$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: iOomizbC0nndZUuW6HPioIAnMT1XZufjyJuIfPhXM0k= Subject key identifier: 67:6B:33:04:A6:9D:7B:DC:38:2E:3F:E7:76:23:F1:19:1D:49:22:64 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C40 Signing time: Thu 24 Apr 2025 16:13:09 +0000 Manifest this update: Thu 24 Apr 2025 16:13:09 +0000 Manifest next update: Thu 01 May 2025 16:13:09 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: ojw+EnyQ4XBry0ZMU18xsAXFy9dhDE2aD+IO9X+3USE=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7259 (0x1c5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Apr 24 16:13:09 2025 GMT Not After : May 1 16:13:09 2025 GMT Subject: CN=680a6315-e11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:be:69:6f:ba:7d:37:a0:c0:fe:3d:ef:8f: 9b:e5:5a:54:b1:b0:1d:9a:88:e8:ff:e9:60:12:30: be:a8:ac:54:27:0a:d4:5b:47:dc:76:d8:aa:cf:14: 84:2c:87:4c:10:07:f1:ed:25:63:57:9a:28:2e:aa: 51:4b:7c:6f:db:6d:3d:fb:30:88:11:32:84:ec:13: 1d:80:9f:4f:37:60:eb:93:29:e8:bd:b1:26:2b:3d: 56:cd:0f:ca:4d:1b:f6:9c:57:c0:bf:cd:78:a5:80: 4e:98:9f:df:0e:8d:e7:aa:ac:78:df:09:4f:74:5b: 5b:39:70:60:94:7d:ad:a8:87:18:e3:d6:9e:f6:57: a8:15:28:44:12:fa:6f:0e:21:69:af:ee:1e:32:c3: b2:06:9f:85:e1:64:2e:3b:a3:56:b2:9c:69:b8:4c: 21:94:5e:63:22:14:2d:18:b3:18:c6:29:bc:4b:1b: 66:d2:e6:83:71:a8:1d:14:21:52:40:ae:42:bf:53: 99:c4:26:f2:6b:36:95:dc:39:2d:0e:2a:66:1c:8f: c4:18:4c:d5:4b:d0:1d:62:bb:82:15:a3:4b:91:52: 32:b3:fd:32:84:31:06:a8:53:17:49:11:88:c1:d0: 28:8a:a1:50:59:01:34:e6:dd:0d:e8:ff:31:70:7a: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:33:04:A6:9D:7B:DC:38:2E:3F:E7:76:23:F1:19:1D:49:22:64 X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:be:b3:19:18:07:6a:30:06:f8:3f:3c:13:28:e9:4f:d1:71: de:ba:b2:c1:40:38:60:16:f0:d0:83:4e:70:99:5b:d8:54:3a: 88:b9:05:f7:19:98:99:7f:95:6a:64:87:62:fb:36:34:2f:3b: ca:3c:29:44:dc:6f:a5:27:aa:0a:6f:4f:4b:62:6c:20:9c:a3: 1c:a5:f6:34:10:b9:23:f3:78:7e:00:20:46:50:07:12:23:b6: 83:28:e6:0d:a8:51:83:ca:ef:75:c6:ee:10:d4:78:45:e3:23: 37:d3:70:11:a8:42:09:d6:97:f0:be:6c:68:c4:1a:d8:96:ec: 47:2d:99:88:bb:fe:ff:b4:74:47:b8:f2:2f:89:85:f7:65:ac: 7c:9e:1a:cc:46:46:b7:02:8e:2c:f9:e9:ab:39:8d:04:2e:37: d6:44:30:3f:f1:de:28:93:c4:2f:3e:f3:a4:56:e3:60:07:7b: 91:84:3b:38:9e:46:10:0b:51:a0:b2:76:40:b3:b7:74:ea:1f: 1d:bf:31:bd:04:db:a2:9a:9c:0f:b5:56:68:9d:60:dd:46:40: 31:10:91:f3:7f:a4:66:b9:29:77:79:f7:30:3b:c8:f5:0f:e1: d2:89:13:dd:f2:49:c0:8d:3a:27:5d:4c:50:d4:7a:85:35:1c: a6:7e:4b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwNDI0MTYxMzA5WhcNMjUwNTAxMTYxMzA5WjAYMRYwFAYD VQQDEw02ODBhNjMxNS1lMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVa+aW+6fTegwP4974+b5VpUsbAdmojo/+lgEjC+qKxUJwrUW0fcdtiqzxSE LIdMEAfx7SVjV5ooLqpRS3xv2209+zCIETKE7BMdgJ9PN2DrkynovbEmKz1WzQ/K TRv2nFfAv814pYBOmJ/fDo3nqqx43wlPdFtbOXBglH2tqIcY49ae9leoFShEEvpv DiFpr+4eMsOyBp+F4WQuO6NWspxpuEwhlF5jIhQtGLMYxim8Sxtm0uaDcagdFCFS QK5Cv1OZxCbyazaV3DktDipmHI/EGEzVS9AdYruCFaNLkVIys/0yhDEGqFMXSRGI wdAoiqFQWQE05t0N6P8xcHrXtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdrMwSm nXvcOC4/53Yj8RkdSSJkMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcvrMZGAdqMAb4PzwTKOlP0XHeurLBQDhgFvDQg05wmVvYVDqIuQX3 GZiZf5VqZIdi+zY0LzvKPClE3G+lJ6oKb09LYmwgnKMcpfY0ELkj83h+ACBGUAcS I7aDKOYNqFGDyu91xu4Q1HhF4yM303ARqEIJ1pfwvmxoxBrYluxHLZmIu/7/tHRH uPIviYX3Zax8nhrMRka3Ao4s+emrOY0ELjfWRDA/8d4ok8QvPvOkVuNgB3uRhDs4 nkYQC1GgsnZAs7d06h8dvzG9BNuimpwPtVZonWDdRkAxEJHzf6RmuSl3efcwO8j1 D+HSiRPd8knAjTonXUxQ1HqFNRymfksn -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:30 2025 by rpki-client