$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: UIebzY8/gG5I4ugSQ2WIvsn4RhZ8UbeSf7mNU5BCxEY= Subject key identifier: 4A:83:42:9C:D6:E4:23:81:5C:8E:DF:18:D9:71:54:F5:AD:AE:6C:E4 Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3C4B Signing time: Sun 10 Aug 2025 15:19:44 +0000 Manifest this update: Sun 10 Aug 2025 15:19:44 +0000 Manifest next update: Sun 17 Aug 2025 15:19:44 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: Ru9JaLatzfUG7+B5MalQyMhLEQi35R44V99io700/6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Aug 10 15:19:44 2025 GMT Not After : Aug 17 15:19:44 2025 GMT Subject: CN=6898b890-5824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:68:73:a7:78:ae:66:44:02:d4:6e:24:b7: 77:ce:ac:3a:fb:97:90:66:cc:39:0d:6a:b9:7f:3a: fd:55:96:3c:be:86:31:1f:a3:42:1a:0c:35:9b:6e: a7:f9:54:73:c8:b0:e3:04:e8:23:db:a4:d7:6c:00: e6:bf:4d:b7:9d:78:9f:9a:0e:65:f7:64:91:07:c6: 6f:24:0f:a2:ff:9a:76:41:b8:03:4a:f3:ad:1a:a5: 60:d0:76:45:28:e0:ea:f7:8a:33:4c:f4:7f:64:e9: db:9e:4e:4f:67:38:87:0e:69:c9:12:1c:e5:97:3c: 22:d4:81:fc:ba:a2:74:b0:00:51:48:e5:fb:76:b3: c3:7a:62:66:4d:b8:9e:f8:21:f9:e1:b4:ba:4c:8c: a7:2c:ae:da:c6:cd:d5:c2:97:65:7f:70:60:08:8a: b7:64:c8:cc:c2:00:35:83:aa:3e:85:20:58:81:52: e3:3d:95:df:f1:09:29:fb:19:1b:99:70:aa:65:d7: 6f:92:b9:84:89:f5:53:9f:5e:26:1f:fc:1a:67:be: d8:e1:8d:cf:b5:4d:d7:7a:e5:35:af:c4:c3:94:fd: e6:da:3d:b6:56:fc:8c:8e:66:0a:e9:06:41:aa:41: e0:07:e9:0c:77:dd:09:ee:15:f5:1d:65:eb:ad:e2: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:83:42:9C:D6:E4:23:81:5C:8E:DF:18:D9:71:54:F5:AD:AE:6C:E4 X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:40:2b:33:4f:5c:e9:3e:22:22:35:77:80:c6:2c:8f:eb:06: 5e:7a:88:d4:f6:1a:5b:1a:ff:aa:8b:8f:e9:5e:db:ea:71:55: 89:ff:cb:98:d3:41:ea:96:56:bb:b5:33:70:be:c9:46:1f:12: ea:bc:c8:47:f5:04:8a:18:4d:02:de:21:45:0f:2f:43:cf:28: b6:93:22:1f:3d:fa:15:7f:14:ef:2f:fb:ba:45:95:e8:a8:61: 96:ea:97:b4:07:ca:4c:1b:46:6f:d3:74:f5:d3:88:ca:cc:ea: bd:3f:ae:7c:e7:fe:7e:18:c8:fc:1e:4c:f8:99:e3:64:ff:64: 64:51:d9:cd:16:ac:8d:0d:f6:8f:d9:48:d6:c4:c7:be:6e:8a: 91:63:35:c6:36:81:81:b5:ce:58:a8:42:33:18:63:a8:1d:8a: 07:ae:8f:c9:38:43:7c:73:50:48:76:f7:34:58:33:e0:d8:ee: 21:b0:25:71:b7:1b:e6:d4:9d:ae:61:04:6f:b2:6d:34:d5:20: 1d:ce:89:24:0f:47:4c:f0:41:01:57:80:17:f8:05:93:1a:13: 50:50:8f:b4:9f:24:4a:b2:9e:a9:f5:84:35:ca:98:a9:1c:bb: a0:0f:1b:1f:31:14:a4:8b:e6:87:0d:8d:52:d6:20:fd:59:56: cb:e3:01:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjUwODEwMTUxOTQ0WhcNMjUwODE3MTUxOTQ0WjAYMRYwFAYD VQQDEw02ODk4Yjg5MC01ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1Roc6d4rmZEAtRuJLd3zqw6+5eQZsw5DWq5fzr9VZY8voYxH6NCGgw1m26n +VRzyLDjBOgj26TXbADmv023nXifmg5l92SRB8ZvJA+i/5p2QbgDSvOtGqVg0HZF KODq94ozTPR/ZOnbnk5PZziHDmnJEhzllzwi1IH8uqJ0sABRSOX7drPDemJmTbie +CH54bS6TIynLK7axs3Vwpdlf3BgCIq3ZMjMwgA1g6o+hSBYgVLjPZXf8Qkp+xkb mXCqZddvkrmEifVTn14mH/waZ77Y4Y3PtU3XeuU1r8TDlP3m2j22VvyMjmYK6QZB qkHgB+kMd90J7hX1HWXrreK6eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqDQpzW 5COBXI7fGNlxVPWtrmzkMB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmQCszT1zpPiIiNXeAxiyP6wZeeojU9hpbGv+qi4/pXtvqcVWJ/8uY 00Hqlla7tTNwvslGHxLqvMhH9QSKGE0C3iFFDy9Dzyi2kyIfPfoVfxTvL/u6RZXo qGGW6pe0B8pMG0Zv03T104jKzOq9P6585/5+GMj8Hkz4meNk/2RkUdnNFqyNDfaP 2UjWxMe+boqRYzXGNoGBtc5YqEIzGGOoHYoHro/JOEN8c1BIdvc0WDPg2O4hsCVx txvm1J2uYQRvsm001SAdzokkD0dM8EEBV4AX+AWTGhNQUI+0nyRKsp6p9YQ1ypip HLugDxsfMRSki+aHDY1S1iD9WVbL4wGY -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:05 2025 by rpki-client