$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json) Hash identifier: fa58JKw7CijBon48jIFp4WWy6LFPi/KPwVp44US4b+M= Subject key identifier: C3:A1:C7:00:C3:3A:7E:DF:CA:78:2B:D6:20:67:1B:8A:AD:38:DC:45 Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Certificate serial: 04F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft Manifest number: 06BF Signing time: Thu 03 Jul 2025 00:02:30 +0000 Manifest this update: Thu 03 Jul 2025 00:02:30 +0000 Manifest next update: Thu 10 Jul 2025 00:02:30 +0000 Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: vC3Y7Qot/uTujfjt7Yb2oaTqxnP/z2DNdW9jSit9U+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Validity Not Before: Jul 3 00:02:30 2025 GMT Not After : Jul 10 00:02:30 2025 GMT Subject: CN=6865c896-1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:cd:96:5c:9b:6f:42:ca:45:e8:53:75:b1: 96:33:dc:34:37:57:17:4f:9d:27:db:68:49:20:d2: 36:a7:e5:6b:09:69:39:00:4d:8f:41:85:19:05:8e: a0:51:90:3c:f1:f5:d6:d6:40:c8:25:8e:0c:23:fe: fc:8c:00:ac:cf:1e:c8:0e:e9:d5:15:9e:e4:f7:2e: 22:2f:21:6c:b3:06:f0:0f:b0:3b:e5:22:1e:ce:d6: 62:25:87:05:45:c9:ef:10:15:25:b2:07:e0:2c:f5: 5d:cf:45:dc:9c:ed:61:7e:dd:fc:b6:31:b0:93:5d: 1c:50:1e:e7:cc:39:c2:51:40:51:44:cb:2b:88:2e: 30:2d:de:e7:a9:6c:01:97:00:b1:46:0e:b2:71:61: f0:69:27:b5:03:d9:02:44:38:24:6f:b4:60:dd:08: 83:2c:17:2c:12:e4:6c:68:90:d0:ce:09:ef:a7:66: d1:3f:5f:24:16:09:3a:71:fc:cf:6c:19:2a:a7:d2: 05:0f:61:36:0e:81:5d:99:52:ff:67:ee:aa:d2:22: 73:7a:cc:89:a7:c1:c2:63:8d:28:5d:4f:6c:d8:bd: f7:01:4c:52:67:40:74:00:c5:5d:08:50:cb:7e:00: cc:c5:d1:16:52:24:f5:2c:c8:a3:4b:c0:a9:76:88: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A1:C7:00:C3:3A:7E:DF:CA:78:2B:D6:20:67:1B:8A:AD:38:DC:45 X509v3 Authority Key Identifier: keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:cd:1a:8d:0f:e9:05:b5:6f:73:48:c2:23:db:57:c0:29: da:12:67:aa:df:18:84:a7:db:13:0a:da:57:2c:43:0c:49:85: 2d:f0:8d:c0:f5:f4:b0:12:59:c0:a2:78:a0:04:d3:b7:e1:88: 77:c5:fe:06:48:d4:36:f1:3b:2b:ef:a8:33:4a:19:f7:a7:25: 1c:08:dc:e2:be:3a:17:1e:08:33:22:31:1a:73:6b:73:a6:63: 4d:4d:b1:3f:5d:c8:d3:0b:5f:a0:46:36:7b:94:3d:8c:44:fe: 76:2f:91:26:c9:ca:2f:02:d2:bd:92:63:3a:31:98:20:3d:63: ca:a3:c6:7d:a0:f6:35:54:78:3f:fa:e7:5c:19:72:a8:a7:35: 7f:26:ce:00:76:74:d3:f4:38:f5:00:c5:cd:64:d8:7f:84:3c: 94:5b:c2:9c:44:c9:8e:22:7f:8b:03:fc:ab:16:ac:2c:3a:6d: 37:d3:54:03:75:a1:8e:76:39:43:3e:4f:3e:1b:20:60:5b:1e: 65:ef:4f:b4:32:b3:d4:ea:17:1d:5b:b1:23:1c:ff:9a:78:c0: 12:87:d1:13:79:fa:a2:3b:52:d6:29:82:4f:a3:05:09:4f:8a: 3d:60:43:4b:a8:bb:a3:a6:e0:80:50:75:2f:09:31:a2:fe:88: bc:e9:2a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1 OERGMDVBOEEwHhcNMjUwNzAzMDAwMjMwWhcNMjUwNzEwMDAwMjMwWjAYMRYwFAYD VQQDEw02ODY1Yzg5Ni0xZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc3Nllybb0LKRehTdbGWM9w0N1cXT50n22hJINI2p+VrCWk5AE2PQYUZBY6g UZA88fXW1kDIJY4MI/78jACszx7IDunVFZ7k9y4iLyFsswbwD7A75SIeztZiJYcF RcnvEBUlsgfgLPVdz0XcnO1hft38tjGwk10cUB7nzDnCUUBRRMsriC4wLd7nqWwB lwCxRg6ycWHwaSe1A9kCRDgkb7Rg3QiDLBcsEuRsaJDQzgnvp2bRP18kFgk6cfzP bBkqp9IFD2E2DoFdmVL/Z+6q0iJzesyJp8HCY40oXU9s2L33AUxSZ0B0AMVdCFDL fgDMxdEWUiT1LMijS8Cpdoh8qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOhxwDD On7fyngr1iBnG4qtONxFMB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGyc0ajQ/pBbVvc0jCI9tXwCnaEmeq3xiEp9sTCtpXLEMMSYUt8I3A 9fSwElnAonigBNO34Yh3xf4GSNQ28Tsr76gzShn3pyUcCNzivjoXHggzIjEac2tz pmNNTbE/XcjTC1+gRjZ7lD2MRP52L5EmycovAtK9kmM6MZggPWPKo8Z9oPY1VHg/ +udcGXKopzV/Js4AdnTT9Dj1AMXNZNh/hDyUW8KcRMmOIn+LA/yrFqwsOm0301QD daGOdjlDPk8+GyBgWx5l70+0MrPU6hcdW7EjHP+aeMASh9ETefqiO1LWKYJPowUJ T4o9YENLqLujpuCAUHUvCTGi/oi86Sr2 -----END CERTIFICATE-----Generated at Thu Jul 3 02:08:26 2025 by rpki-client