$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: vyBU/2Y5/lIkEABcSx2IsyEgkS7qdezIp4+aLE1vLsU= Subject key identifier: 29:F4:92:91:67:71:F5:18:6E:69:40:B7:2E:5D:3D:68:F0:2C:16:3B Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 03F1 Signing time: Thu 07 Aug 2025 01:04:35 +0000 Manifest this update: Thu 07 Aug 2025 01:04:34 +0000 Manifest next update: Thu 14 Aug 2025 01:04:34 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: sDMIIKPr6OmVy+7w34bleYxoos5ROpYpCjJP9mUTPtA=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Aug 7 01:04:34 2025 GMT Not After : Aug 14 01:04:34 2025 GMT Subject: CN=6893fba2-7527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:fa:9d:e8:40:ea:ef:bc:62:49:b9:0a:ed: 50:3b:00:ac:d2:1c:3e:40:02:89:fa:69:59:7a:07: 0f:40:ce:2c:39:af:07:b3:eb:72:a5:4d:06:b4:e7: ba:a7:6e:53:1d:3b:4e:dd:6d:f8:a8:53:ae:7a:88: 90:7d:34:9e:1f:a4:6c:2e:b9:a0:16:20:db:44:07: e0:8c:22:90:43:04:3f:1e:30:ef:a1:7d:5a:a7:03: 1e:dd:bd:35:b3:2c:56:22:da:45:96:fa:1a:fd:dc: 54:2b:bb:2a:d7:ec:af:a6:62:cf:6e:32:a1:de:0e: e6:0e:54:07:86:16:f9:fc:ee:85:48:7a:7d:f7:71: bb:44:e5:5d:46:66:86:0d:c7:2c:f6:b3:e2:45:f0: 40:29:48:b8:01:89:80:53:41:34:a9:07:dc:3f:e0: eb:7f:c7:03:41:c6:ab:4c:ad:46:24:93:fd:43:32: 96:20:03:e8:18:32:40:2f:91:72:64:8d:4c:a0:67: 36:dd:7f:db:db:b3:73:bf:36:7a:7a:e8:9b:1c:d1: 8b:37:ec:82:b2:a1:c4:ec:09:04:f7:1d:36:ea:9f: 5d:c1:96:d2:e9:8c:4e:7e:74:4a:e4:34:dd:37:92: ac:55:e5:c0:66:8c:b5:91:9e:7e:8e:61:9f:f8:93: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F4:92:91:67:71:F5:18:6E:69:40:B7:2E:5D:3D:68:F0:2C:16:3B X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:38:46:eb:49:bb:95:1b:cc:a3:91:53:30:3b:7d:c2:9f:f7: 9e:e9:5b:da:d7:64:a7:43:6e:e3:3a:1a:f0:17:32:ba:e7:2a: 4d:a3:a3:28:c1:86:45:19:08:2f:45:50:40:21:a0:3b:ca:90: 00:41:58:13:6c:54:68:76:49:f5:26:0c:ce:61:3b:cf:2d:e3: 0e:87:ef:dd:da:21:a3:a1:51:83:dd:a8:78:91:13:21:32:66: b2:51:c4:ec:62:0d:60:77:dd:c4:d5:b7:ee:00:57:69:41:0c: a4:01:36:8a:17:34:33:1d:59:5f:20:69:6a:21:e7:1b:29:00: 91:4a:c6:18:53:a8:88:dd:0f:c2:36:55:94:0b:a7:d5:8f:8e: 79:08:b6:09:1b:1a:db:a0:a6:f9:b9:13:42:7e:52:c3:77:8e: 2b:f9:f5:49:55:fd:da:7f:1e:81:d7:59:1a:55:d2:ec:67:e5: 0e:8f:08:93:9b:c4:7d:80:14:80:7e:22:a2:64:6a:89:14:d3: c3:d7:13:ae:d2:8e:76:a4:e8:9e:fe:34:d0:5f:c4:6b:a9:26: 8b:51:a3:83:94:74:db:fd:4e:84:4f:18:2d:10:7c:b6:91:a1: 67:70:2b:74:4f:7b:1f:7b:41:c9:16:5f:b0:69:6a:d9:97:e5: f6:90:1b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUwODA3MDEwNDM0WhcNMjUwODE0MDEwNDM0WjAYMRYwFAYD VQQDEw02ODkzZmJhMi03NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLb6nehA6u+8Ykm5Cu1QOwCs0hw+QAKJ+mlZegcPQM4sOa8Hs+typU0GtOe6 p25THTtO3W34qFOueoiQfTSeH6RsLrmgFiDbRAfgjCKQQwQ/HjDvoX1apwMe3b01 syxWItpFlvoa/dxUK7sq1+yvpmLPbjKh3g7mDlQHhhb5/O6FSHp993G7ROVdRmaG Dccs9rPiRfBAKUi4AYmAU0E0qQfcP+Drf8cDQcarTK1GJJP9QzKWIAPoGDJAL5Fy ZI1MoGc23X/b27NzvzZ6euibHNGLN+yCsqHE7AkE9x026p9dwZbS6YxOfnRK5DTd N5KsVeXAZoy1kZ5+jmGf+JOl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn0kpFn cfUYbmlAty5dPWjwLBY7MB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8OEbrSbuVG8yjkVMwO33Cn/ee6Vva12SnQ27jOhrwFzK65ypNo6Mo wYZFGQgvRVBAIaA7ypAAQVgTbFRodkn1JgzOYTvPLeMOh+/d2iGjoVGD3ah4kRMh MmayUcTsYg1gd93E1bfuAFdpQQykATaKFzQzHVlfIGlqIecbKQCRSsYYU6iI3Q/C NlWUC6fVj455CLYJGxrboKb5uRNCflLDd44r+fVJVf3afx6B11kaVdLsZ+UOjwiT m8R9gBSAfiKiZGqJFNPD1xOu0o52pOie/jTQX8RrqSaLUaODlHTb/U6ETxgtEHy2 kaFncCt0T3sfe0HJFl+waWrZl+X2kBse -----END CERTIFICATE-----Generated at Fri Aug 8 20:40:11 2025 by rpki-client