$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json) Hash identifier: TmMmUW2HdgxQAVl+OOt++dU8dSEb8Xm290uM2cPk6Xg= Subject key identifier: 28:38:21:FE:46:C9:93:24:2E:80:3D:DF:32:06:23:20:0F:95:96:08 Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft Manifest number: 068F Signing time: Wed 14 May 2025 23:49:17 +0000 Manifest this update: Wed 14 May 2025 23:49:16 +0000 Manifest next update: Wed 21 May 2025 23:49:16 +0000 Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: g3XZRSbgwqcPbXVlpRBXTKHPyzE9UTFqTW0+8WO9mcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Validity Not Before: May 14 23:49:16 2025 GMT Not After : May 21 23:49:16 2025 GMT Subject: CN=68252bfc-f293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:21:78:ac:5c:7a:3e:20:3a:de:2f:41:f2: 5d:2c:71:5c:81:04:7b:4d:f5:c0:80:93:8e:0a:15: 83:30:6c:81:4e:6c:f7:28:df:8d:a2:bd:38:ad:5c: 16:c2:a6:d2:06:bb:a5:08:dd:05:c3:3b:c3:ae:6c: d5:4b:ca:45:15:50:f1:78:87:3e:96:22:61:41:e5: 12:91:30:fb:94:54:97:d3:fa:93:c6:ba:65:5a:94: 77:1e:81:d2:6d:00:dd:0f:bb:b8:9d:e9:d8:e9:74: f1:63:5d:3a:a8:fb:2c:d7:95:08:33:61:6e:bc:3e: a3:cc:b6:c3:3b:9c:ab:b9:67:85:aa:58:09:94:cd: 90:fe:03:f2:4c:0b:8d:9c:17:b1:48:e1:9b:9d:7c: ea:ec:01:90:9e:56:14:7b:97:53:54:68:8d:c9:6a: 9e:fd:6a:a2:0a:3c:cf:d2:fd:7a:ed:85:f4:7e:ca: 6a:3d:1e:b2:e6:35:79:8d:5e:b3:d2:d1:73:fc:e1: 2a:c0:66:1e:9a:2e:55:51:0c:72:fa:99:e4:3b:26: af:08:5e:22:20:a8:bc:ca:88:87:21:3d:71:c5:f3: a0:c3:d8:90:06:4f:b1:4e:0e:2f:7d:59:93:78:b6: 1a:59:67:55:33:4e:9d:a2:7f:da:ca:7f:a8:f5:f8: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:38:21:FE:46:C9:93:24:2E:80:3D:DF:32:06:23:20:0F:95:96:08 X509v3 Authority Key Identifier: keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:1c:8b:13:f8:de:8f:9e:39:ad:ca:15:bd:94:c6:2d:53:79: 91:2f:ff:bb:e7:ed:05:cb:f9:ef:ad:e0:f4:7e:68:f4:ed:9c: 06:b7:48:c7:e5:6a:60:fe:42:11:e6:be:b7:0f:be:91:fc:93: 9b:8f:9e:d7:be:96:a8:d8:9a:9c:97:b2:ab:a9:fa:95:53:9e: fd:37:1f:8e:72:fe:36:7f:9e:04:95:ae:e1:52:ef:ba:41:9d: e3:e7:a0:f8:7e:7a:e4:64:72:ca:7e:6f:c4:8e:11:2f:9d:0d: 95:c4:ca:54:37:77:95:e4:46:8a:e6:d1:41:ac:e8:b4:9b:61: 05:6b:d0:ba:a9:44:01:65:1a:51:74:3a:80:66:b7:33:f4:12: 22:43:dc:19:22:48:14:c7:47:54:90:78:ec:16:de:10:6f:7d: 46:0a:e6:cb:f4:73:38:9c:e8:b0:2e:82:53:6e:b4:90:aa:1b: 19:79:84:65:10:70:1d:a3:9a:cc:6d:55:95:d8:9b:2a:cc:d7: 58:f5:0a:cf:e6:0e:eb:76:80:06:a9:b9:82:fd:84:2d:02:26: 73:1a:31:4d:7a:41:03:0c:85:24:bd:6b:04:0a:09:c6:c5:50: 0d:0e:b3:8e:b2:05:69:86:05:a0:b8:df:60:a1:24:0e:e3:7f: 0c:02:95:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1 OERGMDVBOEEwHhcNMjUwNTE0MjM0OTE2WhcNMjUwNTIxMjM0OTE2WjAYMRYwFAYD VQQDEw02ODI1MmJmYy1mMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTsheKxcej4gOt4vQfJdLHFcgQR7TfXAgJOOChWDMGyBTmz3KN+Nor04rVwW wqbSBrulCN0FwzvDrmzVS8pFFVDxeIc+liJhQeUSkTD7lFSX0/qTxrplWpR3HoHS bQDdD7u4nenY6XTxY106qPss15UIM2FuvD6jzLbDO5yruWeFqlgJlM2Q/gPyTAuN nBexSOGbnXzq7AGQnlYUe5dTVGiNyWqe/WqiCjzP0v167YX0fspqPR6y5jV5jV6z 0tFz/OEqwGYemi5VUQxy+pnkOyavCF4iIKi8yoiHIT1xxfOgw9iQBk+xTg4vfVmT eLYaWWdVM06don/ayn+o9fgjJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg4If5G yZMkLoA93zIGIyAPlZYIMB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBHIsT+N6PnjmtyhW9lMYtU3mRL/+75+0Fy/nvreD0fmj07ZwGt0jH 5Wpg/kIR5r63D76R/JObj57Xvpao2Jqcl7KrqfqVU579Nx+Ocv42f54Ela7hUu+6 QZ3j56D4fnrkZHLKfm/EjhEvnQ2VxMpUN3eV5EaK5tFBrOi0m2EFa9C6qUQBZRpR dDqAZrcz9BIiQ9wZIkgUx0dUkHjsFt4Qb31GCubL9HM4nOiwLoJTbrSQqhsZeYRl EHAdo5rMbVWV2JsqzNdY9QrP5g7rdoAGqbmC/YQtAiZzGjFNekEDDIUkvWsECgnG xVANDrOOsgVphgWguN9goSQO438MApW2 -----END CERTIFICATE-----Generated at Thu May 15 17:59:18 2025 by rpki-client