$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: noSNLtbBsZh1T7gpddbXNXz2JpqrZOUCizn15G9Nmjo= Subject key identifier: 3A:00:B0:38:2B:CE:BF:88:C9:DF:E7:52:64:3C:29:CF:81:D9:56:3C Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 22 Signing time: Wed 17 Sep 2025 08:37:47 +0000 Manifest this update: Wed 17 Sep 2025 08:37:46 +0000 Manifest next update: Wed 24 Sep 2025 08:37:46 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: AGcZP0uCcX4f2ubBlF/sDugWRDxEFJNtZHeuoCk0Iw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Sep 17 08:37:46 2025 GMT Not After : Sep 24 08:37:46 2025 GMT Subject: CN=68ca735b-1454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:fa:94:f5:17:5f:45:0a:6c:14:04:7f:63: fd:c6:a9:73:51:ae:61:e4:41:24:fe:4b:ec:0b:11: 3c:57:8f:71:6d:98:92:22:53:36:4a:07:9b:16:ed: 82:ca:b6:d6:3b:a2:64:0e:2a:30:ed:57:ad:5b:23: 45:69:a1:fa:ef:81:6d:e0:d9:cb:6d:13:3c:8b:f3: ec:a9:18:59:0c:cf:0d:11:df:23:a4:3f:05:1c:64: 5e:f0:80:8a:68:ce:8a:b6:9c:09:06:17:e3:6b:5f: 86:58:0b:4e:09:8d:fe:14:22:05:c0:c8:5c:89:bd: 27:f7:ff:1d:a7:41:85:2b:af:b5:5a:fc:01:25:5a: 61:dd:70:10:38:de:84:3d:f9:51:02:16:75:2c:06: 1e:0f:1e:6e:45:b2:3b:e2:93:cd:21:2a:8c:53:7c: ad:2e:97:6f:4b:61:97:f6:43:72:bc:24:9c:1a:b4: 6c:0d:4e:99:ef:c0:15:26:9f:72:a9:3d:a2:a8:b9: 07:41:ef:98:4b:7c:ab:72:b4:f3:79:c5:8f:29:0a: 1e:3d:22:46:2e:77:f9:20:f4:11:cd:cd:e1:fa:ec: 2c:ac:77:3b:0a:4d:a0:35:5d:5c:61:4e:1c:2a:7a: 9d:11:e3:14:9e:e3:e1:19:4d:c2:ab:3e:88:2f:93: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:00:B0:38:2B:CE:BF:88:C9:DF:E7:52:64:3C:29:CF:81:D9:56:3C X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:c6:98:07:9f:57:d4:8f:88:08:df:1a:9d:01:f8:4d:58: 22:26:2b:b0:bf:6d:61:df:16:86:e7:46:0a:1c:2c:fa:c6:80: 27:04:71:7e:98:7d:63:ce:a6:5f:76:12:00:89:59:12:b3:3c: b2:75:70:56:dc:6c:bf:4b:8e:1a:2d:ee:fb:fb:c0:71:eb:76: 08:9a:50:84:2e:43:3c:25:8f:43:df:60:d4:f2:51:a5:3a:ed: 30:78:60:3a:a0:bd:02:6f:14:2e:eb:b9:51:36:5f:e3:58:f1: fd:c7:e4:29:5a:2b:d3:0e:ac:df:4e:c9:02:ad:b3:35:89:60: bb:fb:1e:10:cf:a4:ee:a0:b7:38:53:87:89:c5:41:af:78:95: a2:10:02:1b:e6:23:91:42:17:84:22:4a:21:b3:b6:a4:04:be: 3c:66:12:61:e1:3f:24:85:f1:59:b6:61:29:62:de:f2:7b:cd: d8:ea:c0:4a:86:7d:1c:9c:f3:7d:db:47:c0:b2:a9:71:e1:aa: d5:34:92:cb:93:bb:74:95:18:15:47:ef:e4:79:be:4e:cb:07: 64:f1:ae:2f:bb:e1:50:df:df:04:e4:6b:f8:57:fd:86:9d:dc: 7e:b2:1e:1b:1a:31:94:bd:17:19:03:33:41:9c:af:38:79:14: 0d:25:7f:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTA5MTcwODM3NDZaFw0yNTA5MjQwODM3NDZaMBgxFjAUBgNV BAMTDTY4Y2E3MzViLTE0NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy8/qU9RdfRQpsFAR/Y/3GqXNRrmHkQST+S+wLETxXj3FtmJIiUzZKB5sW7YLK ttY7omQOKjDtV61bI0VpofrvgW3g2cttEzyL8+ypGFkMzw0R3yOkPwUcZF7wgIpo zoq2nAkGF+NrX4ZYC04Jjf4UIgXAyFyJvSf3/x2nQYUrr7Va/AElWmHdcBA43oQ9 +VECFnUsBh4PHm5Fsjvik80hKoxTfK0ul29LYZf2Q3K8JJwatGwNTpnvwBUmn3Kp PaKouQdB75hLfKtytPN5xY8pCh49IkYud/kg9BHNzeH67CysdzsKTaA1XVxhThwq ep0R4xSe4+EZTcKrPogvk1m3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOgCwOCvO v4jJ3+dSZDwpz4HZVjwwHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzYxpgHn1fUj4gI3xqdAfhNWCImK7C/bWHfFobnRgocLPrGgCcEcX6Y fWPOpl92EgCJWRKzPLJ1cFbcbL9Ljhot7vv7wHHrdgiaUIQuQzwlj0PfYNTyUaU6 7TB4YDqgvQJvFC7ruVE2X+NY8f3H5ClaK9MOrN9OyQKtszWJYLv7HhDPpO6gtzhT h4nFQa94laIQAhvmI5FCF4QiSiGztqQEvjxmEmHhPySF8Vm2YSli3vJ7zdjqwEqG fRyc833bR8CyqXHhqtU0ksuTu3SVGBVH7+R5vk7LB2Txri+74VDf3wTka/hX/Yad 3H6yHhsaMZS9FxkDM0Gcrzh5FA0lf1Y= -----END CERTIFICATE-----Generated at Fri Sep 19 08:53:59 2025 by rpki-client