$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: VVcSyN/hKbO7UB2gxs+0Couh5L0nIxo4WCZyWtxAZf4= Subject key identifier: D9:CF:2B:A6:1D:24:CF:D4:A0:E5:CA:10:5B:47:46:10:72:2F:0B:33 Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 055E Signing time: Thu 24 Apr 2025 23:10:37 +0000 Manifest this update: Thu 24 Apr 2025 23:10:36 +0000 Manifest next update: Thu 01 May 2025 23:10:36 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: icyF7EEMLOI9XcqWk0w+I6G2xW7vfNKtUN9JZTHjL9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: Apr 24 23:10:36 2025 GMT Not After : May 1 23:10:36 2025 GMT Subject: CN=680ac4ec-136e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:1e:3d:a8:2a:0b:fd:da:fa:32:34:6f:78: bb:7b:6e:3e:ca:b9:47:99:46:24:55:4e:f4:64:c4: 0c:a7:64:1b:a4:60:e8:96:1d:18:d1:47:9b:b1:81: 11:8b:02:a3:b4:14:e3:c3:72:85:76:fb:99:a7:09: d2:94:9e:bc:78:54:bd:fa:3f:84:9b:ae:bf:bc:60: bd:2e:34:0d:d5:ff:e6:37:b9:a3:ec:92:b9:d6:1e: b6:02:80:fe:f5:d7:6a:0c:7e:63:3d:75:7f:8c:4d: 61:0b:69:6f:31:e9:a0:90:00:9e:fa:6e:59:c0:94: c1:ef:cd:52:f5:8a:88:22:8d:f3:f4:dd:eb:16:3d: 7d:7b:ec:0d:75:b2:57:62:91:08:c6:dd:4b:6f:83: bc:1c:d0:74:ec:0e:83:01:f5:4a:8f:bb:e4:32:da: 3f:e2:54:0b:7e:9e:ba:25:f1:3a:12:fb:ce:3b:f1: 74:29:46:8f:b7:ca:06:5e:88:a4:8a:3a:b8:64:10: fe:a6:37:c2:65:c7:be:e6:9f:31:15:ad:91:b7:3a: ea:b0:8a:c3:fd:ae:fc:57:90:90:9e:d7:8c:20:4e: 66:52:0f:8e:26:1d:39:ef:65:f6:e2:45:4c:3a:20: 01:aa:67:a8:96:a8:e5:16:90:3f:0b:89:2b:20:78: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:2B:A6:1D:24:CF:D4:A0:E5:CA:10:5B:47:46:10:72:2F:0B:33 X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ce:0b:aa:e8:03:5f:12:51:43:aa:d6:e9:34:f4:18:30:d6: 7e:66:c2:0b:3e:a6:58:28:ee:c9:d4:4b:92:9f:e7:3e:c7:82: 49:3f:36:5e:68:69:92:32:dc:1c:52:7b:6e:bc:ef:af:b9:08: f6:c7:42:42:ab:37:50:15:48:c1:cf:74:a6:43:93:dc:9a:82: d5:47:b2:19:a5:a0:98:a0:c0:48:cc:5e:7c:b9:31:93:18:93: c8:70:2a:d8:70:80:55:5b:4f:33:ee:3e:48:34:59:3a:84:c5: 6b:fd:69:1e:44:f3:b8:d7:d1:d2:48:89:a5:4b:f9:71:d8:47: 87:14:a5:9b:62:f4:86:14:95:54:e7:d0:c7:71:98:b4:59:8a: fa:7c:86:97:aa:ce:73:8a:29:18:9c:b3:26:a9:43:87:7c:2e: 6a:ae:be:70:ce:33:8d:63:89:77:05:4f:58:e9:3c:72:13:95: b4:32:73:cf:da:35:12:f0:fb:a8:f9:78:1f:59:be:15:7f:ba: 6d:91:49:6a:9c:c3:50:31:60:15:4e:90:ee:a3:68:c5:44:4f: 69:3e:cb:5a:dc:dc:d9:4f:f7:52:11:30:55:92:a3:ac:3a:ed: 88:9c:b5:38:27:2e:03:31:d7:fd:6c:37:cd:58:a4:49:7b:e5: cc:d6:58:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjUwNDI0MjMxMDM2WhcNMjUwNTAxMjMxMDM2WjAYMRYwFAYD VQQDEw02ODBhYzRlYy0xMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lwePagqC/3a+jI0b3i7e24+yrlHmUYkVU70ZMQMp2QbpGDolh0Y0UebsYER iwKjtBTjw3KFdvuZpwnSlJ68eFS9+j+Em66/vGC9LjQN1f/mN7mj7JK51h62AoD+ 9ddqDH5jPXV/jE1hC2lvMemgkACe+m5ZwJTB781S9YqIIo3z9N3rFj19e+wNdbJX YpEIxt1Lb4O8HNB07A6DAfVKj7vkMto/4lQLfp66JfE6EvvOO/F0KUaPt8oGXoik ijq4ZBD+pjfCZce+5p8xFa2RtzrqsIrD/a78V5CQnteMIE5mUg+OJh0572X24kVM OiABqmeolqjlFpA/C4krIHjL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnPK6Yd JM/UoOXKEFtHRhByLwszMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6zguq6ANfElFDqtbpNPQYMNZ+ZsILPqZYKO7J1EuSn+c+x4JJPzZe aGmSMtwcUntuvO+vuQj2x0JCqzdQFUjBz3SmQ5PcmoLVR7IZpaCYoMBIzF58uTGT GJPIcCrYcIBVW08z7j5INFk6hMVr/WkeRPO419HSSImlS/lx2EeHFKWbYvSGFJVU 59DHcZi0WYr6fIaXqs5ziikYnLMmqUOHfC5qrr5wzjONY4l3BU9Y6TxyE5W0MnPP 2jUS8Puo+XgfWb4Vf7ptkUlqnMNQMWAVTpDuo2jFRE9pPsta3NzZT/dSETBVkqOs Ou2InLU4Jy4DMdf9bDfNWKRJe+XM1liX -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:50 2025 by rpki-client