$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json) Hash identifier: lRbh6mfJUAw705b4nEW47lGHYSwfFzSBI++oHUYCaUA= Subject key identifier: 14:C0:D8:51:F4:7C:BE:8B:AA:D5:00:7D:A0:CF:5D:B9:8F:59:AA:30 Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Certificate serial: 18C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft Manifest number: 18B3 Signing time: Sat 14 Jun 2025 16:26:28 +0000 Manifest this update: Sat 14 Jun 2025 16:26:27 +0000 Manifest next update: Sat 21 Jun 2025 16:26:27 +0000 Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: hxZINqpnPgkptgbqOoZNHeYBeRVivtWIg9/s9WiQJSE=) 2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: rBSQRTDzDNTdo/Fn8PCTBFu4JOqtjUs4xyOXhorxe8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6344 (0x18c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Validity Not Before: Jun 14 16:26:27 2025 GMT Not After : Jun 21 16:26:27 2025 GMT Subject: CN=684da2b4-cab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:75:76:8f:d2:de:ed:f8:c9:87:85:6f:e5: 15:a0:01:d7:6a:98:78:1a:27:a5:6a:68:2b:36:5d: e0:68:e4:97:e2:5b:3a:1b:f6:36:b2:f3:c7:0f:2a: 33:83:24:c0:e9:61:b9:52:3a:2e:f4:ed:10:29:65: 3b:54:1f:d6:ad:cf:9a:91:c6:41:d4:d2:62:2a:a8: 50:6c:96:fd:b6:51:45:a5:65:81:f4:11:f6:a5:c6: a5:cd:64:17:2e:42:9a:93:22:44:0c:c6:d5:77:24: 72:e1:1d:53:85:91:98:ed:da:ca:8d:d9:5b:1f:bb: 98:ed:bf:b6:bb:54:f6:87:87:3c:e1:a2:78:a4:27: 4a:2c:f0:21:eb:f8:6b:f8:75:57:f6:48:cb:a3:1e: 0d:78:fa:61:ce:04:19:e3:28:e5:9e:73:38:34:5b: 84:1d:5d:20:8b:5e:f7:21:e4:ef:a4:46:fe:36:38: e2:d2:99:8b:12:4a:5a:98:54:13:4a:4e:3f:3c:9e: 76:5d:e9:1f:55:5e:81:ad:49:ea:ba:48:ba:a9:93: 26:83:d8:aa:f2:b8:9e:8c:28:7c:d0:ea:6a:7c:cc: 11:af:2f:72:6f:07:bb:9b:1f:de:6b:74:d2:41:6f: 27:56:78:a8:93:b2:65:e7:8f:78:5b:0c:64:91:47: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:D8:51:F4:7C:BE:8B:AA:D5:00:7D:A0:CF:5D:B9:8F:59:AA:30 X509v3 Authority Key Identifier: keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e3:e5:f4:89:24:b0:09:8f:d4:9b:ad:fb:41:76:53:30:9a: 0c:c6:dd:51:eb:ac:d1:11:9f:8b:04:56:62:15:be:5b:57:4d: 43:e3:95:b6:f8:4b:41:a3:a7:29:8b:7d:90:f1:24:99:18:e7: c7:4e:69:54:15:e3:fb:85:fb:8d:ff:8f:58:76:a9:f6:c8:70: 1c:b9:0c:da:6d:60:5a:db:bd:5b:c7:98:4a:e9:bb:05:34:0f: 30:77:8f:37:f5:94:c5:0f:37:9f:07:4f:1a:1c:28:d7:2e:09: 0c:90:3b:87:78:75:b5:4b:d9:56:c0:80:28:0f:e4:34:e5:ce: 8b:36:e3:e0:ab:b6:dc:09:eb:95:ae:d2:72:5a:c2:75:c5:ff: 0b:24:44:a1:bd:c3:21:4e:f9:c9:86:73:d2:23:7f:4b:82:13: cd:f7:35:3f:86:28:07:70:57:15:6f:e7:e0:64:bf:f4:e9:12: 93:2d:da:f7:24:d5:44:f6:6a:97:9a:ab:76:ad:b1:b7:83:3d: 40:e8:6d:33:a9:e7:04:9d:07:71:35:39:b5:95:12:8b:3e:f4: 6b:3c:cd:fb:5d:4e:52:84:0b:1b:aa:0c:2e:b3:28:35:3f:1f: 62:dd:93:0c:3c:3f:1e:df:d7:e2:18:9d:81:dd:0a:33:d5:a5: 9b:ab:b4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0 NjM0QTY0QUMwHhcNMjUwNjE0MTYyNjI3WhcNMjUwNjIxMTYyNjI3WjAYMRYwFAYD VQQDEw02ODRkYTJiNC1jYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvZ1do/S3u34yYeFb+UVoAHXaph4GielamgrNl3gaOSX4ls6G/Y2svPHDyoz gyTA6WG5Ujou9O0QKWU7VB/Wrc+akcZB1NJiKqhQbJb9tlFFpWWB9BH2pcalzWQX LkKakyJEDMbVdyRy4R1ThZGY7drKjdlbH7uY7b+2u1T2h4c84aJ4pCdKLPAh6/hr +HVX9kjLox4NePphzgQZ4yjlnnM4NFuEHV0gi173IeTvpEb+Njji0pmLEkpamFQT Sk4/PJ52XekfVV6BrUnquki6qZMmg9iq8riejCh80OpqfMwRry9ybwe7mx/ea3TS QW8nVniok7Jl5494WwxkkUeFmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTA2FH0 fL6LqtUAfaDPXbmPWaowMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4 M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo4+X0iSSwCY/Um637QXZTMJoMxt1R66zREZ+LBFZiFb5bV01D45W2 +EtBo6cpi32Q8SSZGOfHTmlUFeP7hfuN/49Ydqn2yHAcuQzabWBa271bx5hK6bsF NA8wd4839ZTFDzefB08aHCjXLgkMkDuHeHW1S9lWwIAoD+Q05c6LNuPgq7bcCeuV rtJyWsJ1xf8LJEShvcMhTvnJhnPSI39LghPN9zU/higHcFcVb+fgZL/06RKTLdr3 JNVE9mqXmqt2rbG3gz1A6G0zqecEnQdxNTm1lRKLPvRrPM37XU5ShAsbqgwusyg1 Px9i3ZMMPD8e39fiGJ2B3Qoz1aWbq7Qj -----END CERTIFICATE-----Generated at Sun Jun 15 09:39:21 2025 by rpki-client