$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: efukzwTZh7eHsneZTHmLXmupm1MPqFe7hWec7PYY5zc= Subject key identifier: 14:28:22:5B:96:2B:45:CD:CD:8B:61:84:B6:E5:06:A5:CC:7F:A9:04 Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0B81 Signing time: Thu 18 Sep 2025 19:13:55 +0000 Manifest this update: Thu 18 Sep 2025 19:13:55 +0000 Manifest next update: Thu 25 Sep 2025 19:13:55 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: cVAdtpJ/6aV7QkXznDoapkF/R6UiYIqTZjiLD7Pb4mk=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: KCGgayyIaV9bw3+jN02UdfN4476+RHEdK89wpH03TIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: Sep 18 19:13:55 2025 GMT Not After : Sep 25 19:13:55 2025 GMT Subject: CN=68cc59f3-652c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:ce:d4:79:e8:8f:b8:f9:7f:13:08:2c:02: 04:b0:48:aa:7b:8e:cf:fe:3b:c9:81:48:b8:8f:a7: 84:50:6d:70:5e:bf:d2:89:67:77:30:3a:12:10:e9: d7:c8:76:1a:ca:63:07:6e:c0:a0:2d:d6:b0:8b:42: 8e:21:52:5c:69:a1:4e:91:e7:05:e6:ba:be:3a:94: d3:a5:3f:8b:a3:f7:75:96:0c:56:f6:1c:49:14:be: 1a:a1:24:e0:76:8b:22:23:bb:65:ed:33:9f:9e:f0: 2a:ec:bf:78:0c:ca:e3:ab:4b:6a:f5:14:0e:00:a1: f8:b3:bc:cf:fb:22:f4:67:f4:de:59:b0:eb:5a:ae: 42:d4:f2:d6:d9:75:78:0b:d9:04:fa:38:68:c4:c2: 6a:6e:3b:aa:fc:22:44:44:18:fa:21:a3:4f:eb:0e: bb:f4:83:a7:bd:1b:db:5e:36:4c:f0:f9:5c:1b:b4: c0:6e:f1:57:1c:03:49:98:2b:bf:bd:aa:c5:cf:99: 56:dd:a1:ff:6b:59:19:5a:2a:f0:8c:6e:74:9d:72: f0:f6:fe:6b:38:b9:55:27:21:ba:38:85:a4:7f:3a: 4f:cb:1c:3d:46:fd:11:61:58:18:80:91:66:98:3e: e4:e9:f9:ff:a0:42:a2:f1:da:15:0d:e8:8c:d6:b2: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:22:5B:96:2B:45:CD:CD:8B:61:84:B6:E5:06:A5:CC:7F:A9:04 X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:75:15:93:c8:7c:a9:a7:d6:7e:96:2c:18:83:cc:ce:88:4b: 81:bf:77:f0:09:ef:0d:ed:d4:3a:a8:07:6a:73:f2:98:8a:ca: 23:0f:92:3e:0e:57:d0:27:28:57:a8:e3:f7:f0:55:d1:9f:b5: f3:b0:e8:66:3e:c1:dc:35:44:6c:28:61:e9:41:71:6d:83:b2: d0:20:d9:96:4d:00:8f:7a:4e:6a:e2:a9:ef:12:f6:37:e8:97: 06:e6:74:0f:2e:bd:9c:b9:70:ec:6b:6b:8e:a6:3c:b5:a5:9c: 1e:53:15:9d:44:ac:ca:20:aa:ff:b6:76:58:89:e2:0b:76:ba: d5:dd:92:6f:0c:a5:a6:91:22:40:5a:c0:a4:02:96:4c:75:ea: ce:5b:7c:33:31:b9:74:e1:50:12:2e:50:1c:e6:38:f5:fe:b2: e3:ea:8b:9e:fd:47:d2:64:4a:60:ee:4f:af:25:e4:55:5c:20: 29:21:80:07:59:0d:1e:5b:f2:ec:94:5a:b4:fb:b3:ac:f3:d0: 06:62:91:de:c8:e7:b6:de:55:cf:67:f0:70:0b:76:8f:39:b4: fd:c1:02:91:b5:17:9c:2f:c9:05:b2:07:d2:e9:eb:fc:57:4b: 48:a0:92:88:ae:f9:5a:1c:b9:a2:d4:d3:37:5e:ae:ac:5b:0f: 0e:0c:10:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjUwOTE4MTkxMzU1WhcNMjUwOTI1MTkxMzU1WjAYMRYwFAYD VQQDEw02OGNjNTlmMy02NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymDO1Hnoj7j5fxMILAIEsEiqe47P/jvJgUi4j6eEUG1wXr/SiWd3MDoSEOnX yHYaymMHbsCgLdawi0KOIVJcaaFOkecF5rq+OpTTpT+Lo/d1lgxW9hxJFL4aoSTg dosiI7tl7TOfnvAq7L94DMrjq0tq9RQOAKH4s7zP+yL0Z/TeWbDrWq5C1PLW2XV4 C9kE+jhoxMJqbjuq/CJERBj6IaNP6w679IOnvRvbXjZM8PlcG7TAbvFXHANJmCu/ varFz5lW3aH/a1kZWirwjG50nXLw9v5rOLlVJyG6OIWkfzpPyxw9Rv0RYVgYgJFm mD7k6fn/oEKi8doVDeiM1rK39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQoIluW K0XNzYthhLblBqXMf6kEMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdRWTyHypp9Z+liwYg8zOiEuBv3fwCe8N7dQ6qAdqc/KYisojD5I+ DlfQJyhXqOP38FXRn7XzsOhmPsHcNURsKGHpQXFtg7LQINmWTQCPek5q4qnvEvY3 6JcG5nQPLr2cuXDsa2uOpjy1pZweUxWdRKzKIKr/tnZYieILdrrV3ZJvDKWmkSJA WsCkApZMderOW3wzMbl04VASLlAc5jj1/rLj6oue/UfSZEpg7k+vJeRVXCApIYAH WQ0eW/LslFq0+7Os89AGYpHeyOe23lXPZ/BwC3aPObT9wQKRtRecL8kFsgfS6ev8 V0tIoJKIrvlaHLmi1NM3Xq6sWw8ODBBE -----END CERTIFICATE-----Generated at Fri Sep 19 06:56:26 2025 by rpki-client