$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: VAdclcb+UOfy5uoYx0t5+w/fDkWvzhHRJ4Y7fu1ybDg= Subject key identifier: 45:75:38:D7:63:B3:1D:02:8F:46:96:2E:A5:58:EA:22:B2:10:2C:60 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 0435 Signing time: Wed 29 Jul 2026 01:01:05 +0000 Manifest this update: Wed 29 Jul 2026 01:01:04 +0000 Manifest next update: Wed 05 Aug 2026 01:01:04 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: XsZ1KGyqHDtcCVZo2VZ+yGM47mpj3sVbhn3ngwK9tDg=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: lAdm3PajVfH/BvXzc6EjbVcxH1i9/ea4wQd516Yt3/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Jul 29 01:01:04 2026 GMT Not After : Aug 5 01:01:04 2026 GMT Subject: CN=6a6950d1-f794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:fc:c6:58:65:0e:8d:bd:3a:21:af:ac:06: 2d:91:f2:c4:0b:bf:9d:aa:52:a9:ca:98:37:ce:ed: 96:b9:29:b8:03:b7:b0:81:0f:07:c3:4b:f3:c1:20: 8e:d7:d5:ba:51:c5:f8:43:52:34:da:c9:3f:f5:3f: dc:d7:09:77:22:6f:ea:b4:d5:b1:18:7b:62:72:7d: b3:02:ec:f5:c9:36:cc:89:84:10:40:4f:53:18:7c: 41:a9:b0:cd:e3:08:41:b4:e7:87:f9:ee:44:ab:78: d4:52:37:ff:21:14:9f:95:47:a1:4e:ae:bf:22:b6: 1d:e3:f6:8e:f2:38:8b:a6:24:00:80:27:48:50:c1: 91:36:5a:de:94:cd:9f:d8:35:95:22:0a:d5:31:33: c1:ae:6d:ba:84:28:30:d3:42:7e:8f:bf:01:03:74: b4:91:43:43:85:28:78:ca:c1:db:bc:ef:c0:0a:3c: 9b:56:5a:45:99:7f:a0:3e:95:5a:7b:6f:1f:86:20: e3:7c:53:64:a8:60:87:0c:66:36:cb:9c:b1:6c:c5: d1:8b:66:70:4b:f1:70:0b:e2:b0:ed:57:e1:f7:da: 8c:5d:e7:f9:af:c4:fd:c4:9b:6d:54:af:87:08:5e: b9:20:98:21:d7:fb:40:bd:03:fa:fd:1d:7f:64:8f: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:75:38:D7:63:B3:1D:02:8F:46:96:2E:A5:58:EA:22:B2:10:2C:60 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:12:95:e0:ed:26:45:19:e2:72:7a:2c:c9:63:07:91:4c:90: af:3c:db:85:30:c5:5b:cb:e4:3e:45:81:98:03:f7:d3:21:82: b0:0d:aa:61:46:78:64:ad:2d:db:6a:d5:b5:6c:18:f1:37:f6: 01:d9:91:50:b4:93:37:9b:01:9f:ee:06:c8:d8:14:a4:e5:74: 87:98:ce:96:1f:16:42:3c:3e:11:7b:a5:ff:0b:f3:e3:3a:dc: 0d:c0:2e:7d:a9:54:5b:60:d0:f1:0b:e2:87:54:13:ca:90:89: 5c:ce:fd:45:c3:05:a9:c7:41:4e:52:c6:9a:d9:00:c6:ea:89: 69:3c:29:c2:4f:1e:8f:52:1f:21:c5:47:57:cc:8a:ce:01:0e: ca:03:99:47:83:3d:f0:9e:18:d5:4e:92:60:ad:5c:0b:0c:54: 1a:24:9b:ac:57:f6:2f:ef:fd:30:e1:fb:15:2a:a9:1a:31:61: 98:57:8c:f4:93:31:69:b5:46:47:33:e6:94:a2:d5:9a:7e:3f: 26:a1:97:72:57:22:20:f6:10:0c:20:85:c8:42:3f:1d:06:b1: 02:19:6f:91:a2:30:a4:db:b7:5c:a2:88:cc:b3:9f:0e:ad:7a: b1:ca:de:e0:dc:e3:af:68:2d:a3:ec:31:63:89:0f:70:27:ad: fa:15:ac:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjYwNzI5MDEwMTA0WhcNMjYwODA1MDEwMTA0WjAYMRYwFAYD VQQDEw02YTY5NTBkMS1mNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52T8xlhlDo29OiGvrAYtkfLEC7+dqlKpypg3zu2WuSm4A7ewgQ8Hw0vzwSCO 19W6UcX4Q1I02sk/9T/c1wl3Im/qtNWxGHticn2zAuz1yTbMiYQQQE9TGHxBqbDN 4whBtOeH+e5Eq3jUUjf/IRSflUehTq6/IrYd4/aO8jiLpiQAgCdIUMGRNlrelM2f 2DWVIgrVMTPBrm26hCgw00J+j78BA3S0kUNDhSh4ysHbvO/ACjybVlpFmX+gPpVa e28fhiDjfFNkqGCHDGY2y5yxbMXRi2ZwS/FwC+Kw7Vfh99qMXef5r8T9xJttVK+H CF65IJgh1/tAvQP6/R1/ZI/46QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEV1ONdj sx0Cj0aWLqVY6iKyECxgMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVhKV4O0mRRnicnosyWMHkUyQrzzbhTDFW8vkPkWBmAP30yGCsA2qYUZ4ZK0t 22rVtWwY8Tf2AdmRULSTN5sBn+4GyNgUpOV0h5jOlh8WQjw+EXul/wvz4zrcDcAu falUW2DQ8Qvih1QTypCJXM79RcMFqcdBTlLGmtkAxuqJaTwpwk8ej1IfIcVHV8yK zgEOygOZR4M98J4Y1U6SYK1cCwxUGiSbrFf2L+/9MOH7FSqpGjFhmFeM9JMxabVG RzPmlKLVmn4/JqGXclciIPYQDCCFyEI/HQaxAhlvkaIwpNu3XKKIzLOfDq16scre 4Nzjr2gto+wxY4kPcCet+hWsFg== -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:11 2026 by rpki-client