$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: Rafu3orB/9B30WQZe669jPsKKTx3ohhTKaN9Gi535Y0= Subject key identifier: 98:5F:35:8A:E5:05:1D:CE:B0:D9:26:62:47:F3:24:BE:38:B6:31:95 Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 0569 Signing time: Fri 16 May 2025 23:36:48 +0000 Manifest this update: Fri 16 May 2025 23:36:47 +0000 Manifest next update: Fri 23 May 2025 23:36:47 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: Mrvj2dr+kydnB0HEtOk1XiU/tJX2esB+J7jnSXWk5II=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: May 16 23:36:47 2025 GMT Not After : May 23 23:36:47 2025 GMT Subject: CN=6827cc0f-609f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:5b:2d:70:22:d2:4f:8e:64:60:6c:a7:51: 42:73:0b:44:32:a8:48:14:43:e1:66:4f:04:e6:53: 49:31:f6:28:56:a8:ba:d3:9a:be:86:00:8b:41:ec: 67:e9:05:73:ba:7b:65:25:6c:b4:b4:47:45:ae:b7: 2d:28:d0:c0:a5:7f:5d:5e:e6:5c:b6:b5:b2:ff:b7: 72:b1:4e:fd:c1:42:aa:fa:de:eb:a1:87:b1:66:39: 8c:89:2e:8d:24:1f:bf:34:e9:73:89:eb:de:59:43: 8d:ea:b0:16:08:6f:d5:70:0a:73:ac:ca:89:a3:88: 02:0c:22:9f:c8:c0:51:e9:3f:61:08:54:65:68:ae: 7a:b1:7b:cf:60:92:95:1d:9f:be:a3:0c:fb:c9:5c: 79:f6:20:f5:be:fd:3e:b4:89:37:63:ef:16:92:43: 93:a4:64:51:8f:2c:b0:11:60:d9:92:bb:ab:5b:96: de:34:31:89:18:40:a5:51:79:01:c7:dd:51:99:c1: 21:4b:0c:1a:70:3c:2b:b7:fb:0b:0b:c7:c0:be:fc: 48:65:5c:d5:73:5d:59:72:35:44:a7:eb:63:c9:00: 9e:3c:06:3d:d8:cd:df:76:b9:2b:d7:6c:60:9e:a0: 1f:2c:d6:b3:a2:ce:dd:96:70:a5:d5:13:97:a3:9c: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:35:8A:E5:05:1D:CE:B0:D9:26:62:47:F3:24:BE:38:B6:31:95 X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:4a:89:87:29:27:aa:ff:69:2b:4f:e3:92:13:d5:4c:12: ca:73:6e:d0:6e:1d:23:05:c4:2c:1b:53:59:12:db:61:5f:1e: 59:f7:b9:40:f8:f6:2d:4d:14:9a:18:8b:0a:1c:9f:b4:75:86: 4c:7c:a8:a3:6e:6b:ee:2d:85:3a:73:e6:57:d1:d5:7b:18:11: 1c:0f:48:ac:80:28:88:5a:d8:e4:01:0b:ef:32:07:63:de:e8: c7:f9:61:fe:d6:eb:91:f8:b7:d9:6e:2c:30:24:57:87:58:76: 9f:17:44:35:60:2d:90:65:ce:45:41:e6:8d:91:73:fa:81:73: 34:87:6b:62:ef:3a:c5:4f:ac:92:cf:77:47:6a:e6:91:51:76: 45:f7:68:f6:70:46:51:52:f0:b6:d4:96:49:8d:87:b7:b2:1c: 24:36:fe:8f:96:6b:b1:a3:22:50:6f:0f:24:da:b0:1a:b1:52: 6a:82:dc:0b:5d:05:9a:ff:3d:ae:b7:2c:54:9e:50:47:6f:48: 04:94:b2:a3:75:a9:29:ec:9a:41:9f:15:5f:10:8a:e7:0c:71: 47:b0:ec:fa:27:27:82:03:53:6a:f7:58:d8:8b:f8:92:39:de: cc:62:bd:7d:18:19:ea:14:ea:c5:b9:ec:46:ad:df:b2:31:f7: af:ca:b7:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjUwNTE2MjMzNjQ3WhcNMjUwNTIzMjMzNjQ3WjAYMRYwFAYD VQQDEw02ODI3Y2MwZi02MDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzNbLXAi0k+OZGBsp1FCcwtEMqhIFEPhZk8E5lNJMfYoVqi605q+hgCLQexn 6QVzuntlJWy0tEdFrrctKNDApX9dXuZctrWy/7dysU79wUKq+t7roYexZjmMiS6N JB+/NOlzieveWUON6rAWCG/VcApzrMqJo4gCDCKfyMBR6T9hCFRlaK56sXvPYJKV HZ++owz7yVx59iD1vv0+tIk3Y+8WkkOTpGRRjyywEWDZkrurW5beNDGJGEClUXkB x91RmcEhSwwacDwrt/sLC8fAvvxIZVzVc11ZcjVEp+tjyQCePAY92M3fdrkr12xg nqAfLNazos7dlnCl1ROXo5y3AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhfNYrl BR3OsNkmYkfzJL44tjGVMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeK0qJhyknqv9pK0/jkhPVTBLKc27Qbh0jBcQsG1NZEtthXx5Z97lA +PYtTRSaGIsKHJ+0dYZMfKijbmvuLYU6c+ZX0dV7GBEcD0isgCiIWtjkAQvvMgdj 3ujH+WH+1uuR+LfZbiwwJFeHWHafF0Q1YC2QZc5FQeaNkXP6gXM0h2ti7zrFT6yS z3dHauaRUXZF92j2cEZRUvC21JZJjYe3shwkNv6PlmuxoyJQbw8k2rAasVJqgtwL XQWa/z2utyxUnlBHb0gElLKjdakp7JpBnxVfEIrnDHFHsOz6JyeCA1Nq91jYi/iS Od7MYr19GBnqFOrFuexGrd+yMfevyrdL -----END CERTIFICATE-----Generated at Sat May 17 05:45:23 2025 by rpki-client