$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: ExgE7XRPAlNcWhEV+xGjp/2eG3TRmulBoJKLUszg8zs= Subject key identifier: E7:C2:D0:19:97:E4:7A:F6:AA:B0:9F:1B:EF:AE:59:AE:09:CD:D6:8D Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01E9 Signing time: Thu 03 Jul 2025 02:41:24 +0000 Manifest this update: Thu 03 Jul 2025 02:41:23 +0000 Manifest next update: Thu 10 Jul 2025 02:41:23 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: aGTUQ5ffjccR6cMEkGKw8t+w81zP+DGMSR22ASNtT3Q=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Jul 3 02:41:23 2025 GMT Not After : Jul 10 02:41:23 2025 GMT Subject: CN=6865edd3-1a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:fe:c7:22:d0:a5:c0:19:7e:1e:fc:78:6b: f5:22:09:93:85:8f:33:3d:af:84:01:19:a7:86:0a: 8b:11:63:25:42:4c:60:25:f2:ab:b8:cf:69:30:7d: 04:c3:65:f4:06:a2:52:18:e2:5d:3f:2c:01:33:34: 7c:89:6a:fb:0a:2b:e6:82:d8:ce:bc:09:88:fb:80: 78:3f:8e:fb:a6:80:0e:99:b3:c7:4f:db:ba:fc:49: c0:ce:34:55:20:03:e8:74:9d:0f:7d:44:08:e8:f6: fe:26:7f:7b:40:8f:0f:c1:f6:c8:e0:66:cf:24:1b: e6:82:d9:38:39:8c:0e:25:72:fa:83:56:e2:54:1d: 29:89:49:4f:a3:97:89:e0:f1:03:74:8b:0c:0c:fd: 0b:ad:c5:c0:c5:fa:e7:33:a3:64:a8:a0:0c:e6:1a: 5e:24:b0:a4:ea:4a:19:17:b3:86:b0:7d:9c:75:58: 4b:70:37:1d:79:93:30:a9:4f:c1:e8:ff:fd:52:af: 87:00:7c:d5:a3:06:25:69:8b:82:e7:5d:92:74:48: 03:89:72:a4:bf:ae:42:bc:00:3c:6d:e0:19:f1:f8: cf:75:a7:3d:33:c5:dc:3a:e2:ef:5e:80:cf:91:f8: 92:09:15:b3:b4:9d:e7:3c:52:08:79:0c:d4:a9:d9: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:D0:19:97:E4:7A:F6:AA:B0:9F:1B:EF:AE:59:AE:09:CD:D6:8D X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0e:52:d9:e3:4f:e6:08:de:c8:c4:df:93:d5:63:fe:45:17: 29:8e:dc:0c:ad:36:67:d3:f0:7d:07:37:45:6a:2e:03:bd:b2: 36:35:c1:64:e3:fa:67:4b:c9:67:da:74:d1:f2:3c:f7:86:c8: 01:8f:6e:da:64:70:c4:d4:21:3f:04:6e:00:2f:88:f5:e9:29: a7:47:7d:82:7f:32:68:f0:4f:dc:ab:85:d9:c2:7e:75:de:de: 8a:db:01:0c:c3:f2:9e:4f:5a:30:fd:b7:13:f3:cd:b2:66:88: 2e:56:ee:b9:79:a1:fe:c0:af:01:b7:72:c2:ae:d9:ae:24:1f: 7e:fd:80:aa:32:99:09:67:87:2b:19:8b:bd:ac:2f:00:41:d0: 11:f4:45:ca:7e:12:d5:94:64:8b:99:64:76:d8:04:1d:8d:62: fa:84:5a:cc:76:bf:0f:d8:a5:21:ae:a1:df:e4:7c:f4:05:c7: f0:f4:8b:7b:6a:e0:91:b4:d2:29:e0:ce:7d:ff:1b:ae:26:ba: b4:b0:b0:89:98:10:7d:da:80:65:41:12:00:a1:ea:7f:54:d7: 2a:19:dc:cc:d2:62:36:8c:f2:d6:bd:22:90:d1:73:af:07:4b: 08:29:bb:b5:80:a6:a4:1f:b4:63:44:c9:c9:b7:59:66:e6:89: c0:a2:20:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwNzAzMDI0MTIzWhcNMjUwNzEwMDI0MTIzWjAYMRYwFAYD VQQDEw02ODY1ZWRkMy0xYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHn+xyLQpcAZfh78eGv1IgmThY8zPa+EARmnhgqLEWMlQkxgJfKruM9pMH0E w2X0BqJSGOJdPywBMzR8iWr7CivmgtjOvAmI+4B4P477poAOmbPHT9u6/EnAzjRV IAPodJ0PfUQI6Pb+Jn97QI8PwfbI4GbPJBvmgtk4OYwOJXL6g1biVB0piUlPo5eJ 4PEDdIsMDP0LrcXAxfrnM6NkqKAM5hpeJLCk6koZF7OGsH2cdVhLcDcdeZMwqU/B 6P/9Uq+HAHzVowYlaYuC512SdEgDiXKkv65CvAA8beAZ8fjPdac9M8XcOuLvXoDP kfiSCRWztJ3nPFIIeQzUqdkTtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfC0BmX 5Hr2qrCfG++uWa4JzdaNMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPDlLZ40/mCN7IxN+T1WP+RRcpjtwMrTZn0/B9BzdFai4DvbI2NcFk 4/pnS8ln2nTR8jz3hsgBj27aZHDE1CE/BG4AL4j16SmnR32CfzJo8E/cq4XZwn51 3t6K2wEMw/KeT1ow/bcT882yZoguVu65eaH+wK8Bt3LCrtmuJB9+/YCqMpkJZ4cr GYu9rC8AQdAR9EXKfhLVlGSLmWR22AQdjWL6hFrMdr8P2KUhrqHf5Hz0Bcfw9It7 auCRtNIp4M59/xuuJrq0sLCJmBB92oBlQRIAoep/VNcqGdzM0mI2jPLWvSKQ0XOv B0sIKbu1gKakH7RjRMnJt1lm5onAoiBd -----END CERTIFICATE-----Generated at Thu Jul 3 23:01:27 2025 by rpki-client