$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: A7TeAxwLoCPHqBvzD8lTu02ceDo4mh8JzYsoVZr0aYk= Subject key identifier: 98:2A:BF:53:E8:DC:1D:69:64:40:A5:A8:07:52:35:B9:C4:DE:BD:FF Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 0E Signing time: Sat 09 Aug 2025 08:38:01 +0000 Manifest this update: Sat 09 Aug 2025 08:38:00 +0000 Manifest next update: Sat 16 Aug 2025 08:38:00 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: o9j1MnfDwF34eAjLbLI/MmgvclxKyv3bemsxeS0lw+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Aug 9 08:38:00 2025 GMT Not After : Aug 16 08:38:00 2025 GMT Subject: CN=689708e9-9a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:db:8a:d1:4b:d3:d2:c7:96:20:98:a1:d4: bc:c3:49:41:a4:19:22:af:8c:74:2a:4a:67:4d:3f: 19:d4:3d:57:41:ba:8a:d5:c4:d3:98:c4:6c:4d:b4: 42:70:9b:22:a2:d4:f5:e2:1a:67:3f:fd:62:c8:66: 6c:11:1d:7d:aa:78:36:ef:d3:1e:ac:05:0c:0b:16: f4:46:52:d5:a6:9b:7b:8b:9c:5d:b3:c5:f5:ad:79: 18:fd:57:6e:33:be:6f:22:52:d9:d2:35:b4:24:55: 19:15:b1:69:f9:35:67:63:22:0d:ab:e5:cc:13:7b: ef:f3:6d:54:9f:e1:eb:02:d3:32:6b:ea:d9:1f:04: 85:fb:8a:80:7d:04:9a:27:c9:87:75:b1:0e:39:51: 0d:87:9b:14:6c:72:ba:07:56:6f:f5:74:12:29:7b: 51:83:63:88:eb:8d:66:7c:8e:57:86:92:a9:77:7e: fd:30:b9:24:01:2e:4e:e0:9d:0c:38:ef:1f:9f:63: 54:cc:74:78:53:b9:7f:de:e4:85:d1:d6:5d:74:97: c9:72:1b:ce:33:ab:0c:a4:e7:b5:69:31:98:73:e9: 0a:18:8e:05:fc:ca:51:fc:e7:aa:81:ba:6c:1f:67: 8f:c7:58:50:b6:57:1d:fc:cb:35:80:ff:fb:e2:cd: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2A:BF:53:E8:DC:1D:69:64:40:A5:A8:07:52:35:B9:C4:DE:BD:FF X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ae:5c:3f:a9:2c:ba:46:44:0f:60:7a:e4:d5:ed:1f:74:16: a6:cc:53:b8:95:79:b0:9c:da:3d:58:f1:aa:98:de:d3:69:23: ea:b0:d8:6a:91:0e:b8:bf:05:59:db:07:64:8b:e9:00:b4:55: 26:e2:2b:ba:1f:ab:d9:07:e8:0e:b4:0c:19:0f:8a:84:00:e5: 21:85:69:47:a0:3c:6a:94:34:4e:4b:e5:47:c3:76:c9:cf:0e: ee:50:97:21:86:28:6b:17:ca:af:3a:cc:73:dd:af:37:34:96: f2:07:99:b0:2a:f3:8b:27:5f:69:81:b4:26:59:ed:fe:8b:95: 7c:5d:29:38:a4:c2:54:94:9f:ec:87:36:d4:b8:8c:d5:a9:79: de:5e:4d:1e:67:32:a6:ba:10:4e:47:c0:f9:26:3a:29:f2:d8: f3:e7:d8:86:d8:a5:35:29:53:0b:3e:0b:96:0c:fb:c0:8c:a9: 7e:82:de:75:a2:28:51:f5:46:ca:93:4f:16:95:c2:d0:70:b8: 7f:1d:a9:0a:2e:b8:d6:64:7a:80:fb:88:0a:16:aa:a7:c0:94: 92:7c:04:ef:3e:63:da:a9:eb:b3:57:87:ca:32:06:9c:36:2b: 7e:35:d4:42:50:d1:68:03:2c:8f:88:bf:6d:1a:57:9f:49:ae: 35:54:7f:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTA4MDkwODM4MDBaFw0yNTA4MTYwODM4MDBaMBgxFjAUBgNV BAMTDTY4OTcwOGU5LTlhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDER9uK0UvT0seWIJih1LzDSUGkGSKvjHQqSmdNPxnUPVdBuorVxNOYxGxNtEJw myKi1PXiGmc//WLIZmwRHX2qeDbv0x6sBQwLFvRGUtWmm3uLnF2zxfWteRj9V24z vm8iUtnSNbQkVRkVsWn5NWdjIg2r5cwTe+/zbVSf4esC0zJr6tkfBIX7ioB9BJon yYd1sQ45UQ2HmxRscroHVm/1dBIpe1GDY4jrjWZ8jleGkql3fv0wuSQBLk7gnQw4 7x+fY1TMdHhTuX/e5IXR1l10l8lyG84zqwyk57VpMZhz6QoYjgX8ylH856qBumwf Z4/HWFC2Vx38yzWA//vizZEbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmCq/U+jc HWlkQKWoB1I1ucTevf8wHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+uXD+pLLpGRA9geuTV7R90FqbMU7iVebCc2j1Y8aqY3tNpI+qw2GqR Dri/BVnbB2SL6QC0VSbiK7ofq9kH6A60DBkPioQA5SGFaUegPGqUNE5L5UfDdsnP Du5QlyGGKGsXyq86zHPdrzc0lvIHmbAq84snX2mBtCZZ7f6LlXxdKTikwlSUn+yH NtS4jNWped5eTR5nMqa6EE5HwPkmOiny2PPn2IbYpTUpUws+C5YM+8CMqX6C3nWi KFH1RsqTTxaVwtBwuH8dqQouuNZkeoD7iAoWqqfAlJJ8BO8+Y9qp67NXh8oyBpw2 K3411EJQ0WgDLI+Iv20aV59JrjVUf2o= -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:52 2025 by rpki-client