:de:d0:9d:4a:e2:49:80:22:b2:05: c4:83:54:5d:ff:b2:ee:06:8f:b3:f8:c9:42:25:42: 56:1b:c6:8f:64:8f:ba:fc:18:8b:ca:cf:54:86:2c: 2e:0a:f7:a0:90:7b:5c:6b:db:45:e5:f3:82:75:63: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:9B:FA:55:7F:A4:74:37:5F:36:6E:44:F6:B0:56:00:F0:A3:DF X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:29:fe:fd:2e:a1:02:fe:1d:ea:a5:d8:cf:89:bc:e6:a7:4e: b7:4c:b5:ab:69:08:9d:25:47:ab:7e:8d:12:4e:bc:2e:d4:3e: cd:14:70:1c:a1:60:2e:64:45:7c:d8:60:b5:87:7f:1d:c5:b1: cf:b3:0c:2d:48:71:8b:3b:84:d0:25:bc:11:57:79:4b:70:db: 23:53:44:e6:71:d1:a7:f4:5f:47:98:30:1c:44:f4:6e:f5:5e: 87:e8:e6:44:61:94:9b:8c:00:dc:33:61:4f:e2:92:a0:1e:44: 23:eb:0a:72:15:6d:b3:56:de:37:8b:b3:05:f2:29:f2:15:51: ac:58:da:14:f7:a6:d4:54:9a:28:10:d4:f5:16:e1:28:bf:70: f4:c5:ea:a2:87:5c:31:2f:82:e0:d6:f6:b7:51:71:c4:59:b8: cf:ae:85:cf:8d:5e:f1:bf:fc:9a:7c:ef:95:2f:4b:56:1c:be: 91:e5:ab:09:5c:cf:e3:b1:ab:76:86:ab:4f:2b:8a:b4:8c:5e: 48:6e:92:49:ee:4b:bf:e5:5c:c2:17:7e:02:7b:df:4a:ba:8d: ba:a7:d7:25:ce:32:d0:74:c4:86:db:63:9b:88:78:33:3e:64: ba:ab:38:6d:2d:dc:f8:ec:c8:d8:b1:69:64:58:43:b8:85:25: 4f:b6:5e:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjYwNTIxMDEzMDM4WhcNMjYwNTI4MDEzMDM4WjAYMRYwFAYD VQQDEw02YTBlNjAzZS02ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0Tx3CyNhA036OcsYANcd0Q9qdjRP3V3yRzFGU0hAmEor65a6DZ9Zf7NAH1Q FGLrFK9N9xnd5/54hq0F237opMMJf413EKQlcJFy/GLf3HqYSYl4/Sz7rcn2RURp keF8TEl8hWXGWAMxM+9IFqZsKfHnIFA9hCHJqosCVdrKn4RAoUsaILSh9RgX5vsv fK2ff+HtdWluIgil6AHCwOB0nWD19N2jtEPh8TqZkMidg9m85zBigVLVvCZQVuKQ YG1XMsh/NzfXX97QnUriSYAisgXEg1Rd/7LuBo+z+MlCJUJWG8aPZI+6/BiLys9U hiwuCvegkHtca9tF5fOCdWN/XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdOm/pV f6R0N182bkT2sFYA8KPfMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACin+/S6hAv4d6qXYz4m85qdOt0y1q2kInSVHq36NEk68LtQ+zRRwHKFgLmRF fNhgtYd/HcWxz7MMLUhxizuE0CW8EVd5S3DbI1NE5nHRp/RfR5gwHET0bvVeh+jm RGGUm4wA3DNhT+KSoB5EI+sKchVts1beN4uzBfIp8hVRrFjaFPem1FSaKBDU9Rbh KL9w9MXqoodcMS+C4Nb2t1FxxFm4z66Fz41e8b/8mnzvlS9LVhy+keWrCVzP47Gr doarTyuKtIxeSG6SSe5Lv+Vcwhd+AnvfSrqNuqfXJc4y0HTEhttjm4h4Mz5kuqs4 bS3c+OzI2LFpZFhDuIUlT7Zesw== -----END CERTIFICATE-----Generated at Thu May 21 09:36:07 2026 by rpki-client