$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: U6PobltUA7i+dObQ961U1Yoa3HX4Ke74sAtRiGGDx4M= Subject key identifier: 11:B6:2C:A0:52:D6:C3:A1:5A:17:3C:07:11:52:8D:A5:4B:56:E5:30 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C77 Signing time: Sun 10 Aug 2025 16:09:45 +0000 Manifest this update: Sun 10 Aug 2025 16:09:44 +0000 Manifest next update: Sun 17 Aug 2025 16:09:44 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: rlm9dBELO7nJNSpijrsN+KYGszwdZrh0wKdabG4/Ti8=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7314 (0x1c92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Aug 10 16:09:44 2025 GMT Not After : Aug 17 16:09:44 2025 GMT Subject: CN=6898c448-b87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:09:ec:a4:b9:3a:10:c9:3e:92:31:4d:c6: 1f:5f:13:5a:fd:7a:02:98:e0:b3:a0:07:14:26:b8: 80:6c:49:84:a3:e9:06:52:2c:9e:d0:b4:e3:96:12: 18:51:93:f6:91:61:f9:f0:ee:3a:6b:1e:29:33:2d: bd:e0:8a:8f:2a:af:9f:ce:7e:f1:35:ae:6d:a7:c4: 9b:12:d2:5f:ab:8c:ff:4f:85:be:37:21:64:df:2f: f3:2b:0f:37:b4:9b:13:92:4e:64:d1:af:0f:bb:7d: 33:7d:fb:ca:42:70:e5:53:86:1b:3d:19:c9:16:1b: f1:de:30:7a:b9:30:7e:b0:10:7a:c3:cc:a3:0c:c4: 31:c4:59:43:b7:e2:6a:60:f2:93:7a:83:fe:6e:37: 56:a8:ad:3e:74:84:ca:7c:e2:18:48:8d:94:ba:15: db:8d:80:bd:f2:de:58:0a:13:f9:18:b0:fd:0c:54: 93:0b:78:e4:b2:02:47:5a:a0:a3:21:23:b9:77:86: 73:d4:e0:75:41:f2:4e:ea:f1:9a:7c:7b:0f:8b:79: c2:4b:8b:da:33:90:99:f1:dc:c8:1b:30:74:b1:b1: 5d:1e:17:18:be:91:a2:eb:1b:6c:cb:ed:e0:11:41: 8a:91:04:33:60:7a:a8:f7:d1:28:e9:f7:3f:7d:c5: bb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B6:2C:A0:52:D6:C3:A1:5A:17:3C:07:11:52:8D:A5:4B:56:E5:30 X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:02:69:9e:69:fa:4c:28:79:a8:31:d7:f0:7b:d2:a7:db:2a: e3:8b:7b:49:08:34:f0:45:9d:ed:e7:7e:f8:09:7e:ed:72:e2: 1b:5e:65:e6:6f:06:99:0a:0f:97:87:86:34:21:a1:00:fb:6e: a8:ba:c7:32:f5:de:e7:37:f2:27:81:d1:2c:ca:95:32:b8:a5: 23:f6:2e:e5:87:fa:84:78:a7:7c:c7:52:1b:7a:4a:56:ed:29: 86:eb:81:69:37:5f:d2:61:c2:b6:1f:33:9c:df:d9:b0:d1:a2: a3:a1:ec:9d:97:43:30:13:f8:b4:54:a1:37:55:63:ca:e5:b5: b3:6b:2e:af:3b:0c:20:b7:8a:ea:b3:7e:67:77:5d:8c:03:37: 07:7d:f8:29:a0:6b:c1:d9:3d:04:12:77:aa:ca:ae:d9:b2:bb: 46:de:68:3f:55:89:f7:0c:9b:c7:3a:dc:f8:12:da:a8:6a:13: a3:18:c8:7a:07:95:f1:76:c9:d8:84:b0:84:0a:ad:18:b6:2b: 2b:14:b1:77:6f:38:7e:c6:e7:6a:0f:58:b6:7d:cb:1f:0f:89: 7c:68:12:42:27:cc:c9:d4:53:67:9c:2b:99:aa:66:1f:ef:f7: 6f:e5:9f:3b:b7:7f:d2:67:0c:18:db:17:01:a8:25:42:b8:9f: b4:e6:30:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwODEwMTYwOTQ0WhcNMjUwODE3MTYwOTQ0WjAYMRYwFAYD VQQDEw02ODk4YzQ0OC1iODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wEJ7KS5OhDJPpIxTcYfXxNa/XoCmOCzoAcUJriAbEmEo+kGUiye0LTjlhIY UZP2kWH58O46ax4pMy294IqPKq+fzn7xNa5tp8SbEtJfq4z/T4W+NyFk3y/zKw83 tJsTkk5k0a8Pu30zffvKQnDlU4YbPRnJFhvx3jB6uTB+sBB6w8yjDMQxxFlDt+Jq YPKTeoP+bjdWqK0+dITKfOIYSI2UuhXbjYC98t5YChP5GLD9DFSTC3jksgJHWqCj ISO5d4Zz1OB1QfJO6vGafHsPi3nCS4vaM5CZ8dzIGzB0sbFdHhcYvpGi6xtsy+3g EUGKkQQzYHqo99Eo6fc/fcW7nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG2LKBS 1sOhWhc8BxFSjaVLVuUwMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCAmmeafpMKHmoMdfwe9Kn2yrji3tJCDTwRZ3t5374CX7tcuIbXmXm bwaZCg+Xh4Y0IaEA+26ouscy9d7nN/IngdEsypUyuKUj9i7lh/qEeKd8x1IbekpW 7SmG64FpN1/SYcK2HzOc39mw0aKjoeydl0MwE/i0VKE3VWPK5bWzay6vOwwgt4rq s35nd12MAzcHffgpoGvB2T0EEneqyq7ZsrtG3mg/VYn3DJvHOtz4EtqoahOjGMh6 B5XxdsnYhLCECq0YtisrFLF3bzh+xudqD1i2fcsfD4l8aBJCJ8zJ1FNnnCuZqmYf 7/dv5Z87t3/SZwwY2xcBqCVCuJ+05jDb -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:30 2025 by rpki-client