$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: k8ui8YfgCi3coqzPg9XOZn/H2LzhdtXAVbKtlYUkBWY= Subject key identifier: C6:3E:85:52:D2:89:CA:87:05:98:B3:C7:89:9C:E0:79:65:34:B3:46 Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 059A Signing time: Fri 22 Aug 2025 23:23:36 +0000 Manifest this update: Fri 22 Aug 2025 23:23:35 +0000 Manifest next update: Fri 29 Aug 2025 23:23:35 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: Mi6gch1pIPiunGv+wo764on0Ogf/cQjPLbB92CfwVAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: Aug 22 23:23:35 2025 GMT Not After : Aug 29 23:23:35 2025 GMT Subject: CN=68a8fbf7-6eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:6e:f3:95:e1:df:b4:4a:41:a2:3e:44:2d: e3:24:ef:0d:77:6c:ac:12:29:f8:84:6b:1f:6f:98: d0:f1:99:68:4a:57:6f:86:9c:39:bf:bf:69:30:35: b3:04:40:b9:3c:eb:25:6b:33:70:0c:8f:c4:ed:d1: 68:80:0f:37:98:b4:f4:68:6d:3c:0b:0f:65:65:0a: 6c:57:89:7e:af:d5:c9:a2:aa:dd:81:0a:7f:a4:ed: 6e:57:bd:82:36:16:74:68:37:45:c5:ab:b5:dd:9b: 0c:53:d9:4e:c2:49:2f:a2:3b:69:1e:db:43:77:c2: 47:02:e6:22:ec:05:96:c7:2f:6b:34:41:0b:20:88: b0:e6:90:39:f5:b3:ed:6e:a5:1d:7a:00:02:aa:45: 9a:ac:1a:66:21:e4:e0:07:05:12:06:9d:11:1d:6a: 6a:9b:d6:26:d1:93:d1:8b:c4:f2:4c:05:f7:b1:b7: 7a:c9:d8:fe:fa:f1:04:e2:30:03:96:a3:89:4a:20: 30:01:fa:6d:20:e9:8b:0d:97:85:59:ba:69:ac:3c: 91:9e:79:46:fd:7c:20:a9:11:7b:f8:f5:d6:36:95: 1a:ba:bb:2a:ba:4e:a0:a2:db:4e:ee:7a:e2:a7:74: 02:7a:c1:da:b9:bb:14:1d:d7:a5:f7:57:5f:b2:f4: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3E:85:52:D2:89:CA:87:05:98:B3:C7:89:9C:E0:79:65:34:B3:46 X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:71:f7:d1:b6:c5:32:21:8b:13:df:97:f6:9f:89:97:46:78: fc:02:83:4a:0f:80:61:e5:e5:a1:f2:d8:c6:9c:3c:2c:e2:37: 1f:3c:49:4c:21:2e:d9:92:31:e0:69:00:71:89:0b:db:65:75: 43:56:6a:b7:20:0a:63:83:fc:45:d3:1f:7b:90:69:2f:1d:a5: e8:84:3e:fa:a7:eb:ba:bb:e5:ca:a2:e2:c1:34:70:53:3a:2b: b4:58:3b:1c:41:61:2c:30:7c:20:96:59:9d:07:85:4d:e9:e1: d5:b0:56:8c:76:c3:3d:e6:f1:f9:05:77:34:9a:ee:36:99:69: 28:75:1b:08:8c:2c:0c:5c:98:41:85:13:2f:35:19:2a:e6:73: 6b:3d:67:52:8c:30:3e:5f:1d:79:ea:fd:a6:0e:37:d2:ff:90: b8:1c:ae:c4:c7:1e:b5:ba:1c:61:b2:0a:c2:06:af:70:43:1e: 66:43:7e:9b:fe:56:0e:18:e8:a3:9a:e8:a3:3f:0c:4b:ec:0a: f2:50:3b:1a:87:ec:a6:82:8a:c7:b0:54:ea:a8:da:71:e1:ff: 6e:57:fa:ea:62:44:e5:20:3f:d6:b2:22:e9:e9:13:95:1d:86: 92:2c:67:9b:da:79:f0:46:65:44:14:06:02:02:37:81:eb:a9: 8b:1d:70:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjUwODIyMjMyMzM1WhcNMjUwODI5MjMyMzM1WjAYMRYwFAYD VQQDEw02OGE4ZmJmNy02ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArilu85Xh37RKQaI+RC3jJO8Nd2ysEin4hGsfb5jQ8ZloSldvhpw5v79pMDWz BEC5POslazNwDI/E7dFogA83mLT0aG08Cw9lZQpsV4l+r9XJoqrdgQp/pO1uV72C NhZ0aDdFxau13ZsMU9lOwkkvojtpHttDd8JHAuYi7AWWxy9rNEELIIiw5pA59bPt bqUdegACqkWarBpmIeTgBwUSBp0RHWpqm9Ym0ZPRi8TyTAX3sbd6ydj++vEE4jAD lqOJSiAwAfptIOmLDZeFWbpprDyRnnlG/XwgqRF7+PXWNpUaursquk6gottO7nri p3QCesHaubsUHdel91dfsvTd/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY+hVLS icqHBZizx4mc4HllNLNGMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMcffRtsUyIYsT35f2n4mXRnj8AoNKD4Bh5eWh8tjGnDws4jcfPElM IS7ZkjHgaQBxiQvbZXVDVmq3IApjg/xF0x97kGkvHaXohD76p+u6u+XKouLBNHBT Oiu0WDscQWEsMHwgllmdB4VN6eHVsFaMdsM95vH5BXc0mu42mWkodRsIjCwMXJhB hRMvNRkq5nNrPWdSjDA+Xx156v2mDjfS/5C4HK7Exx61uhxhsgrCBq9wQx5mQ36b /lYOGOijmuijPwxL7AryUDsah+ymgorHsFTqqNpx4f9uV/rqYkTlID/WsiLp6ROV HYaSLGeb2nnwRmVEFAYCAjeB66mLHXCu -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:00 2025 by rpki-client