$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: JcbeEYoYCwc8pLWs1l8+jBHk+NkWnjCFnbfCpvmtDlk= Subject key identifier: 9A:55:B8:DD:20:88:7F:D4:D1:E6:DF:0E:D2:DD:3D:CF:68:AB:1E:9B Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 0593 Signing time: Fri 08 Aug 2025 23:40:33 +0000 Manifest this update: Fri 08 Aug 2025 23:40:33 +0000 Manifest next update: Fri 15 Aug 2025 23:40:33 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: WkEeJBfruhcZoo+6v+OTJiQNaKxWPRs7uEcM9ZdW+XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: Aug 8 23:40:33 2025 GMT Not After : Aug 15 23:40:33 2025 GMT Subject: CN=68968af1-211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:10:f4:19:67:bd:87:f4:42:9c:81:7b:96: 42:d3:89:33:75:7e:69:2b:f2:bd:82:3d:c0:e1:83: 3d:dd:d1:e1:f9:91:c7:0c:57:a7:a6:8f:27:e9:be: 10:94:b9:5f:ce:8a:ca:ff:e9:ed:8d:7d:78:6a:8a: ae:31:eb:b3:f9:70:9d:3d:8b:78:aa:a2:29:8b:01: dc:6e:eb:88:6e:49:ac:38:7e:78:49:56:31:f8:fe: d5:4b:9c:53:b6:ce:9c:ff:23:14:be:3e:b1:e9:0b: c2:86:44:8b:88:08:d0:81:a6:61:00:11:16:fa:36: 2b:16:db:94:62:23:99:15:c6:b5:5d:45:2e:7c:3d: 4c:09:66:81:ab:d1:4a:b8:65:d3:67:74:c1:a3:fa: 76:47:e2:17:7e:87:c0:c6:1a:04:68:be:bd:ac:8c: dc:7c:13:37:f8:86:6b:b6:82:b2:a4:7e:34:c6:ff: a8:95:67:b4:8b:0c:ce:ce:58:c1:72:34:26:fb:7f: ae:c2:84:92:f2:3c:3b:1a:e8:fc:47:0b:75:b8:06: 7f:74:f0:4e:4b:30:c5:62:fd:2c:80:c6:d7:a4:f9: 86:c3:9f:70:9c:17:5c:8c:4f:04:f8:8b:31:d2:fd: a6:c6:3f:90:6d:1d:77:41:ff:e1:85:e0:6a:16:3c: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:B8:DD:20:88:7F:D4:D1:E6:DF:0E:D2:DD:3D:CF:68:AB:1E:9B X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:09:2d:50:92:ac:a7:3b:df:f9:0f:40:17:54:bd:e8:9d:3f: 01:65:5d:54:29:98:7e:1c:36:23:f2:92:f8:f7:22:c3:1c:d3: 03:b2:64:a6:c0:62:73:72:9b:a8:a0:81:58:e9:92:01:d1:48: 26:22:03:66:29:f3:ee:b9:48:b2:19:ce:51:d6:1f:83:f1:9b: 77:4a:1a:62:25:ae:08:91:97:62:bb:fe:52:94:4b:e7:ea:49: 68:12:99:6c:ff:ba:3a:e3:13:a9:47:f5:8e:82:47:48:53:fa: 0c:32:12:c5:fe:ba:c3:3a:20:98:4b:1c:cd:d9:c0:9c:0d:d9: c1:37:c6:20:b9:b2:3c:22:7f:25:0b:fd:e0:ce:1d:7d:ec:d1: 54:12:d4:bb:56:59:70:71:56:21:a8:a9:b0:b1:7d:d1:b9:ff: 3d:02:80:27:f6:ee:ea:79:b7:4d:03:11:24:8e:d3:f6:32:e0: 34:59:d3:76:3d:71:59:57:66:33:5d:86:95:e0:2c:42:bd:67: 0b:97:b5:7a:04:81:a2:72:37:d8:f3:1b:39:85:7d:6f:3d:49: 40:44:50:b5:37:41:89:69:47:76:f5:fc:ed:86:0f:db:be:07: 4e:d8:da:62:42:e6:8c:5e:f7:b9:c2:16:dc:42:c0:9c:29:c8: 28:28:f0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjUwODA4MjM0MDMzWhcNMjUwODE1MjM0MDMzWjAYMRYwFAYD VQQDEw02ODk2OGFmMS0yMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03AQ9BlnvYf0QpyBe5ZC04kzdX5pK/K9gj3A4YM93dHh+ZHHDFenpo8n6b4Q lLlfzorK/+ntjX14aoquMeuz+XCdPYt4qqIpiwHcbuuIbkmsOH54SVYx+P7VS5xT ts6c/yMUvj6x6QvChkSLiAjQgaZhABEW+jYrFtuUYiOZFca1XUUufD1MCWaBq9FK uGXTZ3TBo/p2R+IXfofAxhoEaL69rIzcfBM3+IZrtoKypH40xv+olWe0iwzOzljB cjQm+3+uwoSS8jw7Guj8Rwt1uAZ/dPBOSzDFYv0sgMbXpPmGw59wnBdcjE8E+Isx 0v2mxj+QbR13Qf/hheBqFjzVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpVuN0g iH/U0ebfDtLdPc9oqx6bMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMCS1QkqynO9/5D0AXVL3onT8BZV1UKZh+HDYj8pL49yLDHNMDsmSm wGJzcpuooIFY6ZIB0UgmIgNmKfPuuUiyGc5R1h+D8Zt3ShpiJa4IkZdiu/5SlEvn 6kloEpls/7o64xOpR/WOgkdIU/oMMhLF/rrDOiCYSxzN2cCcDdnBN8YgubI8In8l C/3gzh197NFUEtS7VllwcVYhqKmwsX3Ruf89AoAn9u7qebdNAxEkjtP2MuA0WdN2 PXFZV2YzXYaV4CxCvWcLl7V6BIGicjfY8xs5hX1vPUlARFC1N0GJaUd29fzthg/b vgdO2NpiQuaMXve5whbcQsCcKcgoKPCz -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:20 2025 by rpki-client