$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: fWcBqKvWL2E8DuC3MU1a14zMi4FqlRksrYKEQKJOcdo= Subject key identifier: 49:DF:51:F5:52:1B:77:BA:87:A8:75:F0:E4:A4:38:BF:06:F0:C8:82 Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 0929 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3C57 Signing time: Fri 22 Aug 2025 15:23:29 +0000 Manifest this update: Fri 22 Aug 2025 15:23:29 +0000 Manifest next update: Fri 29 Aug 2025 15:23:29 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: VxDHWqZMAjNAVBkSpFS8J2vPb1hI1zhbGmTUTIOIDKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Aug 22 15:23:29 2025 GMT Not After : Aug 29 15:23:29 2025 GMT Subject: CN=68a88b71-50eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:4c:3a:7a:f1:e0:1b:94:f6:a0:b6:a4:03: 2c:ba:fe:c6:3d:8b:49:1d:a4:b4:c0:d4:ec:2d:47: d4:23:25:ea:7a:14:05:fa:96:2b:f8:69:09:bb:9c: d5:54:b9:28:53:3d:b3:75:62:32:25:50:0c:0a:ab: 87:6f:1c:61:5f:9e:a5:4c:89:69:6a:23:8a:82:a0: 0c:97:02:58:46:82:89:f8:97:5a:e5:7a:05:3f:f0: 76:be:42:fd:90:58:c4:d2:ca:f9:16:cf:03:87:02: 93:d2:ad:be:e1:39:52:9e:0c:bc:66:28:a4:09:2b: 35:74:98:f2:4a:4b:84:5e:ee:d8:f8:4d:f4:69:65: af:86:14:cb:5a:b2:b7:4f:0e:15:61:b0:d4:fa:fc: 82:e5:c0:1b:e6:12:2d:52:34:0c:42:2f:70:b8:9a: 3f:81:f5:ef:6a:0d:81:02:c4:c0:0a:2f:02:eb:6b: d0:07:8c:fe:10:84:e5:08:7a:d9:63:63:fa:9a:77: 4e:12:09:46:f5:0b:5e:99:af:94:65:a5:00:1d:02: 79:d9:cc:ca:0d:97:29:fc:e9:a9:53:35:d2:4b:c8: f6:45:42:07:5e:7d:6e:dc:aa:4e:10:ee:28:51:5a: 15:2d:9c:d5:d8:17:3b:7d:95:ed:74:88:c9:72:8e: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DF:51:F5:52:1B:77:BA:87:A8:75:F0:E4:A4:38:BF:06:F0:C8:82 X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:75:a5:88:ed:0b:ce:6f:d3:fd:01:65:12:6c:d4:eb:72: d3:89:ba:9a:c2:67:32:e3:47:51:94:f1:14:8f:cf:c6:89:ce: f0:68:a7:a7:73:cf:15:ac:9e:c5:e2:ef:e4:50:08:af:f3:59: e8:0c:1c:ce:13:b5:c5:01:30:2f:ad:48:d0:fc:14:55:ab:80: c0:ce:f3:f7:44:f2:4e:c0:e6:42:3d:c2:63:49:f6:37:ec:02: 6a:bf:8a:ea:e3:87:5b:87:b5:78:34:b1:5d:ec:72:22:40:6c: 2a:40:6d:1a:15:b9:73:1d:e3:dc:61:e4:d3:96:d0:ac:64:e8: b5:89:d0:5d:a7:3b:9c:d3:d8:de:bd:b5:8f:a7:19:dd:2a:7a: ab:47:7f:79:d2:44:4e:46:2b:d6:6b:b1:ed:b7:be:cb:9d:6f: bb:f2:f5:7b:95:d7:17:c9:40:56:11:85:c6:1a:9f:9b:c3:89: 85:19:a6:81:a3:6e:9e:1e:41:91:4e:96:66:03:27:a1:93:9c: e2:a8:db:73:d4:9e:6d:8f:b6:63:4d:0c:9e:ab:45:76:f7:32: 12:0c:5f:68:fe:36:e4:55:8f:0b:fa:77:5c:79:e6:d9:16:aa: 7a:05:81:ba:56:b5:fc:93:ae:c0:c8:50:d4:09:0d:9c:f6:e5: 7a:0a:d6:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjUwODIyMTUyMzI5WhcNMjUwODI5MTUyMzI5WjAYMRYwFAYD VQQDEw02OGE4OGI3MS01MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HhMOnrx4BuU9qC2pAMsuv7GPYtJHaS0wNTsLUfUIyXqehQF+pYr+GkJu5zV VLkoUz2zdWIyJVAMCquHbxxhX56lTIlpaiOKgqAMlwJYRoKJ+Jda5XoFP/B2vkL9 kFjE0sr5Fs8DhwKT0q2+4TlSngy8ZiikCSs1dJjySkuEXu7Y+E30aWWvhhTLWrK3 Tw4VYbDU+vyC5cAb5hItUjQMQi9wuJo/gfXvag2BAsTACi8C62vQB4z+EITlCHrZ Y2P6mndOEglG9Qtema+UZaUAHQJ52czKDZcp/OmpUzXSS8j2RUIHXn1u3KpOEO4o UVoVLZzV2Bc7fZXtdIjJco6tBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnfUfVS G3e6h6h18OSkOL8G8MiCMB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFx3WliO0Lzm/T/QFlEmzU63LTibqawmcy40dRlPEUj8/Gic7waKen c88VrJ7F4u/kUAiv81noDBzOE7XFATAvrUjQ/BRVq4DAzvP3RPJOwOZCPcJjSfY3 7AJqv4rq44dbh7V4NLFd7HIiQGwqQG0aFblzHePcYeTTltCsZOi1idBdpzuc09je vbWPpxndKnqrR3950kRORivWa7Htt77LnW+78vV7ldcXyUBWEYXGGp+bw4mFGaaB o26eHkGRTpZmAyehk5ziqNtz1J5tj7ZjTQyeq0V29zISDF9o/jbkVY8L+ndceebZ Fqp6BYG6VrX8k67AyFDUCQ2c9uV6CtZE -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:38 2025 by rpki-client