$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: lMPAMMHB2HuBTvqzJwzDRyk67vuB6Gh0lU9BDl2bVYY= Subject key identifier: 7D:74:FD:AA:DF:2D:26:BF:5C:86:7B:DA:CD:C8:3A:3B:4D:31:CB:04 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0358 Signing time: Sat 31 May 2025 01:10:33 +0000 Manifest this update: Sat 31 May 2025 01:10:33 +0000 Manifest next update: Sat 07 Jun 2025 01:10:33 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: Q0K8VVkO6SCeZVpEltaTkeJxuHGG7EEon4Le924nM8c=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: May 31 01:10:33 2025 GMT Not After : Jun 7 01:10:33 2025 GMT Subject: CN=683a5709-67a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:c6:36:f5:99:2e:ad:d5:26:65:3a:10:75: bc:8b:91:97:66:cd:52:a4:5c:11:8c:b5:70:ff:fc: 11:63:1c:2f:89:fa:f0:b7:a5:39:23:35:12:e1:b4: 35:b1:b9:4b:4e:db:7a:4d:c9:36:f1:de:5f:37:f9: 66:91:22:8b:0c:49:0c:71:0d:78:b9:af:ee:4d:c1: 63:4b:bf:76:2e:22:27:bc:3e:ba:01:e0:55:a5:a2: 33:20:f6:b0:5a:c7:18:51:34:5c:de:3b:72:f2:0f: f5:08:93:2d:b9:8d:2e:f4:f0:86:bb:6b:f1:19:47: 15:8d:ed:cf:cc:29:1f:82:41:9c:51:3a:71:56:d8: 1b:1a:fc:5f:15:b0:7e:2a:d2:bf:bb:e6:11:0a:46: 1e:7a:ce:1c:d8:5c:30:3b:7b:d4:14:27:f4:fe:24: 87:d5:4d:68:59:aa:34:42:fc:b6:ca:f1:fd:68:f6: 6a:fb:c2:58:79:15:a8:63:b9:26:0b:bc:ab:db:c3: ff:b6:87:2a:40:1e:53:a1:36:44:92:0c:33:3f:02: c1:bf:66:33:12:a7:46:ed:aa:be:4b:4d:2c:99:09: 57:1a:bd:c0:00:50:02:93:66:aa:76:38:ca:bb:7b: 47:8c:2a:be:79:2c:3b:a7:21:35:2a:73:e1:6e:c2: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:74:FD:AA:DF:2D:26:BF:5C:86:7B:DA:CD:C8:3A:3B:4D:31:CB:04 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8b:b9:c4:e0:6a:f3:bd:6d:87:9e:fc:52:cc:8c:57:38:f5: cc:cb:89:c2:92:87:f1:4f:c8:58:c3:11:e1:84:3d:42:06:0f: e8:20:21:d8:a2:48:bc:ec:8f:c4:36:c6:a2:a0:6c:5d:a8:a1: 56:c2:85:06:0f:36:21:55:51:16:b4:30:fc:4e:d0:82:53:79: 97:ce:23:14:8b:13:cc:a5:fb:87:ff:94:fc:d5:f5:bc:c6:77: 99:17:31:21:a5:b0:43:f1:b1:53:d3:ea:52:f9:fd:a6:8e:6e: 59:64:5b:9c:56:45:a0:d2:49:c9:d2:4d:78:65:0d:8d:1a:23: ad:44:73:a7:52:c7:cc:2b:43:c5:8c:a5:e1:e0:5b:25:e3:d0: e6:ee:ab:ac:c6:ed:e0:b7:2d:b3:d9:8a:59:4c:ce:50:85:fa: e9:b5:93:ae:d5:a1:69:51:9e:bc:fb:14:8e:dc:c5:64:73:2e: 33:15:bd:46:3c:2c:42:0d:76:42:03:3e:be:ac:c9:c2:f8:87: a8:03:49:fc:a5:e5:77:a2:07:17:55:00:0c:f8:81:9a:34:b1: 64:47:f2:8c:b1:60:5f:c3:c1:c8:50:f5:c2:70:e5:39:89:cb: 79:d1:8f:30:bf:3d:2e:f2:7a:2b:07:36:e8:7e:a1:c6:a7:82: c8:0d:cf:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwNTMxMDExMDMzWhcNMjUwNjA3MDExMDMzWjAYMRYwFAYD VQQDEw02ODNhNTcwOS02N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkjGNvWZLq3VJmU6EHW8i5GXZs1SpFwRjLVw//wRYxwvifrwt6U5IzUS4bQ1 sblLTtt6Tck28d5fN/lmkSKLDEkMcQ14ua/uTcFjS792LiInvD66AeBVpaIzIPaw WscYUTRc3jty8g/1CJMtuY0u9PCGu2vxGUcVje3PzCkfgkGcUTpxVtgbGvxfFbB+ KtK/u+YRCkYees4c2FwwO3vUFCf0/iSH1U1oWao0Qvy2yvH9aPZq+8JYeRWoY7km C7yr28P/tocqQB5ToTZEkgwzPwLBv2YzEqdG7aq+S00smQlXGr3AAFACk2aqdjjK u3tHjCq+eSw7pyE1KnPhbsKbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH10/arf LSa/XIZ72s3IOjtNMcsEMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChi7nE4GrzvW2HnvxSzIxXOPXMy4nCkofxT8hYwxHhhD1CBg/oICHY oki87I/ENsaioGxdqKFWwoUGDzYhVVEWtDD8TtCCU3mXziMUixPMpfuH/5T81fW8 xneZFzEhpbBD8bFT0+pS+f2mjm5ZZFucVkWg0knJ0k14ZQ2NGiOtRHOnUsfMK0PF jKXh4Fsl49Dm7qusxu3gty2z2YpZTM5QhfrptZOu1aFpUZ68+xSO3MVkcy4zFb1G PCxCDXZCAz6+rMnC+IeoA0n8peV3ogcXVQAM+IGaNLFkR/KMsWBfw8HIUPXCcOU5 ict50Y8wvz0u8norBzbofqHGp4LIDc+3 -----END CERTIFICATE-----Generated at Sat May 31 16:43:49 2025 by rpki-client