$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: daP/Tq3rqDewanSS0hC52g1Fkm9qWrWZXPrNiMXU5cA= Subject key identifier: E5:B1:90:E9:CA:88:F5:06:7F:B0:07:38:F5:40:45:77:5F:61:A4:65 Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 1918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 18FF Signing time: Fri 24 Oct 2025 16:48:20 +0000 Manifest this update: Fri 24 Oct 2025 16:48:19 +0000 Manifest next update: Fri 31 Oct 2025 16:48:19 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: dDcZmkM+7Ckv5ATyoq1zHLKyBDzimHI2LCNLQCXvXCs=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: hzFVXlwfRqwuiNn/Z2NEoFkVKW39Hvwn8Qm2xuVV6R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 16:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6424 (0x1918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Validity Not Before: Oct 24 16:48:19 2025 GMT Not After : Oct 31 16:48:19 2025 GMT Subject: CN=68fbadd3-f4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:b5:65:2f:23:d0:81:10:e0:f0:e6:b9:39: fc:14:0f:6a:88:c9:ce:75:26:91:33:21:2f:e3:09: b0:fa:7c:e2:ce:60:a6:dd:9b:ee:55:dc:ad:81:7d: e0:bd:7e:06:de:ed:a2:4e:a8:4d:e7:32:2e:94:e2: 1a:3b:09:6a:66:7a:eb:45:af:a6:a9:e6:59:19:ec: 5b:5f:3a:e2:30:86:53:11:8c:45:4f:55:e7:0c:11: 4f:76:fb:3b:7a:d6:92:46:cf:10:a8:94:4e:a3:0f: 5d:5f:5c:0d:09:14:7c:ed:68:df:f0:66:c1:9a:80: 52:b0:14:75:16:fb:82:b9:8c:6d:56:19:1f:ec:50: 90:92:4e:3e:1a:51:c6:13:76:2d:2a:be:c1:ad:db: 02:b7:45:95:9a:1c:94:ef:f8:5a:b0:7c:cc:4a:b7: 1e:8e:24:8c:70:28:43:fa:91:f3:c8:49:cf:d0:5c: 75:3b:c8:31:cd:d2:e3:f2:9c:1b:40:de:67:45:be: fe:f7:d3:56:5f:e3:aa:ab:e1:fd:bb:dd:69:35:27: ac:e0:09:67:cc:31:df:d4:bf:dd:f5:ef:a5:ef:4f: d2:00:c9:6d:4e:59:74:3d:e3:9e:d5:35:4d:4d:5e: 68:2a:2b:73:5f:66:de:b7:18:ed:ca:06:f2:47:c5: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B1:90:E9:CA:88:F5:06:7F:B0:07:38:F5:40:45:77:5F:61:A4:65 X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:30:30:ad:6d:6b:d1:c7:f8:56:cb:70:01:61:13:03:30:67: 89:ef:f1:61:ef:7e:1b:7a:c9:44:72:1a:06:03:0a:6d:c5:66: 53:d0:22:98:0b:34:18:54:dd:ae:a4:60:ff:85:56:1c:c1:ce: 7e:94:8e:47:1c:58:70:b0:02:3b:5c:ea:89:1d:b7:0b:2c:57: e8:bd:d4:3d:21:e6:15:8a:09:de:09:61:c9:61:b2:ed:05:f0: 3a:9e:45:d4:f0:74:47:69:3f:51:69:29:39:90:5e:ad:0a:a6: 5c:77:3e:1f:f0:62:21:23:d1:2b:00:7d:3b:8d:48:57:2c:92: b9:e7:b8:49:c6:82:eb:f3:1b:bb:22:e7:ff:c5:de:7a:f4:19: 13:6b:0b:5c:cf:0d:49:a8:f3:67:9a:60:a1:38:92:37:0e:28: af:bc:47:8b:91:12:9a:0f:17:90:f9:1e:3e:a6:f1:08:a4:f9: 68:55:d0:1c:c5:fe:ca:7e:10:7b:23:de:35:24:5e:6d:ac:35: 5b:1b:51:13:5d:45:8b:38:9a:7a:30:9a:d5:4d:03:79:b3:26: 4f:45:06:b9:15:2b:54:c1:04:b8:ba:5f:24:a8:88:8f:59:21: db:b0:1a:e6:60:a2:c5:22:09:ce:36:4f:b0:ad:57:97:14:b1: f2:48:06:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjUxMDI0MTY0ODE5WhcNMjUxMDMxMTY0ODE5WjAYMRYwFAYD VQQDEw02OGZiYWRkMy1mNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5e1ZS8j0IEQ4PDmuTn8FA9qiMnOdSaRMyEv4wmw+nzizmCm3ZvuVdytgX3g vX4G3u2iTqhN5zIulOIaOwlqZnrrRa+mqeZZGexbXzriMIZTEYxFT1XnDBFPdvs7 etaSRs8QqJROow9dX1wNCRR87Wjf8GbBmoBSsBR1FvuCuYxtVhkf7FCQkk4+GlHG E3YtKr7BrdsCt0WVmhyU7/hasHzMSrcejiSMcChD+pHzyEnP0Fx1O8gxzdLj8pwb QN5nRb7+99NWX+Oqq+H9u91pNSes4AlnzDHf1L/d9e+l70/SAMltTll0PeOe1TVN TV5oKitzX2betxjtygbyR8UxewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWxkOnK iPUGf7AHOPVARXdfYaRlMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXMDCtbWvRx/hWy3ABYRMDMGeJ7/Fh734beslEchoGAwptxWZT0CKY CzQYVN2upGD/hVYcwc5+lI5HHFhwsAI7XOqJHbcLLFfovdQ9IeYVigneCWHJYbLt BfA6nkXU8HRHaT9RaSk5kF6tCqZcdz4f8GIhI9ErAH07jUhXLJK557hJxoLr8xu7 Iuf/xd569BkTawtczw1JqPNnmmChOJI3DiivvEeLkRKaDxeQ+R4+pvEIpPloVdAc xf7KfhB7I941JF5trDVbG1ETXUWLOJp6MJrVTQN5syZPRQa5FStUwQS4ul8kqIiP WSHbsBrmYKLFIgnONk+wrVeXFLHySAbU -----END CERTIFICATE-----Generated at Sun Oct 26 00:41:44 2025 by rpki-client