$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: uktUcxNMApl+0oFotg4EKX5GoGt1jpBXKh2hJUGBJUM= Subject key identifier: DE:57:01:DE:F6:79:95:B8:07:E9:60:7A:EB:91:E7:9D:05:D5:26:FE Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3C11 Signing time: Sat 14 Jun 2025 15:20:32 +0000 Manifest this update: Sat 14 Jun 2025 15:20:32 +0000 Manifest next update: Sat 21 Jun 2025 15:20:32 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: WepeCZlPlcjJKgQo+01YJ2cXHUsWKfr0zUHwcLpkf2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Jun 14 15:20:32 2025 GMT Not After : Jun 21 15:20:32 2025 GMT Subject: CN=684d9340-d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:b1:e1:29:15:f0:fe:fd:1d:ed:e8:80:19: 45:80:0c:4f:91:59:a8:df:bd:44:56:c8:cf:df:fc: 98:d3:e7:20:b1:01:b8:bf:e5:4c:47:36:14:b3:22: 19:cd:e4:d8:1e:b3:ff:0e:4e:86:9c:f0:8d:b6:37: 4c:c7:c3:73:2f:02:af:85:b6:58:73:26:a0:51:1a: d3:25:6d:b1:ff:db:b0:48:3c:40:2f:d5:59:ff:f3: 42:34:ca:9e:12:55:04:fe:ab:38:f2:a5:b3:75:a9: b4:d9:13:08:e8:8e:dc:0d:32:60:64:4a:3b:8d:0c: fa:22:0a:bc:7b:91:1f:4e:29:6d:04:d6:4e:00:27: b2:af:c0:ce:bc:d8:07:ef:e8:d9:5a:8c:93:72:4c: ec:c3:2a:24:37:28:c0:b6:ed:66:f5:ad:82:7f:e0: cf:28:6d:0f:22:ea:41:25:3e:e3:df:5e:a3:e0:af: 18:5a:ee:f6:28:5c:e9:73:a2:5f:8b:e5:8d:46:90: b7:1c:ad:6c:69:ce:cf:3b:d4:ec:c6:4e:b7:e5:0b: f9:6c:a7:35:b7:eb:62:8b:16:b7:36:64:cb:c0:4b: 4c:24:58:7a:db:40:a6:dc:cd:72:cc:f8:b6:5b:ec: 5c:32:7a:fa:c3:79:9e:de:ee:be:41:c8:67:c2:44: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:57:01:DE:F6:79:95:B8:07:E9:60:7A:EB:91:E7:9D:05:D5:26:FE X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:11:69:06:cb:15:ee:b4:b3:34:4c:56:c4:f1:b0:b4:81:61: 74:91:bd:90:2c:80:e8:05:61:5a:a6:08:81:bb:7f:71:7e:ea: d9:1c:2f:71:1e:59:a3:82:64:3b:b2:8b:f6:3d:bf:c9:b3:d2: d7:47:d1:53:a8:16:36:6f:12:ee:15:31:61:fc:b7:9c:34:d1: 7b:73:a9:e0:ad:0c:7c:a3:9f:65:ab:4d:34:38:ae:f5:70:70: 49:6c:ce:80:7e:ab:68:e5:ae:b6:5a:ea:5f:68:bb:19:d3:bd: 4b:9b:37:32:49:69:f6:a5:46:54:25:24:51:a5:ff:85:d6:8e: d7:d8:4f:4c:bc:f5:fe:72:6f:65:93:54:fa:e3:b7:50:c2:db: 88:72:ff:7f:79:50:86:c9:77:bb:bf:17:9d:2a:16:4e:d8:07: 20:2c:42:80:fd:e7:29:22:0c:d0:9e:27:6e:e6:fe:8f:de:12: 79:fe:f1:95:96:d0:9f:6f:5a:84:f9:67:11:8d:c8:d8:57:dc: e5:5e:f1:97:a8:8b:74:ef:da:3c:b0:ae:69:64:2f:70:25:f3: ab:56:29:8d:ab:80:a5:b5:0f:11:5a:3b:0f:98:40:81:ec:4a: d0:97:97:99:a3:d1:a4:fc:0e:e7:e0:cf:2a:34:9b:e2:72:cd: ec:8c:9b:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjUwNjE0MTUyMDMyWhcNMjUwNjIxMTUyMDMyWjAYMRYwFAYD VQQDEw02ODRkOTM0MC1kNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVGx4SkV8P79He3ogBlFgAxPkVmo371EVsjP3/yY0+cgsQG4v+VMRzYUsyIZ zeTYHrP/Dk6GnPCNtjdMx8NzLwKvhbZYcyagURrTJW2x/9uwSDxAL9VZ//NCNMqe ElUE/qs48qWzdam02RMI6I7cDTJgZEo7jQz6Igq8e5EfTiltBNZOACeyr8DOvNgH 7+jZWoyTckzswyokNyjAtu1m9a2Cf+DPKG0PIupBJT7j316j4K8YWu72KFzpc6Jf i+WNRpC3HK1sac7PO9Tsxk635Qv5bKc1t+tiixa3NmTLwEtMJFh620Cm3M1yzPi2 W+xcMnr6w3me3u6+QchnwkR0iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5XAd72 eZW4B+lgeuuR550F1Sb+MB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEWkGyxXutLM0TFbE8bC0gWF0kb2QLIDoBWFapgiBu39xfurZHC9x HlmjgmQ7sov2Pb/Js9LXR9FTqBY2bxLuFTFh/LecNNF7c6ngrQx8o59lq000OK71 cHBJbM6Afqto5a62WupfaLsZ071LmzcySWn2pUZUJSRRpf+F1o7X2E9MvPX+cm9l k1T647dQwtuIcv9/eVCGyXe7vxedKhZO2AcgLEKA/ecpIgzQnidu5v6P3hJ5/vGV ltCfb1qE+WcRjcjYV9zlXvGXqIt079o8sK5pZC9wJfOrVimNq4CltQ8RWjsPmECB 7ErQl5eZo9Gk/A7n4M8qNJvics3sjJsj -----END CERTIFICATE-----Generated at Sat Jun 14 19:20:12 2025 by rpki-client