$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: 4llFIpKByQyUrzQi5sJAgT1AbPB73X1D4IHUV+SFbyM= Subject key identifier: A1:E6:D0:7A:E1:4B:79:10:85:E4:F2:6D:05:C8:05:E7:8D:1A:8C:B9 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 0125 Signing time: Sat 05 Jul 2025 05:03:15 +0000 Manifest this update: Sat 05 Jul 2025 05:03:14 +0000 Manifest next update: Sat 12 Jul 2025 05:03:14 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: UlKrp2B/VtWK7hcxE9NTihAph5fj/R3Rq7dczAILk+w=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: Jul 5 05:03:14 2025 GMT Not After : Jul 12 05:03:14 2025 GMT Subject: CN=6868b212-3b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:dd:14:83:16:c3:21:96:30:f9:19:25:ff: 19:72:77:60:37:c8:94:dd:fb:ae:0b:b0:6e:e4:8a: f2:00:04:96:00:19:13:5d:c7:55:0b:f4:3d:64:98: 3f:f1:a0:2f:bf:96:06:ce:27:34:7b:4a:3c:94:12: 4a:fe:2d:67:0c:94:00:b7:ce:c4:28:0f:15:73:d9: 13:e6:cf:b4:2b:aa:55:ff:c3:a8:92:32:4d:bc:1b: 38:07:07:d7:2f:9e:e4:25:34:74:f1:a1:79:6b:b7: 0f:54:4a:5b:ac:f5:f1:d2:14:51:58:f2:3a:b4:63: 56:b7:13:84:db:3c:2d:83:e2:e8:b1:01:b1:4c:db: 34:9e:94:80:d4:40:d3:92:a6:51:0d:b6:60:65:dd: 9c:d8:da:5b:79:0e:b7:90:9e:c0:dd:39:e0:80:89: 15:78:eb:fc:24:3b:aa:c2:37:80:4b:a6:77:b2:af: 15:21:db:c4:24:be:8d:ad:50:de:e2:7d:24:0b:24: 42:3e:85:4e:ec:86:de:4d:9a:74:04:f6:23:90:1a: 7e:f0:67:79:1f:be:9b:40:a9:6f:fc:02:35:cf:1b: 54:84:57:c6:70:99:69:75:c8:38:90:03:24:d2:e1: 6f:2e:37:be:b4:11:ba:76:f4:de:2a:61:6d:ef:ad: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:D0:7A:E1:4B:79:10:85:E4:F2:6D:05:C8:05:E7:8D:1A:8C:B9 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:08:ea:39:b5:00:a0:c9:0a:21:97:12:01:b1:20:97:c9:89: 8c:f3:54:8b:71:3c:10:0f:b5:35:c2:a3:bf:1b:8e:a3:15:81: c2:5d:14:f4:b5:08:37:c2:f8:76:f7:f3:58:12:01:e3:8b:ef: 50:f6:71:87:71:8f:df:c6:04:4f:4c:72:ed:bf:a8:ef:d0:fc: 41:5c:93:d5:0e:b8:27:ac:98:fd:5d:7c:7e:ec:05:94:44:cc: 54:76:ad:11:4b:e0:df:90:e1:86:c4:1b:a4:50:2a:06:b5:4c: f1:44:6d:cd:ba:1b:fb:0e:07:15:73:f6:e3:24:c7:1c:45:4e: 9c:b2:ba:e2:c1:fc:09:1d:ac:0e:37:b4:83:0a:64:b6:4d:a8: b9:b8:63:e6:07:86:f2:df:4c:eb:cf:b0:7e:28:21:7a:f6:ae: 67:a6:c5:ea:44:ea:35:6e:33:87:37:bf:b0:3b:1d:15:a1:f8: 98:93:db:34:dd:dc:5e:d5:a5:5e:d0:d3:85:2f:eb:aa:21:75: 50:f1:e7:d7:91:b5:2b:67:c2:27:9a:5f:96:30:3f:11:f4:ee: 4f:0a:38:d7:a8:c8:5f:98:86:54:86:4a:39:83:89:26:af:e7: a0:9d:60:ba:66:40:18:11:06:ff:41:b0:60:ba:2e:54:a3:25: 96:a7:b3:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjUwNzA1MDUwMzE0WhcNMjUwNzEyMDUwMzE0WjAYMRYwFAYD VQQDEw02ODY4YjIxMi0zYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30vdFIMWwyGWMPkZJf8ZcndgN8iU3fuuC7Bu5IryAASWABkTXcdVC/Q9ZJg/ 8aAvv5YGzic0e0o8lBJK/i1nDJQAt87EKA8Vc9kT5s+0K6pV/8OokjJNvBs4BwfX L57kJTR08aF5a7cPVEpbrPXx0hRRWPI6tGNWtxOE2zwtg+LosQGxTNs0npSA1EDT kqZRDbZgZd2c2NpbeQ63kJ7A3TnggIkVeOv8JDuqwjeAS6Z3sq8VIdvEJL6NrVDe 4n0kCyRCPoVO7IbeTZp0BPYjkBp+8Gd5H76bQKlv/AI1zxtUhFfGcJlpdcg4kAMk 0uFvLje+tBG6dvTeKmFt761y6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHm0Hrh S3kQheTybQXIBeeNGoy5MB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlCOo5tQCgyQohlxIBsSCXyYmM81SLcTwQD7U1wqO/G46jFYHCXRT0 tQg3wvh29/NYEgHji+9Q9nGHcY/fxgRPTHLtv6jv0PxBXJPVDrgnrJj9XXx+7AWU RMxUdq0RS+DfkOGGxBukUCoGtUzxRG3Nuhv7DgcVc/bjJMccRU6csrriwfwJHawO N7SDCmS2Tai5uGPmB4by30zrz7B+KCF69q5npsXqROo1bjOHN7+wOx0VofiYk9s0 3dxe1aVe0NOFL+uqIXVQ8efXkbUrZ8Inml+WMD8R9O5PCjjXqMhfmIZUhko5g4km r+egnWC6ZkAYEQb/QbBgui5UoyWWp7NN -----END CERTIFICATE-----Generated at Sat Jul 5 09:20:14 2025 by rpki-client