$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: 8f2dbizMdoF3ySamL+pif+CG+44tmqVZm7jYRBfETpQ= Subject key identifier: 21:21:62:11:80:87:0A:CB:E7:9D:B7:11:1D:8F:CD:B7:E1:54:50:6B Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 011A Signing time: Fri 13 Jun 2025 03:52:08 +0000 Manifest this update: Fri 13 Jun 2025 03:52:07 +0000 Manifest next update: Fri 20 Jun 2025 03:52:07 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: MQeivsW1p470kWaWZGmELaK4ogD0vf519RpMkH/fK08=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: Jun 13 03:52:07 2025 GMT Not After : Jun 20 03:52:07 2025 GMT Subject: CN=684ba067-0755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:3d:f0:8f:1e:21:2e:53:e8:4b:3b:fc:9b: f1:60:4f:c1:09:a4:6b:b1:8a:f2:a8:b4:db:b7:98: 97:d4:e0:7f:7d:70:97:b9:86:de:95:1a:ee:3a:1a: ee:b7:4b:b7:aa:9a:32:bf:f4:38:81:a5:65:29:72: 0a:b3:5b:af:6c:71:03:12:e4:0e:30:b1:f1:01:7f: 23:e7:df:30:d9:45:bf:72:36:47:39:6e:cf:89:69: e8:21:db:30:00:0b:9d:aa:c7:33:b3:f5:ab:42:9e: 2e:8e:46:4f:88:c7:f7:25:a3:66:93:0f:52:3c:18: be:f6:ea:2b:b2:10:ec:6f:66:a6:d6:45:4f:41:29: 19:70:b4:58:30:d6:34:06:b6:08:3f:36:84:2e:92: 5b:08:06:d0:7a:46:44:93:d6:2d:6a:86:3d:6e:91: dd:85:c2:b8:9b:9f:ba:78:75:af:51:8b:ca:06:cc: 0c:fe:7e:39:ac:33:3b:4d:a3:38:38:b1:18:4f:55: 1a:51:18:eb:43:38:61:13:98:de:aa:fe:50:97:01: 41:79:05:31:6e:49:8f:b7:db:b2:e5:e3:89:09:69: 3c:a2:35:ca:73:60:60:16:08:a9:e6:1a:3f:a2:ba: 6d:8d:44:2e:72:c4:64:b4:ec:78:bc:00:c3:67:4c: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:21:62:11:80:87:0A:CB:E7:9D:B7:11:1D:8F:CD:B7:E1:54:50:6B X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0a:4a:bf:77:41:35:91:e6:67:1b:03:16:ea:be:c6:08:fd: b3:5d:c9:a9:5c:25:75:e8:82:41:b1:53:02:c2:59:5a:3a:8b: fd:e5:ea:77:d7:fa:4f:2a:95:5a:78:27:80:d3:8d:b0:ea:8d: 2a:78:8a:13:20:b4:9d:9d:78:1c:8d:63:7f:2c:ae:a8:44:16: 02:a8:ef:2c:16:39:b3:48:33:ea:28:fc:5c:11:a2:87:d4:6a: 31:56:dc:bd:75:fb:a6:92:75:bd:98:73:1f:4a:1d:2b:5c:c3: 9e:b4:90:62:9f:1d:b2:18:54:b6:e7:24:39:bc:a3:82:7e:cc: 73:6f:6c:8e:06:5a:5f:26:a0:fc:dd:e3:4e:2d:f5:7d:7d:3e: a0:10:69:f8:d9:62:1b:73:bd:08:a5:d1:90:eb:96:bd:4b:ce: ef:17:56:cb:f6:66:57:a9:20:d6:de:07:9c:14:6f:47:2e:a7: 28:2c:64:05:25:b1:d8:d4:d3:09:8c:c5:3f:64:79:c4:da:b8: 4f:b1:b6:1a:16:75:9c:2b:87:b6:d9:c9:e5:67:30:54:8b:93: 3e:18:db:55:da:0b:bd:71:c8:a5:b9:14:17:01:5a:e7:1d:02: 21:9a:47:18:83:bc:6c:6f:1f:d2:47:a4:f2:48:3e:d1:40:bc: 40:fd:ea:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjUwNjEzMDM1MjA3WhcNMjUwNjIwMDM1MjA3WjAYMRYwFAYD VQQDEw02ODRiYTA2Ny0wNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ww98I8eIS5T6Es7/JvxYE/BCaRrsYryqLTbt5iX1OB/fXCXuYbelRruOhru t0u3qpoyv/Q4gaVlKXIKs1uvbHEDEuQOMLHxAX8j598w2UW/cjZHOW7PiWnoIdsw AAudqsczs/WrQp4ujkZPiMf3JaNmkw9SPBi+9uorshDsb2am1kVPQSkZcLRYMNY0 BrYIPzaELpJbCAbQekZEk9YtaoY9bpHdhcK4m5+6eHWvUYvKBswM/n45rDM7TaM4 OLEYT1UaURjrQzhhE5jeqv5QlwFBeQUxbkmPt9uy5eOJCWk8ojXKc2BgFgip5ho/ orptjUQucsRktOx4vADDZ0w+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEhYhGA hwrL5523ER2PzbfhVFBrMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdCkq/d0E1keZnGwMW6r7GCP2zXcmpXCV16IJBsVMCwllaOov95ep3 1/pPKpVaeCeA042w6o0qeIoTILSdnXgcjWN/LK6oRBYCqO8sFjmzSDPqKPxcEaKH 1GoxVty9dfumknW9mHMfSh0rXMOetJBinx2yGFS25yQ5vKOCfsxzb2yOBlpfJqD8 3eNOLfV9fT6gEGn42WIbc70IpdGQ65a9S87vF1bL9mZXqSDW3gecFG9HLqcoLGQF JbHY1NMJjMU/ZHnE2rhPsbYaFnWcK4e22cnlZzBUi5M+GNtV2gu9cciluRQXAVrn HQIhmkcYg7xsbx/SR6TySD7RQLxA/eqm -----END CERTIFICATE-----Generated at Sat Jun 14 19:41:10 2025 by rpki-client