$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: JUYa/Ibka+Bc10mSYefLc6jBOFWSQyiWErRma7gLqiQ= Subject key identifier: CB:29:27:53:99:DA:58:31:08:CF:08:EE:28:CC:AC:FD:FD:EA:D4:6C Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3C23 Signing time: Wed 02 Jul 2025 15:26:44 +0000 Manifest this update: Wed 02 Jul 2025 15:26:44 +0000 Manifest next update: Wed 09 Jul 2025 15:26:44 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: ieTsXGmxLPrfNcdtoPkHEBn2nB93IaaPWbgM9b3Fz1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Jul 2 15:26:44 2025 GMT Not After : Jul 9 15:26:44 2025 GMT Subject: CN=68654fb4-67c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:b8:8b:15:bd:8c:8a:6a:dd:5a:6a:8f:38: 6e:26:b7:38:05:46:10:bc:ae:af:79:7b:95:08:9c: a2:a4:5a:e8:f1:7b:49:9c:63:7c:29:6f:dd:36:89: 77:ee:ed:cf:fa:e6:85:07:d3:5f:ad:17:c4:2c:27: d3:db:d5:c1:26:66:20:57:da:dd:70:ec:e9:db:ca: 5e:93:86:dc:77:fe:43:1a:1b:4a:b4:34:28:26:41: 49:19:7c:a2:78:aa:6f:91:8b:20:ea:83:fe:fe:12: cb:89:9b:69:0a:53:9a:9b:1f:62:41:87:fe:f6:de: 79:56:8c:96:4b:8a:96:a9:e0:1a:f8:f6:05:f1:92: 3a:2d:fa:0b:8b:48:24:9e:14:4b:26:3c:18:da:f4: 25:fd:5d:a3:fc:72:10:97:ce:05:a7:ec:10:df:cd: 72:97:c8:a1:19:0f:2d:15:25:a5:20:8d:10:cf:e4: aa:1e:c6:12:f7:1d:d3:e7:f5:59:a1:b2:14:41:e3: 8f:0b:34:0d:25:e8:ea:3f:81:7a:16:70:67:7f:dc: 43:f9:04:ba:16:f9:a7:94:e1:47:5a:15:1d:9c:d6: 11:3b:ce:1c:02:ae:45:c8:68:22:e1:be:99:f6:36: cf:13:52:8f:cf:fc:29:8a:9b:41:5c:77:b1:28:6b: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:29:27:53:99:DA:58:31:08:CF:08:EE:28:CC:AC:FD:FD:EA:D4:6C X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9e:76:33:88:10:7b:2d:e4:ab:f6:71:8b:8f:28:ee:75:b6: 2a:14:a6:f1:13:3e:d9:56:a1:88:19:5f:fb:83:79:fb:49:30: 98:0f:00:e7:c5:6f:85:f1:d4:11:d8:0b:81:2f:df:44:85:66: 44:9c:0a:3a:44:7a:50:a9:c2:68:25:7b:f2:e5:b5:3c:d8:cf: e7:07:48:df:fc:e1:d2:ea:05:11:ee:d7:d7:da:00:4b:ca:fc: 2d:e4:d1:a9:7a:b5:36:e1:26:e4:ae:c3:6f:0e:15:f3:ca:4a: f3:a9:63:e3:84:87:ff:f4:53:ae:49:51:75:50:80:35:3e:15: 4d:6a:4a:0f:a0:f5:92:ae:81:1b:c7:b4:aa:d0:8d:43:dc:4d: 22:1f:dc:2e:e9:8e:33:09:d7:23:b9:cc:60:9b:0f:7a:d6:20: 24:04:25:7b:e3:0d:2f:6f:49:e6:67:bc:60:61:53:3b:70:d3: 61:ab:2f:1d:57:f4:41:76:bc:24:1b:47:e0:43:32:96:17:20: 67:e2:f7:00:da:46:fe:43:1d:92:70:1b:41:44:77:fc:7d:cd: 66:06:84:81:be:51:b4:67:4b:73:31:94:d6:99:a1:b3:29:76: 57:80:ec:68:f7:22:32:ae:4d:16:9e:94:72:2b:7e:22:63:e6: be:1c:fa:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjUwNzAyMTUyNjQ0WhcNMjUwNzA5MTUyNjQ0WjAYMRYwFAYD VQQDEw02ODY1NGZiNC02N2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdq4ixW9jIpq3VpqjzhuJrc4BUYQvK6veXuVCJyipFro8XtJnGN8KW/dNol3 7u3P+uaFB9NfrRfELCfT29XBJmYgV9rdcOzp28pek4bcd/5DGhtKtDQoJkFJGXyi eKpvkYsg6oP+/hLLiZtpClOamx9iQYf+9t55VoyWS4qWqeAa+PYF8ZI6LfoLi0gk nhRLJjwY2vQl/V2j/HIQl84Fp+wQ381yl8ihGQ8tFSWlII0Qz+SqHsYS9x3T5/VZ obIUQeOPCzQNJejqP4F6FnBnf9xD+QS6FvmnlOFHWhUdnNYRO84cAq5FyGgi4b6Z 9jbPE1KPz/wpiptBXHexKGtrjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMspJ1OZ 2lgxCM8I7ijMrP396tRsMB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdnnYziBB7LeSr9nGLjyjudbYqFKbxEz7ZVqGIGV/7g3n7STCYDwDn xW+F8dQR2AuBL99EhWZEnAo6RHpQqcJoJXvy5bU82M/nB0jf/OHS6gUR7tfX2gBL yvwt5NGperU24SbkrsNvDhXzykrzqWPjhIf/9FOuSVF1UIA1PhVNakoPoPWSroEb x7Sq0I1D3E0iH9wu6Y4zCdcjucxgmw961iAkBCV74w0vb0nmZ7xgYVM7cNNhqy8d V/RBdrwkG0fgQzKWFyBn4vcA2kb+Qx2ScBtBRHf8fc1mBoSBvlG0Z0tzMZTWmaGz KXZXgOxo9yIyrk0WnpRyK34iY+a+HPoQ -----END CERTIFICATE-----Generated at Thu Jul 3 00:17:19 2025 by rpki-client