$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: 15IgnqZaTwm7K5SeNHcG8e4EV5f+mhE7UvNSLkI8oH4= Subject key identifier: 33:23:39:EF:FA:22:2B:67:B7:BB:09:07:62:D4:C6:F8:B6:25:2C:A9 Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 037B Signing time: Thu 07 Aug 2025 01:27:24 +0000 Manifest this update: Thu 07 Aug 2025 01:27:24 +0000 Manifest next update: Thu 14 Aug 2025 01:27:24 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: FrASAd7mxFSSdL3HLSYTdc4Qw7TGjL1+UgokA9c5YBk=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Aug 7 01:27:24 2025 GMT Not After : Aug 14 01:27:24 2025 GMT Subject: CN=689400fc-8064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:79:8f:7f:1e:f5:b5:50:03:cf:11:38:f1: cc:5e:3f:27:0e:aa:98:c3:64:eb:0d:10:e4:2a:79: 57:a1:76:5c:fb:f8:d5:46:81:e7:8e:78:b9:56:6f: 6f:51:5c:16:b7:c1:34:21:cc:03:ea:19:36:2b:17: c2:76:cb:10:b4:d0:e1:f4:9a:a7:65:21:3a:c9:a1: ff:08:22:11:5a:9a:34:01:6a:81:31:1b:ee:8b:bc: fa:cb:41:b3:83:b7:8e:08:56:9a:78:ee:e6:dc:36: b3:cf:d0:56:a1:bb:d4:ff:cc:af:bd:0b:60:76:b9: 1e:e0:50:2c:1d:f3:e1:2e:a2:bc:49:c0:0e:69:a6: 9a:55:30:be:c4:ad:6b:36:c5:e5:53:7c:2e:3c:30: 32:a6:97:11:7c:2f:78:f7:ff:01:3a:64:91:2c:4e: f1:5e:c6:ce:fa:f6:78:bc:19:eb:c1:53:08:a2:ab: 94:9b:0a:ee:18:19:8f:16:3f:2d:64:89:2d:86:68: 00:48:e8:95:9c:0b:3d:94:80:a8:66:b6:f3:eb:a2: 78:88:16:08:53:07:6c:d1:8c:7d:4e:cb:38:5b:c6: 5f:85:8d:a4:81:41:1c:02:46:b4:36:a5:e9:05:2e: 42:8a:c7:05:d8:c9:66:0b:92:9b:55:bc:8c:9c:1a: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:39:EF:FA:22:2B:67:B7:BB:09:07:62:D4:C6:F8:B6:25:2C:A9 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f8:c1:9f:e2:90:ff:61:a2:fc:ae:df:9d:b5:ab:b5:bb:ce: 6d:a2:d6:17:2a:bc:ee:a0:35:9b:8c:4c:1a:3b:e8:6d:a4:1d: 0c:39:f6:71:3e:60:73:dd:59:1d:75:7b:c0:ee:f1:e0:79:46: 33:9a:60:0c:3e:31:15:1c:5e:40:c9:a1:da:8e:2a:a9:b9:ae: e2:16:2e:00:ec:52:44:8f:cb:c7:a6:0c:43:f6:60:ca:87:42: 9d:70:db:01:b8:87:3f:0c:d6:35:93:9f:f1:e1:74:04:49:f3: e1:e9:e9:29:cc:54:08:0f:69:b5:20:33:75:af:6e:ca:df:ad: 70:5e:dd:46:eb:c7:da:4b:d1:32:76:6d:51:6a:ac:46:2a:06: c2:35:af:d9:e1:25:7a:18:7a:4e:73:8e:ed:b1:45:21:94:ab: d8:73:ea:4a:b1:7d:d7:75:27:d2:e2:a5:6f:f5:7f:d9:6c:64: c7:6a:a7:0e:22:bd:e7:ff:fd:f3:77:d8:8e:3e:0d:c8:d4:67: 86:a7:84:91:4f:f0:fa:49:14:05:b0:d0:c7:8a:80:42:3c:92: 03:9d:3a:13:70:3d:56:c7:7d:e1:6f:37:82:cc:63:a8:a6:35: 9e:b2:3a:58:dc:a9:32:8f:ef:c5:24:fc:ce:b3:90:0e:d7:0c: 3f:86:d8:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUwODA3MDEyNzI0WhcNMjUwODE0MDEyNzI0WjAYMRYwFAYD VQQDEw02ODk0MDBmYy04MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUp5j38e9bVQA88ROPHMXj8nDqqYw2TrDRDkKnlXoXZc+/jVRoHnjni5Vm9v UVwWt8E0IcwD6hk2KxfCdssQtNDh9JqnZSE6yaH/CCIRWpo0AWqBMRvui7z6y0Gz g7eOCFaaeO7m3Dazz9BWobvU/8yvvQtgdrke4FAsHfPhLqK8ScAOaaaaVTC+xK1r NsXlU3wuPDAyppcRfC949/8BOmSRLE7xXsbO+vZ4vBnrwVMIoquUmwruGBmPFj8t ZIkthmgASOiVnAs9lICoZrbz66J4iBYIUwds0Yx9Tss4W8ZfhY2kgUEcAka0NqXp BS5CiscF2MlmC5KbVbyMnBqLewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMjOe/6 Iitnt7sJB2LUxvi2JSypMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+MGf4pD/YaL8rt+dtau1u85totYXKrzuoDWbjEwaO+htpB0MOfZx PmBz3VkddXvA7vHgeUYzmmAMPjEVHF5AyaHajiqpua7iFi4A7FJEj8vHpgxD9mDK h0KdcNsBuIc/DNY1k5/x4XQESfPh6ekpzFQID2m1IDN1r27K361wXt1G68faS9Ey dm1RaqxGKgbCNa/Z4SV6GHpOc47tsUUhlKvYc+pKsX3XdSfS4qVv9X/ZbGTHaqcO Ir3n//3zd9iOPg3I1GeGp4SRT/D6SRQFsNDHioBCPJIDnToTcD1Wx33hbzeCzGOo pjWesjpY3Kkyj+/FJPzOs5AO1ww/htiW -----END CERTIFICATE-----Generated at Sat Aug 9 01:14:47 2025 by rpki-client