$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: iDupgcnEps56sv3OqseiwW9xyMkMY2xffoJYdKJeZnc= Subject key identifier: A9:BA:37:4C:4B:D5:1E:FE:1A:5D:0F:E6:48:25:D2:45:42:5C:2A:84 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 03D0 Signing time: Sat 07 Jun 2025 00:39:24 +0000 Manifest this update: Sat 07 Jun 2025 00:39:23 +0000 Manifest next update: Sat 14 Jun 2025 00:39:23 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: TwGHt3k1ZQQyl2gkIO/74812mb2zECqylf0AR6tW/ak=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: WzLUdenQ5UXA5eAEZpuKFjLbtHs84su1cxAYTdJsK9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Jun 7 00:39:23 2025 GMT Not After : Jun 14 00:39:23 2025 GMT Subject: CN=68438a3c-aeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5f:88:c3:66:85:a8:92:59:87:6f:3a:6e:6a: 6c:d9:20:1d:7b:b5:b7:0b:b2:4a:a7:2c:3f:bb:49: c4:0d:cb:81:96:b6:2b:2d:96:ac:0c:f4:f4:ae:fa: 15:83:f5:8a:46:56:5e:2b:46:70:3a:52:4c:26:67: 88:36:87:8b:e7:e3:e1:3b:9c:99:6f:7d:6c:61:b4: 75:39:1c:88:20:6d:d6:a2:57:62:d7:34:d0:01:46: 35:4a:27:52:61:2d:ec:ee:8c:15:44:6a:8a:f9:b9: f5:8b:a1:55:3f:4b:0e:18:28:df:ee:5e:41:45:64: 65:dd:a3:c6:85:ed:c8:e7:11:80:18:39:12:1e:c5: 51:79:7a:c6:e0:cb:b7:05:14:04:66:1d:53:13:ad: c7:75:b4:92:7f:f4:a8:85:6f:4d:c8:55:bb:73:92: 28:49:4c:df:9a:c1:90:2a:44:23:f2:b5:d7:17:35: 77:4c:79:22:af:03:81:d0:ce:3b:ba:65:af:5e:d9: 64:8e:b2:e4:8f:44:c8:de:3b:4a:99:a5:0a:b9:fb: bb:b9:f6:58:83:4a:90:f9:25:15:40:83:dd:f8:cc: 37:e3:53:6d:ce:92:1e:f0:ee:f7:a0:ac:5f:05:24: 34:d2:90:b6:4c:bb:19:e5:df:77:fd:78:1c:77:0d: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:37:4C:4B:D5:1E:FE:1A:5D:0F:E6:48:25:D2:45:42:5C:2A:84 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ac:07:13:dc:c6:99:b8:d1:a6:27:3a:e2:ca:62:eb:5e:12: 79:44:12:2c:a6:be:97:2a:f6:87:d1:98:c8:88:07:a4:3d:f2: dd:1d:19:60:09:27:f1:cb:ae:74:3e:5d:e3:63:ad:45:4b:95: af:5f:8c:62:c4:5b:84:ae:a5:9b:8b:52:bd:71:42:f8:81:6f: 09:49:80:e6:ae:b4:89:af:1d:cb:2a:0e:a9:89:69:a0:96:10: 96:bd:0e:7a:b5:bc:ab:81:d8:1d:33:6d:16:12:d0:ac:13:68: 3c:eb:49:ce:be:fc:6d:67:49:9a:2e:e3:66:21:e7:ce:4b:b8: 53:cb:10:68:42:63:4c:e8:46:52:52:56:f1:46:35:8f:af:04: a2:3a:c9:77:cb:34:0a:61:eb:b5:84:8a:9a:f0:8b:44:3f:b9: 64:92:c8:87:85:c1:c1:2c:31:6b:80:d2:58:59:11:d5:be:a5: b8:26:0a:0d:53:e4:27:aa:0a:dd:2c:ab:27:7c:0f:31:3f:c1: 1c:d0:f5:c5:8c:4f:83:00:17:92:1a:79:ea:ca:2b:f0:b5:72: fd:3e:c4:81:c2:03:e1:b4:96:3a:ef:67:57:c7:63:1d:e3:d3: 18:a5:ee:1b:26:42:e1:6c:0e:78:bd:37:de:74:71:70:4f:0d: 21:ad:fd:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUwNjA3MDAzOTIzWhcNMjUwNjE0MDAzOTIzWjAYMRYwFAYD VQQDEw02ODQzOGEzYy1hZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8l+Iw2aFqJJZh286bmps2SAde7W3C7JKpyw/u0nEDcuBlrYrLZasDPT0rvoV g/WKRlZeK0ZwOlJMJmeINoeL5+PhO5yZb31sYbR1ORyIIG3Woldi1zTQAUY1SidS YS3s7owVRGqK+bn1i6FVP0sOGCjf7l5BRWRl3aPGhe3I5xGAGDkSHsVReXrG4Mu3 BRQEZh1TE63HdbSSf/SohW9NyFW7c5IoSUzfmsGQKkQj8rXXFzV3THkirwOB0M47 umWvXtlkjrLkj0TI3jtKmaUKufu7ufZYg0qQ+SUVQIPd+Mw341NtzpIe8O73oKxf BSQ00pC2TLsZ5d93/Xgcdw1d+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKm6N0xL 1R7+Gl0P5kgl0kVCXCqEMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYrAcT3MaZuNGmJzriymLrXhJ5RBIspr6XKvaH0ZjIiAekPfLdHRlg CSfxy650Pl3jY61FS5WvX4xixFuErqWbi1K9cUL4gW8JSYDmrrSJrx3LKg6piWmg lhCWvQ56tbyrgdgdM20WEtCsE2g860nOvvxtZ0maLuNmIefOS7hTyxBoQmNM6EZS UlbxRjWPrwSiOsl3yzQKYeu1hIqa8ItEP7lkksiHhcHBLDFrgNJYWRHVvqW4JgoN U+QnqgrdLKsnfA8xP8Ec0PXFjE+DABeSGnnqyivwtXL9PsSBwgPhtJY672dXx2Md 49MYpe4bJkLhbA54vTfedHFwTw0hrf3I -----END CERTIFICATE-----Generated at Sat Jun 7 06:17:26 2025 by rpki-client