$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: Bhkljh/pUqhTjCxm3hON9I733jiJp4O7/NIpGQkZvIY= Subject key identifier: DD:98:B6:A7:99:3F:6E:56:51:BB:23:0A:81:13:99:E8:0D:BC:0A:E2 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0421 Signing time: Tue 23 Jun 2026 00:25:12 +0000 Manifest this update: Tue 23 Jun 2026 00:25:10 +0000 Manifest next update: Tue 30 Jun 2026 00:25:10 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: lPU3V2FD4JUJZmiyQhSJSvhCpixrHDezKIPeCyJS20I=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: XSP7ZSZTeVaO1+WnIL3Y0mc2TaKveZBmZSaWEtYBj60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 00:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Jun 23 00:25:10 2026 GMT Not After : Jun 30 00:25:10 2026 GMT Subject: CN=6a39d268-13f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6b:2c:86:ad:97:97:d0:3c:c4:a3:e3:2d:3f: 71:23:ca:ea:0e:ee:cc:02:ad:b9:a7:e5:6d:d8:c3: c1:ef:dc:a6:9b:3f:b6:eb:5d:19:7d:e9:10:4d:3e: ef:7b:d1:5f:39:f2:6b:b1:87:a1:a5:ed:70:8f:b5: 60:67:e1:4e:44:9e:97:f5:5e:b8:53:94:6b:ff:b8: ce:a5:f1:95:55:cf:31:21:9a:ea:0b:a9:90:bd:28: cb:e3:4b:b3:f1:2a:00:a4:ef:cd:e3:67:1d:d9:94: c5:6c:63:06:8c:d4:06:06:d8:a5:73:55:e8:63:38: 49:00:52:e1:97:72:fb:b0:ff:68:ed:7f:6d:9e:81: c9:17:34:ba:8d:a5:dd:a5:99:d1:cf:18:7f:1f:d7: 50:c0:51:2a:70:6a:47:cb:f7:ff:6f:8b:8b:5e:a7: 42:86:7b:93:08:9b:6a:43:3d:2e:b4:20:33:77:c7: a7:cc:d2:b0:b1:a8:53:4f:79:78:3d:02:79:ca:9e: 50:d4:55:65:1b:0a:ff:40:03:08:e2:11:2d:98:22: be:3e:22:ad:e8:c6:a4:91:67:70:90:5c:4b:37:07: 37:ae:9a:f1:7f:e7:83:ab:18:6f:84:87:fa:2e:91: 9e:70:25:21:ec:92:95:f4:4b:37:49:05:ff:25:4e: 60:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:98:B6:A7:99:3F:6E:56:51:BB:23:0A:81:13:99:E8:0D:BC:0A:E2 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:72:ff:5a:50:59:1a:a6:b2:a3:0d:2c:c7:40:8c:92:20: 72:28:53:18:0c:d9:f3:6e:cc:91:8a:b9:0f:84:af:d3:5b:d3: 7e:c7:f0:ce:5e:cb:e4:92:5b:90:c3:f7:20:73:90:a2:f6:e5: 82:25:39:bd:cd:25:e9:c5:8f:96:38:ca:32:41:d4:5c:19:1b: be:e5:0d:dc:ba:27:f6:ac:b9:c6:d4:91:9f:03:47:5c:e0:3a: 82:93:32:90:5b:02:f6:64:00:13:52:a6:ef:ea:f3:5d:96:5d: 97:a5:03:e1:94:a9:0c:74:69:40:87:79:fe:6d:e1:f3:e4:b2: f0:43:3f:b2:6e:55:58:dd:b5:a4:de:f4:11:13:bf:fd:a5:b8: c3:06:2a:d4:8f:e3:4d:ed:95:c6:dd:ea:bd:f5:db:fa:02:4c: 2d:13:e4:fc:3b:65:d9:fc:00:23:d6:82:9c:3d:ef:67:cb:40: d4:59:ba:10:a7:1e:e4:b4:5e:ee:87:28:43:dc:cc:fd:2f:0a: 9b:45:0c:44:1a:48:63:fc:e5:ea:d3:ae:65:b4:37:a1:ca:6b: ef:fc:d4:d1:82:86:f7:fe:54:77:76:95:1e:81:1a:dc:5e:ba: b4:90:c1:d9:61:4c:e1:2b:84:7f:a9:d0:02:23:a8:b2:4c:03: ba:19:d7:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjYwNjIzMDAyNTEwWhcNMjYwNjMwMDAyNTEwWjAYMRYwFAYD VQQDEw02YTM5ZDI2OC0xM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62sshq2Xl9A8xKPjLT9xI8rqDu7MAq25p+Vt2MPB79ymmz+2610ZfekQTT7v e9FfOfJrsYehpe1wj7VgZ+FORJ6X9V64U5Rr/7jOpfGVVc8xIZrqC6mQvSjL40uz 8SoApO/N42cd2ZTFbGMGjNQGBtilc1XoYzhJAFLhl3L7sP9o7X9tnoHJFzS6jaXd pZnRzxh/H9dQwFEqcGpHy/f/b4uLXqdChnuTCJtqQz0utCAzd8enzNKwsahTT3l4 PQJ5yp5Q1FVlGwr/QAMI4hEtmCK+PiKt6MakkWdwkFxLNwc3rprxf+eDqxhvhIf6 LpGecCUh7JKV9Es3SQX/JU5gFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2YtqeZ P25WUbsjCoETmegNvAriMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXfpy/1pQWRqmsqMNLMdAjJIgcihTGAzZ827MkYq5D4Sv01vTfsfwzl7L5JJb kMP3IHOQovblgiU5vc0l6cWPljjKMkHUXBkbvuUN3Lon9qy5xtSRnwNHXOA6gpMy kFsC9mQAE1Km7+rzXZZdl6UD4ZSpDHRpQId5/m3h8+Sy8EM/sm5VWN21pN70ERO/ /aW4wwYq1I/jTe2Vxt3qvfXb+gJMLRPk/Dtl2fwAI9aCnD3vZ8tA1Fm6EKce5LRe 7ocoQ9zM/S8Km0UMRBpIY/zl6tOuZbQ3ocpr7/zU0YKG9/5Ud3aVHoEa3F66tJDB 2WFM4SuEf6nQAiOoskwDuhnXcQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:17:14 2026 by rpki-client