$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: LCut9wxIYSTySvAsfS0KbNbjkGwWusOgIQE2dO9lxrI= Subject key identifier: 14:0F:36:65:B8:0A:46:AE:DF:2D:E7:E1:56:B8:40:FE:3F:FF:24:35 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 0366 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0362 Signing time: Thu 19 Jun 2025 00:47:01 +0000 Manifest this update: Thu 19 Jun 2025 00:47:00 +0000 Manifest next update: Thu 26 Jun 2025 00:47:00 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: 1lXOCTpq8PUXbxg7GielXsXUQFiSq8DmI7b//ST7Q/s=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Jun 19 00:47:00 2025 GMT Not After : Jun 26 00:47:00 2025 GMT Subject: CN=68535e04-221a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:75:7a:5b:25:c0:d3:70:36:4d:63:ea:dc: 17:b7:3e:97:03:6e:f4:97:a7:0b:79:ae:2e:43:5b: 43:85:b2:6b:a8:1a:92:c9:b7:74:6b:dc:83:cd:e8: 4e:72:9a:a8:4c:55:67:9d:58:ac:9b:6a:a4:52:8a: 6c:1e:59:cb:06:d2:46:31:dd:6e:67:d4:43:99:dd: c1:8d:e7:47:e9:cb:9f:fc:ca:ef:aa:0c:64:e4:64: a4:d7:2d:22:0f:f0:3a:38:08:41:af:27:63:37:96: bd:7f:48:02:ca:7f:18:9c:17:59:c1:b9:37:a3:30: b2:59:e7:1d:75:f9:cb:ea:c1:04:f0:31:16:b6:57: 81:f3:94:2b:66:91:7b:63:0d:47:a0:58:a2:a8:00: 47:3f:3f:69:ca:1d:64:64:78:4d:a0:b2:09:c9:a5: fd:5b:85:69:b6:42:2c:9c:59:32:6b:6c:b0:f7:72: 7b:5b:33:17:94:17:31:76:d1:0a:8d:6d:ed:5e:41: 4f:a9:ff:2c:c5:d5:16:06:05:cf:4a:55:5e:d2:06: 4c:67:ed:98:4b:46:14:25:5a:b8:5a:ec:c2:b5:8a: 9b:bd:69:3c:bd:4d:01:99:82:f2:a4:1c:ca:af:d1: 2b:27:a6:1d:f0:cc:d5:58:20:eb:67:d3:0c:4c:66: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:36:65:B8:0A:46:AE:DF:2D:E7:E1:56:B8:40:FE:3F:FF:24:35 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d9:97:24:86:e7:4e:1c:af:5a:fe:d7:0d:9e:d7:7c:f4:f9: a7:ce:df:5e:0a:6b:e3:11:39:13:bf:6c:22:89:20:50:07:c1: 7f:1f:21:c5:64:43:49:05:6d:74:a2:f1:f6:3d:c4:23:11:82: c8:07:f6:14:cf:00:86:d5:c2:a2:be:1e:3d:0a:8a:0a:5c:df: e9:1f:30:6d:ea:4c:d8:0c:d1:0f:d5:f6:e8:04:59:0e:49:3a: 3a:cc:48:cc:fa:82:3c:16:85:43:11:9e:59:7c:f6:69:55:0d: 65:9b:88:c6:42:75:8d:8a:ab:76:30:65:4d:a8:b5:14:3c:72: c8:6a:89:d3:99:c5:3f:1c:7e:8c:30:c6:ef:87:b5:50:b1:55: 71:5e:b8:e6:56:32:31:b6:ce:b3:da:08:ee:12:97:83:38:02: 12:42:02:64:fa:d2:54:53:2c:57:62:13:2d:bd:53:5f:ad:34: 08:c5:3c:6e:5a:25:1b:e9:f0:01:0f:9a:1e:ee:de:61:b8:8f: 10:01:46:f3:a0:54:03:07:1f:0f:67:8d:e3:eb:26:82:b1:12: ba:26:19:94:d7:82:9f:59:bc:f0:39:ce:22:7f:3a:5b:a6:fd: 69:6c:ac:d7:94:52:66:6a:bc:2d:76:b1:a7:df:86:8f:6d:6c: 4f:54:93:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwNjE5MDA0NzAwWhcNMjUwNjI2MDA0NzAwWjAYMRYwFAYD VQQDEw02ODUzNWUwNC0yMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx51elslwNNwNk1j6twXtz6XA270l6cLea4uQ1tDhbJrqBqSybd0a9yDzehO cpqoTFVnnVism2qkUopsHlnLBtJGMd1uZ9RDmd3BjedH6cuf/Mrvqgxk5GSk1y0i D/A6OAhBrydjN5a9f0gCyn8YnBdZwbk3ozCyWecddfnL6sEE8DEWtleB85QrZpF7 Yw1HoFiiqABHPz9pyh1kZHhNoLIJyaX9W4VptkIsnFkya2yw93J7WzMXlBcxdtEK jW3tXkFPqf8sxdUWBgXPSlVe0gZMZ+2YS0YUJVq4WuzCtYqbvWk8vU0BmYLypBzK r9ErJ6Yd8MzVWCDrZ9MMTGYjywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQPNmW4 Ckau3y3n4Va4QP4//yQ1MB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP2ZckhudOHK9a/tcNntd89Pmnzt9eCmvjETkTv2wiiSBQB8F/HyHF ZENJBW10ovH2PcQjEYLIB/YUzwCG1cKivh49CooKXN/pHzBt6kzYDNEP1fboBFkO STo6zEjM+oI8FoVDEZ5ZfPZpVQ1lm4jGQnWNiqt2MGVNqLUUPHLIaonTmcU/HH6M MMbvh7VQsVVxXrjmVjIxts6z2gjuEpeDOAISQgJk+tJUUyxXYhMtvVNfrTQIxTxu WiUb6fABD5oe7t5huI8QAUbzoFQDBx8PZ43j6yaCsRK6JhmU14KfWbzwOc4ifzpb pv1pbKzXlFJmarwtdrGn34aPbWxPVJPR -----END CERTIFICATE-----Generated at Thu Jun 19 05:53:30 2025 by rpki-client