$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: 3rn4Ff+WWqZh4WjK7P6CYLHCbb8OFNoYY22i5v8jR70= Subject key identifier: 48:ED:74:23:FC:B2:B2:FD:C8:45:27:70:1D:2A:C2:03:D2:33:F6:31 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0374 Signing time: Fri 25 Jul 2025 01:17:59 +0000 Manifest this update: Fri 25 Jul 2025 01:17:58 +0000 Manifest next update: Fri 01 Aug 2025 01:17:58 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: YNRRAZfmGyQrGrPe5jZ2IH3ilEneQKPgQ4Q0gY4ugic=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 01:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Jul 25 01:17:58 2025 GMT Not After : Aug 1 01:17:58 2025 GMT Subject: CN=6882db47-b8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:35:02:38:c3:b0:29:26:16:46:7c:e6:f1: fd:37:4d:f7:99:56:c8:a1:e7:d8:9a:b5:1c:0a:be: ef:a6:4a:10:b2:8f:b4:47:57:4a:90:c4:46:ec:a8: d0:ae:bf:24:da:cd:92:fd:ff:69:7a:8d:54:3d:d9: 67:40:81:18:69:62:17:b7:ef:ca:90:8a:35:d1:8d: 1d:b0:1b:72:17:ef:52:80:ac:db:e2:88:f0:a4:7c: 4f:3f:f4:d0:6d:fb:45:d5:0a:c6:3b:ac:11:be:6e: 50:11:a5:1e:4e:52:38:11:04:2b:f6:28:1e:9a:ad: 52:0a:d0:23:b9:ff:46:ff:18:30:90:dc:59:8a:55: 32:f0:52:fd:68:d6:ef:bc:47:72:96:5e:cf:d9:bf: 8c:ae:13:de:cc:e2:f1:5a:94:70:f2:7a:cd:ae:34: d8:48:08:c3:74:01:00:77:3f:01:5c:b7:fa:9a:4e: e1:a5:47:63:19:5d:fc:c9:4e:a4:69:b6:f6:49:ca: 2f:1b:93:10:4a:99:26:27:42:89:3c:df:41:a1:73: 8a:91:f7:a3:6a:ad:17:41:76:b6:a1:1f:f3:bf:33: ef:c9:c5:2d:ff:29:83:36:60:f9:2c:6d:1f:5b:11: 5e:13:6c:17:14:75:af:7b:7b:95:d0:a4:3e:f0:ce: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:ED:74:23:FC:B2:B2:FD:C8:45:27:70:1D:2A:C2:03:D2:33:F6:31 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:da:28:c2:51:59:8d:69:18:c9:a6:e5:e9:09:3f:be:a5:b0: f3:eb:23:05:c6:b5:0a:7e:d3:05:bd:f5:83:26:97:99:7f:d7: f5:05:2a:b4:40:44:c0:a9:cb:b4:88:d5:51:bc:5f:63:00:51: 6b:1b:c1:c2:45:80:0a:77:d1:e0:c9:10:7f:0f:12:d7:88:8d: 4c:0c:f5:86:ea:66:35:ab:e5:69:2f:ea:48:41:38:bd:34:7b: f5:4e:0c:6a:47:68:77:ab:25:2e:5d:d8:a1:a9:66:7e:b5:ee: 77:61:14:35:b2:96:6c:8b:55:5a:50:a7:f7:72:f7:58:a2:57: 37:b9:42:34:e9:5d:ee:78:f0:0f:01:d5:e4:a3:d1:ee:d6:a8: 8f:42:e1:42:ed:a2:eb:81:4d:02:f0:2b:60:2d:e4:e4:34:1a: 1a:72:cc:ea:81:7e:1d:8f:44:ad:e4:50:9b:3c:98:ac:85:40: a5:32:76:8e:3b:99:fb:3e:1e:2d:fd:c2:4f:ea:ce:82:a3:2b: cc:a1:44:97:11:4d:88:d3:53:fc:9f:15:71:38:f7:42:d2:d3: 6a:78:68:9c:d7:64:66:81:70:38:84:dd:b3:e4:c6:b6:29:53: d7:86:ea:44:0e:83:94:68:22:41:a7:de:07:f3:be:64:1f:b5: 2a:49:44:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwNzI1MDExNzU4WhcNMjUwODAxMDExNzU4WjAYMRYwFAYD VQQDEw02ODgyZGI0Ny1iOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuI1AjjDsCkmFkZ85vH9N033mVbIoefYmrUcCr7vpkoQso+0R1dKkMRG7KjQ rr8k2s2S/f9peo1UPdlnQIEYaWIXt+/KkIo10Y0dsBtyF+9SgKzb4ojwpHxPP/TQ bftF1QrGO6wRvm5QEaUeTlI4EQQr9igemq1SCtAjuf9G/xgwkNxZilUy8FL9aNbv vEdyll7P2b+MrhPezOLxWpRw8nrNrjTYSAjDdAEAdz8BXLf6mk7hpUdjGV38yU6k abb2ScovG5MQSpkmJ0KJPN9BoXOKkfejaq0XQXa2oR/zvzPvycUt/ymDNmD5LG0f WxFeE2wXFHWve3uV0KQ+8M5Z5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjtdCP8 srL9yEUncB0qwgPSM/YxMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2ijCUVmNaRjJpuXpCT++pbDz6yMFxrUKftMFvfWDJpeZf9f1BSq0 QETAqcu0iNVRvF9jAFFrG8HCRYAKd9HgyRB/DxLXiI1MDPWG6mY1q+VpL+pIQTi9 NHv1TgxqR2h3qyUuXdihqWZ+te53YRQ1spZsi1VaUKf3cvdYolc3uUI06V3uePAP AdXko9Hu1qiPQuFC7aLrgU0C8CtgLeTkNBoacszqgX4dj0St5FCbPJishUClMnaO O5n7Ph4t/cJP6s6CoyvMoUSXEU2I01P8nxVxOPdC0tNqeGic12RmgXA4hN2z5Ma2 KVPXhupEDoOUaCJBp94H875kH7UqSUSf -----END CERTIFICATE-----Generated at Sat Jul 26 11:50:49 2025 by rpki-client