$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json) Hash identifier: uUQiOjkw4wKdDvBpln2iz+FqIJaX5F8ugWTI5VApHtM= Subject key identifier: 70:53:F4:73:0F:F0:38:35:F4:D4:0D:2E:71:50:29:A6:1D:9B:6C:14 Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft Manifest number: 01F3 Signing time: Fri 13 Jun 2025 01:36:52 +0000 Manifest this update: Fri 13 Jun 2025 01:36:52 +0000 Manifest next update: Fri 20 Jun 2025 01:36:52 +0000 Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: 0zFtWivvGgWYgpPEl4YaeNXeJqQfkMXCmAHKzCC/+CM=) 2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: MijbaBFOBmjVn0NZXYmQ25vm+DrZhkqNokVzBodlkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Validity Not Before: Jun 13 01:36:52 2025 GMT Not After : Jun 20 01:36:52 2025 GMT Subject: CN=684b80b4-8462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:36:9f:36:d1:84:2f:94:e3:d5:21:83:a7: 72:f8:4f:74:e0:b0:cb:f6:bf:07:ff:c1:0f:dd:9e: e7:91:3b:53:ff:68:d4:bb:9f:7c:6b:d0:41:54:99: 73:2d:88:ba:2c:1f:4b:81:ce:9c:9b:12:df:2f:a2: 5d:71:20:10:03:fd:ee:03:66:24:2a:57:83:72:7c: e1:72:00:d2:e0:16:d3:f9:f4:99:cf:81:2f:81:8a: 2e:8e:47:f1:aa:a7:a6:72:9a:62:7f:d7:6b:0b:68: 32:c5:eb:6e:c2:a0:ba:b2:59:1a:80:cf:c6:6b:e8: 0c:6e:68:ee:ae:ec:a3:70:d2:04:ad:18:34:f4:2e: 9f:d0:52:55:ba:c9:42:59:d6:55:fd:3f:d8:2f:d4: 31:cb:57:65:e3:10:5c:1f:ad:ce:cf:5e:1e:38:f6: 2a:ef:b6:93:b5:2d:b0:b2:bf:62:8f:7b:63:4a:ee: 22:4d:d6:55:53:aa:5b:30:dc:98:b2:53:46:14:10: c6:66:d0:99:fc:40:38:67:73:fc:b6:b4:7b:3f:b1: 78:43:6c:56:5b:26:f0:42:7b:93:8a:0a:27:6c:4f: df:70:ec:aa:e0:af:3e:8a:0e:6a:7b:01:12:a6:aa: 65:c6:3f:10:b4:33:3c:de:dc:35:b7:84:ec:42:5e: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:F4:73:0F:F0:38:35:F4:D4:0D:2E:71:50:29:A6:1D:9B:6C:14 X509v3 Authority Key Identifier: keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:61:b4:2e:5c:e0:b6:1e:38:83:78:9d:3c:8d:02:e4:3a:09: fc:02:72:14:22:50:5a:12:35:95:4f:ad:f9:18:18:a2:9b:08: d9:7a:56:56:20:91:c3:02:ce:68:d1:e1:ac:4c:dc:36:9f:ba: f9:83:70:36:72:96:f2:67:74:38:01:a5:bf:1e:e1:37:bd:a3: 48:6d:73:b9:5a:de:fe:bc:8f:d7:55:c7:ae:aa:55:e8:cb:04: 5b:e9:f5:a2:66:22:4e:3c:cc:2d:a5:ce:ee:86:d3:bd:32:ca: 45:7b:4c:66:98:0f:6c:71:3f:ca:7c:92:57:bd:91:f8:51:c6: a4:a6:be:ec:36:75:5f:a4:bb:a7:0a:35:c5:5b:a8:3b:25:fb: f5:02:3a:3a:0f:33:e5:c0:39:32:a3:86:08:e8:0f:01:78:2d: 88:2f:be:92:e7:94:2c:f4:0e:56:e2:f8:84:4a:34:92:c9:41: 11:d9:43:d2:6d:81:fd:5a:f2:dc:0d:d7:51:fd:13:ca:ec:80: 91:d5:aa:79:9d:22:b6:5c:26:eb:e1:03:cc:97:4c:b1:b6:2b: 86:31:da:9d:07:0b:cc:ed:7f:1a:35:b0:d3:16:7b:2a:c4:be: f1:5d:d6:a7:4a:6c:f7:e5:d5:e7:b7:c9:9e:29:f8:c9:e2:00: fc:27:51:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3 MTFFRjRFQUYwHhcNMjUwNjEzMDEzNjUyWhcNMjUwNjIwMDEzNjUyWjAYMRYwFAYD VQQDEw02ODRiODBiNC04NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+Q2nzbRhC+U49Uhg6dy+E904LDL9r8H/8EP3Z7nkTtT/2jUu598a9BBVJlz LYi6LB9Lgc6cmxLfL6JdcSAQA/3uA2YkKleDcnzhcgDS4BbT+fSZz4EvgYoujkfx qqemcppif9drC2gyxetuwqC6slkagM/Ga+gMbmjuruyjcNIErRg09C6f0FJVuslC WdZV/T/YL9Qxy1dl4xBcH63Oz14eOPYq77aTtS2wsr9ij3tjSu4iTdZVU6pbMNyY slNGFBDGZtCZ/EA4Z3P8trR7P7F4Q2xWWybwQnuTigonbE/fcOyq4K8+ig5qewES pqplxj8QtDM83tw1t4TsQl6epQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBT9HMP 8Dg19NQNLnFQKaYdm2wUMB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjhFMi85NzAxM0E0RTUwNDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pn dWhJUlN6S09zQ0J4SHZUcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWYbQuXOC2HjiDeJ08jQLkOgn8AnIUIlBaEjWVT635GBiimwjZelZW IJHDAs5o0eGsTNw2n7r5g3A2cpbyZ3Q4AaW/HuE3vaNIbXO5Wt7+vI/XVceuqlXo ywRb6fWiZiJOPMwtpc7uhtO9MspFe0xmmA9scT/KfJJXvZH4Ucakpr7sNnVfpLun CjXFW6g7Jfv1Ajo6DzPlwDkyo4YI6A8BeC2IL76S55Qs9A5W4viESjSSyUER2UPS bYH9WvLcDddR/RPK7ICR1ap5nSK2XCbr4QPMl0yxtiuGMdqdBwvM7X8aNbDTFnsq xL7xXdanSmz35dXnt8meKfjJ4gD8J1H/ -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:09 2025 by rpki-client