$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json) Hash identifier: k1jACjVgb+Rsxb4Hbs4gJaizvkHHXvRn4iapQvC5nGU= Subject key identifier: 2F:30:E2:85:94:10:72:BF:87:19:A6:2C:EA:5F:BD:F8:24:E8:C5:B5 Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft Manifest number: 067B Signing time: Thu 24 Apr 2025 23:35:29 +0000 Manifest this update: Thu 24 Apr 2025 23:35:28 +0000 Manifest next update: Thu 01 May 2025 23:35:28 +0000 Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: 9JC+hLJXVR2c0mem5lYoJ61g2+GlHETC16R1eBe9Yu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Validity Not Before: Apr 24 23:35:28 2025 GMT Not After : May 1 23:35:28 2025 GMT Subject: CN=680acac0-9cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:27:1d:e6:4b:a3:4e:0c:0d:19:06:fe:b4: f4:52:59:61:3a:a5:7a:9c:4d:59:0e:e3:86:0b:9e: 4b:17:06:5b:d5:8f:1c:a4:3b:21:ed:eb:cd:a8:78: dd:a7:ab:d4:26:f1:84:c1:df:3b:f2:cc:f4:01:77: 9e:23:94:37:bd:7d:ff:bf:a5:25:e0:23:c1:cd:a9: c6:5f:ed:7b:64:73:f1:07:b4:2f:79:ff:15:3a:27: 6c:ec:1c:09:f4:0f:e4:e0:5d:37:2f:95:e6:49:7a: 9d:ec:f8:e0:94:66:90:09:b9:08:1e:b4:c7:a2:87: b8:18:4c:97:be:9f:54:4e:5d:62:62:26:34:12:1c: f3:55:df:02:46:35:17:11:ac:f6:89:10:a5:88:16: 85:8a:f9:7c:67:fe:d2:69:41:e3:d0:22:44:e2:e5: 43:13:c7:3a:56:65:c3:98:77:59:78:53:4c:fe:1e: 7f:71:c6:e1:32:75:25:4f:72:fe:99:1e:62:57:7d: 06:f3:9d:19:56:e2:21:49:4c:fb:c1:a2:ee:19:b7: 0e:f9:14:3e:c4:f7:6f:d8:3b:92:29:3b:72:03:57: 40:78:9d:63:82:2f:49:79:93:ee:0f:2a:3e:9d:cf: 75:5f:21:2e:c7:1c:54:83:84:cc:75:9d:0a:72:26: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:30:E2:85:94:10:72:BF:87:19:A6:2C:EA:5F:BD:F8:24:E8:C5:B5 X509v3 Authority Key Identifier: keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:b7:a7:b0:de:ee:1b:c4:68:e9:db:76:27:1d:70:0d:a4:38: 4a:25:97:c2:2a:c9:db:22:d7:15:20:83:74:e6:c5:2d:39:4a: c1:3b:51:fd:1a:4c:33:20:42:60:70:64:c8:51:9e:4e:8f:ea: e9:6e:6c:2c:b1:42:e5:e6:91:e0:94:71:08:c7:e8:a3:81:c1: d0:08:be:40:d3:5e:fb:10:af:a5:61:3f:c8:64:9d:43:66:a8: f1:57:f2:c3:ec:4d:a0:a1:74:49:b0:33:61:87:5f:3d:06:15: d1:00:4b:55:90:d5:09:0d:55:28:07:13:34:4c:21:b7:5d:ea: 20:43:1e:70:da:f5:84:0c:f4:dd:c4:4f:1f:0d:4e:2a:85:b9: 65:7f:12:e2:1e:8e:f5:cd:75:52:be:d9:dd:d2:1a:4d:80:ed: 97:bc:14:89:66:07:d6:45:00:b5:42:10:cb:e1:89:ff:f1:3b: 27:c1:bd:53:cd:67:5f:08:75:6b:15:90:18:07:68:c2:e9:1f: 59:b6:14:02:5c:3b:3a:35:d4:fd:94:1d:ed:b7:41:e2:2e:6e: 11:40:ea:70:e6:28:a6:37:8c:4d:71:73:e6:79:15:18:30:02: 7d:c1:78:af:9e:7f:b5:45:ec:14:5a:1e:62:b1:70:f2:07:fc: 36:1f:fa:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1 OERGMDVBOEEwHhcNMjUwNDI0MjMzNTI4WhcNMjUwNTAxMjMzNTI4WjAYMRYwFAYD VQQDEw02ODBhY2FjMC05Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt40nHeZLo04MDRkG/rT0UllhOqV6nE1ZDuOGC55LFwZb1Y8cpDsh7evNqHjd p6vUJvGEwd878sz0AXeeI5Q3vX3/v6Ul4CPBzanGX+17ZHPxB7Qvef8VOids7BwJ 9A/k4F03L5XmSXqd7PjglGaQCbkIHrTHooe4GEyXvp9UTl1iYiY0EhzzVd8CRjUX Eaz2iRCliBaFivl8Z/7SaUHj0CJE4uVDE8c6VmXDmHdZeFNM/h5/ccbhMnUlT3L+ mR5iV30G850ZVuIhSUz7waLuGbcO+RQ+xPdv2DuSKTtyA1dAeJ1jgi9JeZPuDyo+ nc91XyEuxxxUg4TMdZ0Kcib6NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8w4oWU EHK/hxmmLOpfvfgk6MW1MB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/t6ew3u4bxGjp23YnHXANpDhKJZfCKsnbItcVIIN05sUtOUrBO1H9 GkwzIEJgcGTIUZ5Oj+rpbmwssULl5pHglHEIx+ijgcHQCL5A0177EK+lYT/IZJ1D ZqjxV/LD7E2goXRJsDNhh189BhXRAEtVkNUJDVUoBxM0TCG3XeogQx5w2vWEDPTd xE8fDU4qhbllfxLiHo71zXVSvtnd0hpNgO2XvBSJZgfWRQC1QhDL4Yn/8Tsnwb1T zWdfCHVrFZAYB2jC6R9ZthQCXDs6NdT9lB3tt0HiLm4RQOpw5iimN4xNcXPmeRUY MAJ9wXivnn+1RewUWh5isXDyB/w2H/qK -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:29 2025 by rpki-client