$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: oLJCOQ+c1jSP/e0N2Isy8dTyCrVqFdYniGL56xVUrC4= Subject key identifier: AB:77:4B:EB:9D:52:F2:3E:C5:F7:B8:21:6D:05:BA:3F:79:7F:96:96 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 010D Signing time: Sat 17 May 2025 04:37:49 +0000 Manifest this update: Sat 17 May 2025 04:37:49 +0000 Manifest next update: Sat 24 May 2025 04:37:49 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: ipA9CNkAXxrrKJWvI4bBLMkSH5v6oByBbAJxw4MEk68=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: May 17 04:37:49 2025 GMT Not After : May 24 04:37:49 2025 GMT Subject: CN=6828129d-5316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:d5:77:b1:e3:ef:fb:2b:31:7a:26:78:3d: 63:2d:67:16:60:d0:96:48:7d:f7:c2:0d:0b:15:24: d0:0e:bf:65:ac:b4:3a:ef:50:29:ae:fc:d6:86:f2: e6:7c:e6:75:b9:63:43:03:9b:36:42:b4:7d:44:e8: 3f:15:e8:28:3b:aa:ff:ea:f8:32:8a:98:5d:19:6b: 9e:19:09:f7:eb:bd:b2:7d:84:bb:af:89:aa:5e:7e: 4d:22:bc:f0:28:f8:f9:f5:19:3c:ba:79:f0:61:ce: ca:27:9a:e9:89:ac:14:11:e7:64:70:92:c7:4e:a2: f2:24:a0:5e:f6:62:68:5b:ac:0e:89:8a:5b:09:cb: c7:8c:46:bd:b4:41:99:94:e7:f8:67:99:ea:ab:ff: 35:c8:af:59:21:a2:bb:64:05:59:7d:a0:80:2e:b2: d3:68:1c:a0:c7:b1:84:ca:22:5b:cc:73:b6:0a:b5: c3:c9:dc:e9:c4:7a:a2:8f:4a:a5:65:a4:06:d5:e5: 96:a5:5d:72:08:32:dc:d2:af:11:7e:9a:b4:bf:53: 14:3a:a4:3b:4b:df:04:e0:d5:5e:e4:8e:a0:e6:fe: 93:90:ac:f2:34:aa:c5:b5:3a:b9:13:f9:6e:b4:48: 44:34:6a:a4:b2:61:59:5c:da:34:c9:a5:be:97:a7: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:77:4B:EB:9D:52:F2:3E:C5:F7:B8:21:6D:05:BA:3F:79:7F:96:96 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:00:6b:98:d5:38:10:79:f9:46:14:4c:32:f3:17:01:25:9e: 17:22:d4:25:60:9b:c5:7a:45:47:ed:08:ae:9a:69:c2:48:65: 88:c1:0a:7d:be:45:5a:d9:8f:58:40:c8:95:40:0c:45:f2:79: 97:0c:0d:16:5f:9e:72:7e:db:9c:d5:53:19:39:d5:98:41:0c: 63:29:94:70:ca:69:50:88:6c:df:93:67:c1:40:8c:c6:39:a0: ec:05:d2:2e:a0:fe:c6:a2:43:cb:b3:3e:37:6a:4a:fb:56:e6: ce:06:17:92:2b:62:1a:a5:3d:10:0a:60:84:5f:90:b1:8d:55: 8a:fa:e4:9b:a1:15:6d:35:03:1c:bc:fc:e3:77:4e:f4:9d:79: 4a:91:43:25:1e:0a:0c:6e:c5:88:d4:61:2e:83:cc:40:e4:02: 54:2a:39:2b:af:9a:e3:13:d5:a8:c5:d6:81:94:32:be:44:7a: c6:d1:a3:fb:23:ef:af:aa:64:9b:27:a8:17:e9:a7:6d:0c:0c: 74:f5:a0:e0:34:64:b6:6d:fa:57:92:66:48:91:92:31:a0:d0: f4:a0:c6:ad:76:f6:2b:98:e5:49:dd:a0:00:a5:83:b5:e6:aa: f8:be:c4:58:cf:f2:db:c1:04:90:08:74:5d:c6:f8:25:f3:82: a1:f3:90:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjUwNTE3MDQzNzQ5WhcNMjUwNTI0MDQzNzQ5WjAYMRYwFAYD VQQDEw02ODI4MTI5ZC01MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AbVd7Hj7/srMXomeD1jLWcWYNCWSH33wg0LFSTQDr9lrLQ671AprvzWhvLm fOZ1uWNDA5s2QrR9ROg/FegoO6r/6vgyiphdGWueGQn3672yfYS7r4mqXn5NIrzw KPj59Rk8unnwYc7KJ5rpiawUEedkcJLHTqLyJKBe9mJoW6wOiYpbCcvHjEa9tEGZ lOf4Z5nqq/81yK9ZIaK7ZAVZfaCALrLTaBygx7GEyiJbzHO2CrXDydzpxHqij0ql ZaQG1eWWpV1yCDLc0q8Rfpq0v1MUOqQ7S98E4NVe5I6g5v6TkKzyNKrFtTq5E/lu tEhENGqksmFZXNo0yaW+l6cM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt3S+ud UvI+xfe4IW0Fuj95f5aWMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwAGuY1TgQeflGFEwy8xcBJZ4XItQlYJvFekVH7QiummnCSGWIwQp9 vkVa2Y9YQMiVQAxF8nmXDA0WX55yftuc1VMZOdWYQQxjKZRwymlQiGzfk2fBQIzG OaDsBdIuoP7GokPLsz43akr7VubOBheSK2IapT0QCmCEX5CxjVWK+uSboRVtNQMc vPzjd070nXlKkUMlHgoMbsWI1GEug8xA5AJUKjkrr5rjE9WoxdaBlDK+RHrG0aP7 I++vqmSbJ6gX6adtDAx09aDgNGS2bfpXkmZIkZIxoND0oMatdvYrmOVJ3aAApYO1 5qr4vsRYz/LbwQSQCHRdxvgl84Kh85Bs -----END CERTIFICATE-----Generated at Sun May 18 17:07:42 2025 by rpki-client