$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: wki/tif+ZBlCvZs/hgX1VUKsSH9rHVV4JWzsrXO4Dio= Subject key identifier: A0:72:C0:FB:C8:04:E3:F8:7F:4F:F8:20:9D:88:6E:89:F5:6E:AD:93 Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 18C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 18AB Signing time: Fri 30 May 2025 16:40:15 +0000 Manifest this update: Fri 30 May 2025 16:40:15 +0000 Manifest next update: Fri 06 Jun 2025 16:40:15 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: nOKbAsSBoeEa6o4c/C2fz1WiJhdZLcMgrY8PkQmKDoo=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: rBSQRTDzDNTdo/Fn8PCTBFu4JOqtjUs4xyOXhorxe8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6336 (0x18c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Validity Not Before: May 30 16:40:15 2025 GMT Not After : Jun 6 16:40:15 2025 GMT Subject: CN=6839df6f-721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:fa:16:8c:3f:0f:75:33:0a:99:b8:dd:3f: a1:62:2c:84:c9:16:0e:47:55:3e:64:8a:52:b3:46: 2b:51:92:7b:43:ad:30:3d:72:4b:7a:89:10:46:07: 1d:65:6c:c6:a9:2c:f4:c5:bd:8e:f3:cb:f6:0b:da: d4:20:13:52:d3:a3:0a:fe:16:25:49:d5:0a:7f:29: 97:e5:aa:8d:4f:72:b4:0e:8e:0b:7e:14:28:b7:1d: 35:8f:1f:75:4d:8c:f5:89:cb:5b:56:63:39:e4:f3: 3c:65:4e:5c:11:9e:61:7b:58:3a:c3:90:92:cd:f7: 20:10:b3:67:74:bd:fd:ea:da:9b:99:54:7d:65:9a: a8:34:b2:84:7a:41:36:9b:24:1e:35:de:84:a2:c8: 1d:1c:12:17:cb:50:f2:73:f5:60:5d:ca:16:ac:4f: ce:20:a4:17:fa:72:62:97:68:b0:44:6f:d7:b6:bf: 02:b8:b2:67:bc:21:bc:05:24:c4:21:3e:6a:47:55: 11:16:f8:6e:af:e1:d7:d2:71:54:38:e7:3a:13:60: 06:80:a7:7a:cc:b9:78:d4:2c:a1:47:df:62:00:5f: 65:c7:1e:fa:38:00:6c:c8:16:4b:c2:73:df:71:86: 06:b3:0d:3f:0a:37:4f:cb:5b:b4:ad:a1:cc:1e:53: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:72:C0:FB:C8:04:E3:F8:7F:4F:F8:20:9D:88:6E:89:F5:6E:AD:93 X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:15:d7:fd:a4:22:33:88:0e:6d:bf:64:9f:14:68:a0:ba:02: 31:47:72:68:2d:e5:48:11:56:dd:48:10:fe:b3:59:25:f4:9c: 92:cf:db:8a:29:77:65:b7:c0:b4:fd:ef:43:5c:5f:09:73:b4: 61:ba:15:c0:b2:2d:e2:f5:81:53:63:1e:57:72:88:06:54:e7: d6:5f:79:00:39:0b:24:54:2b:a5:13:71:e3:7d:c0:f4:e0:f3: 5c:6d:1d:6d:cb:49:e9:88:14:53:53:59:7c:e1:64:38:a5:11: d9:0c:b8:04:03:ff:4e:08:04:fe:4d:45:a5:59:68:59:a5:ba: a1:58:f8:f3:95:5e:54:ca:90:41:51:a2:65:84:68:a5:0c:94: 88:65:c6:52:c5:00:f7:37:72:e2:a6:42:ae:e1:fb:0d:a3:74: 9c:fb:9b:46:ae:1f:ce:37:5c:58:0f:42:ab:4f:93:39:cb:72: ca:f0:34:57:d2:de:f0:db:ad:16:77:b8:13:18:e6:c0:2f:4f: 02:b7:75:12:93:16:c2:15:1c:52:0c:9b:74:b5:1a:fd:62:81: 16:14:4e:0e:2c:50:9a:36:8e:ae:0d:0b:0f:65:f2:9d:c1:e6: 1a:19:06:97:27:c3:c1:c9:a9:b9:4f:99:1d:1e:b5:23:30:cb: dc:49:31:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjUwNTMwMTY0MDE1WhcNMjUwNjA2MTY0MDE1WjAYMRYwFAYD VQQDEw02ODM5ZGY2Zi03MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nz6Fow/D3UzCpm43T+hYiyEyRYOR1U+ZIpSs0YrUZJ7Q60wPXJLeokQRgcd ZWzGqSz0xb2O88v2C9rUIBNS06MK/hYlSdUKfymX5aqNT3K0Do4LfhQotx01jx91 TYz1ictbVmM55PM8ZU5cEZ5he1g6w5CSzfcgELNndL396tqbmVR9ZZqoNLKEekE2 myQeNd6EosgdHBIXy1Dyc/VgXcoWrE/OIKQX+nJil2iwRG/Xtr8CuLJnvCG8BSTE IT5qR1URFvhur+HX0nFUOOc6E2AGgKd6zLl41CyhR99iAF9lxx76OABsyBZLwnPf cYYGsw0/CjdPy1u0raHMHlOi+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBywPvI BOP4f0/4IJ2Ibon1bq2TMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYFdf9pCIziA5tv2SfFGigugIxR3JoLeVIEVbdSBD+s1kl9JySz9uK KXdlt8C0/e9DXF8Jc7RhuhXAsi3i9YFTYx5XcogGVOfWX3kAOQskVCulE3HjfcD0 4PNcbR1ty0npiBRTU1l84WQ4pRHZDLgEA/9OCAT+TUWlWWhZpbqhWPjzlV5UypBB UaJlhGilDJSIZcZSxQD3N3LipkKu4fsNo3Sc+5tGrh/ON1xYD0KrT5M5y3LK8DRX 0t7w260Wd7gTGObAL08Ct3USkxbCFRxSDJt0tRr9YoEWFE4OLFCaNo6uDQsPZfKd weYaGQaXJ8PByam5T5kdHrUjMMvcSTEd -----END CERTIFICATE-----Generated at Sat May 31 17:17:31 2025 by rpki-client