$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: VVg83SbueOPME9dpsEFJjSIrsUuSPxzrUCod9wioQEo= Subject key identifier: 7B:39:55:76:B6:2C:71:53:16:4A:3D:30:39:E3:81:E5:D9:DC:9F:03 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 0102 Signing time: Fri 25 Apr 2025 04:14:57 +0000 Manifest this update: Fri 25 Apr 2025 04:14:57 +0000 Manifest next update: Fri 02 May 2025 04:14:57 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: /oxQFeSWQJYYyTftZtUlCIVaJ3el19WPhzcZqTQTu0Y=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: Apr 25 04:14:57 2025 GMT Not After : May 2 04:14:57 2025 GMT Subject: CN=680b0c41-7ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:d2:c5:69:d7:46:22:cc:62:10:6f:0e:90: 42:ff:b1:9c:c8:35:9b:6c:a3:8d:51:f1:ec:bc:e3: 60:55:e3:d8:79:09:bc:57:48:6c:b3:56:f9:00:e5: f6:a5:52:3a:7b:60:da:a1:53:84:34:3e:ab:14:fa: bc:7a:50:42:a2:4d:a8:bb:98:6a:44:fa:28:29:d5: 1f:df:d8:13:77:d8:b8:c7:cc:4f:00:ce:3f:a8:c8: 70:54:f2:a9:0c:46:ca:d2:8d:4f:e9:05:ec:51:25: ac:af:b2:74:63:a1:03:3c:2d:bd:56:27:a4:63:63: fe:2d:29:ad:4b:48:17:77:8e:1a:05:fa:2a:81:82: 0c:5c:41:5a:9e:90:a6:bb:ba:32:c7:b3:94:6e:ee: 52:40:98:33:2b:0c:bb:11:e7:a1:e7:b9:b2:fe:7c: 3a:14:92:1a:4b:35:83:fd:3d:98:dd:e4:e5:b9:d3: b9:8c:d9:3d:4f:cf:78:55:2e:20:ef:df:55:3f:f7: dc:a0:2f:2b:71:b6:9f:35:ee:a8:7e:02:e7:b3:01: 17:d2:1b:56:9b:e0:48:a1:3f:8c:d3:e8:dd:4e:6e: 93:88:50:6a:78:e7:06:6f:81:17:0b:70:44:48:e7: 9a:5b:f9:ac:8b:d2:8e:65:9d:a4:be:ee:2d:ce:f2: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:39:55:76:B6:2C:71:53:16:4A:3D:30:39:E3:81:E5:D9:DC:9F:03 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:85:71:9d:4c:ff:da:12:db:47:9e:24:cf:7b:37:f8:38:97: 4e:ba:66:15:5f:f7:70:5c:9d:9b:54:3a:26:00:dc:11:17:86: a7:bf:fb:7e:fc:a4:d6:c2:74:e1:e8:a1:3c:d5:10:98:30:fb: 38:66:9c:3a:41:8c:0e:d8:39:7b:39:c3:2d:58:29:ca:5e:fe: 16:a8:c0:1b:5e:4c:ad:3b:95:9a:96:01:4e:3f:3f:68:68:0d: 14:56:0e:ab:af:c2:bb:0f:55:57:76:47:20:3f:8c:fc:f2:84: a0:cf:55:a6:94:69:37:d1:3c:53:76:86:bb:00:76:c0:5f:ad: f3:47:7f:81:cf:b5:92:0f:62:a8:0e:62:3b:0f:65:d6:60:ba: 10:a4:cb:af:a5:07:ce:65:34:4c:b2:fd:e4:17:4d:3f:29:ce: 55:29:2c:6a:6c:7e:1a:0e:a9:3e:6a:c5:ab:fe:46:5b:22:c6: ec:23:3b:53:d9:48:68:da:32:09:18:40:7e:ce:36:2d:ee:21: 3b:4e:18:4a:5b:f9:e9:9d:40:10:2b:ab:4e:d0:c8:c6:86:df: ca:b2:ae:c4:65:79:aa:cf:2d:f4:be:9c:e9:47:fc:9b:97:58: 88:2d:2e:6c:c6:39:7a:c5:12:3e:a7:58:fc:05:3f:b2:5b:d5: 12:df:21:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjUwNDI1MDQxNDU3WhcNMjUwNTAyMDQxNDU3WjAYMRYwFAYD VQQDEw02ODBiMGM0MS03ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSzSxWnXRiLMYhBvDpBC/7GcyDWbbKONUfHsvONgVePYeQm8V0hss1b5AOX2 pVI6e2DaoVOEND6rFPq8elBCok2ou5hqRPooKdUf39gTd9i4x8xPAM4/qMhwVPKp DEbK0o1P6QXsUSWsr7J0Y6EDPC29ViekY2P+LSmtS0gXd44aBfoqgYIMXEFanpCm u7oyx7OUbu5SQJgzKwy7Eeeh57my/nw6FJIaSzWD/T2Y3eTludO5jNk9T894VS4g 799VP/fcoC8rcbafNe6ofgLnswEX0htWm+BIoT+M0+jdTm6TiFBqeOcGb4EXC3BE SOeaW/msi9KOZZ2kvu4tzvILrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs5VXa2 LHFTFko9MDnjgeXZ3J8DMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8hXGdTP/aEttHniTPezf4OJdOumYVX/dwXJ2bVDomANwRF4anv/t+ /KTWwnTh6KE81RCYMPs4Zpw6QYwO2Dl7OcMtWCnKXv4WqMAbXkytO5WalgFOPz9o aA0UVg6rr8K7D1VXdkcgP4z88oSgz1WmlGk30TxTdoa7AHbAX63zR3+Bz7WSD2Ko DmI7D2XWYLoQpMuvpQfOZTRMsv3kF00/Kc5VKSxqbH4aDqk+asWr/kZbIsbsIztT 2Uho2jIJGEB+zjYt7iE7ThhKW/npnUAQK6tO0MjGht/Ksq7EZXmqzy30vpzpR/yb l1iILS5sxjl6xRI+p1j8BT+yW9US3yF2 -----END CERTIFICATE-----Generated at Sat Apr 26 17:29:30 2025 by rpki-client