$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: xXLD3f7ohn6LjFeq+xRjxChQa2sMQFHocK29UNDSQVg= Subject key identifier: 51:EC:51:24:18:FC:1D:26:88:9B:32:16:BE:75:26:B2:36:DB:55:C3 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 0229 Signing time: Mon 11 Aug 2025 02:11:52 +0000 Manifest this update: Mon 11 Aug 2025 02:11:52 +0000 Manifest next update: Mon 18 Aug 2025 02:11:52 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: XjtrxnAOzmJpMNsHUU6ED0jaQxkBb4le7qFHYYyKjx0=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: IhgTSFQXOA9FXL9H0ErI6IsYaAMceNv3flW3IvKbv4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Aug 11 02:11:52 2025 GMT Not After : Aug 18 02:11:52 2025 GMT Subject: CN=68995168-2269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:47:58:88:a2:b1:2e:79:04:df:b3:4a:86: 46:8b:58:31:3c:a3:31:6a:50:32:43:e1:b3:3b:a2: aa:61:4e:be:63:41:ff:10:f6:6f:ce:a6:d3:3a:c9: b9:91:0e:ad:bf:b5:c1:5e:25:c1:d1:6a:83:49:b5: e5:40:e1:be:ca:8c:7b:5f:0b:1f:9b:a5:e8:d0:68: 24:7d:64:6e:37:fe:8c:0d:2f:a7:4e:2e:22:f2:16: 9b:13:15:9d:4b:21:27:44:1f:77:09:3c:8f:0e:12: 4d:4d:8c:e1:39:4c:87:64:47:0d:e5:2c:25:4e:a7: 89:da:e3:59:b6:f1:e6:9b:56:47:15:57:69:76:9f: e2:71:41:90:cf:f5:18:43:58:72:03:f9:3a:e6:e5: 94:d8:18:41:40:bb:a7:3a:90:c7:14:d8:a4:14:ff: 6f:96:ee:8e:9c:26:20:6c:fc:4f:dd:59:2d:78:81: 4c:00:c1:49:4d:0c:68:c6:b3:8c:00:9f:7f:07:5a: 0f:31:5b:cb:07:c9:5b:d5:73:ff:57:74:73:e0:35: da:b2:f0:86:f7:dd:5f:d7:4f:bd:39:7b:7d:35:ea: e9:2e:ee:45:fa:e1:96:ea:a5:90:4b:60:24:90:64: be:52:ac:b9:59:f6:80:76:e4:12:3e:95:04:20:21: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EC:51:24:18:FC:1D:26:88:9B:32:16:BE:75:26:B2:36:DB:55:C3 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5e:76:74:b2:58:96:ea:20:1f:1c:e4:df:83:67:8d:95:9a: 05:e9:8d:68:71:d0:6c:b7:66:5a:e1:59:c1:41:42:3e:c7:cf: 85:cf:0e:7d:0a:8b:9a:49:67:2a:3c:2b:63:a2:bc:46:16:2f: 30:c4:88:5c:3b:d5:7a:2f:fc:d2:22:21:76:6c:96:71:a8:40: ff:f1:8a:9b:69:52:d5:71:e1:03:6b:47:f5:3d:68:30:2b:5b: 8f:5a:82:9f:92:60:89:2e:5e:ab:bf:b5:0d:b8:67:fe:ac:58: 5e:7e:01:b8:5c:19:b3:93:c7:8e:84:66:ff:5f:d7:f6:f5:80: 74:e2:57:56:7e:cf:2a:83:77:41:e8:32:91:c8:f5:dc:a1:3b: ab:58:9d:1d:f2:84:0d:91:04:af:75:72:b0:64:27:10:4f:69: 22:dc:db:34:8d:21:34:7e:40:1c:b6:c3:16:45:5a:e1:a6:10: 9c:6e:77:ee:7e:40:cb:73:81:1c:c3:e1:79:e3:b2:34:2b:db: ea:ca:af:b1:78:e1:ea:bb:8d:b4:45:b4:98:65:52:43:0c:75: 29:4f:fc:ca:fe:d3:21:fd:bf:fa:a0:46:75:cb:1c:52:4f:4d: 87:23:cf:82:14:84:ba:9b:04:ff:9f:3c:af:77:35:c2:73:12: cb:1b:67:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwODExMDIxMTUyWhcNMjUwODE4MDIxMTUyWjAYMRYwFAYD VQQDEw02ODk5NTE2OC0yMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAFHWIiisS55BN+zSoZGi1gxPKMxalAyQ+GzO6KqYU6+Y0H/EPZvzqbTOsm5 kQ6tv7XBXiXB0WqDSbXlQOG+yox7Xwsfm6Xo0GgkfWRuN/6MDS+nTi4i8habExWd SyEnRB93CTyPDhJNTYzhOUyHZEcN5SwlTqeJ2uNZtvHmm1ZHFVdpdp/icUGQz/UY Q1hyA/k65uWU2BhBQLunOpDHFNikFP9vlu6OnCYgbPxP3VkteIFMAMFJTQxoxrOM AJ9/B1oPMVvLB8lb1XP/V3Rz4DXasvCG991f10+9OXt9NerpLu5F+uGW6qWQS2Ak kGS+Uqy5WfaAduQSPpUEICF81QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHsUSQY /B0miJsyFr51JrI221XDMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZXnZ0sliW6iAfHOTfg2eNlZoF6Y1ocdBst2Za4VnBQUI+x8+Fzw59 CouaSWcqPCtjorxGFi8wxIhcO9V6L/zSIiF2bJZxqED/8YqbaVLVceEDa0f1PWgw K1uPWoKfkmCJLl6rv7UNuGf+rFhefgG4XBmzk8eOhGb/X9f29YB04ldWfs8qg3dB 6DKRyPXcoTurWJ0d8oQNkQSvdXKwZCcQT2ki3Ns0jSE0fkActsMWRVrhphCcbnfu fkDLc4Ecw+F547I0K9vqyq+xeOHqu420RbSYZVJDDHUpT/zK/tMh/b/6oEZ1yxxS T02HI8+CFIS6mwT/nzyvdzXCcxLLG2dh -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:43 2025 by rpki-client