$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft File: mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json) Hash identifier: ohXIMRBnuhuuog1ILeUSQ4/B/fWIjUr9dpbTMD88UeI= Subject key identifier: E6:71:F3:90:C9:EF:2B:2F:3D:8A:38:CC:82:E9:A0:AF:09:C2:9E:E2 Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft Manifest number: 53 Signing time: Sun 15 Jun 2025 06:18:21 +0000 Manifest this update: Sun 15 Jun 2025 06:18:20 +0000 Manifest next update: Sun 22 Jun 2025 06:18:20 +0000 Files and hashes: 1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: JsfnflrS4g20uUNgMx5kgt2axgudB54pIXv56XdTYzA=) 2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: GSX0pyaiwOS5Abzctg8JuUZl0TI6LV3O2e6/wEsG5kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Validity Not Before: Jun 15 06:18:20 2025 GMT Not After : Jun 22 06:18:20 2025 GMT Subject: CN=684e65ac-1acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:cb:de:4f:c4:25:37:9c:63:53:c1:88:49: 3d:f6:9c:43:e2:95:63:fc:40:8a:7f:a2:04:d0:1a: 3c:a3:0b:45:5e:51:f7:21:35:18:f7:ad:c4:a6:56: a6:db:a8:2b:bc:37:fb:33:8a:c1:c7:a5:1d:45:56: 8e:50:9e:e0:6b:1b:0e:10:e1:d4:62:70:5a:07:55: 11:c2:fc:2a:70:cb:88:0b:02:ca:75:70:7e:91:fe: 8b:23:09:bb:5c:35:de:5a:15:26:c0:9e:b3:a6:b7: 0c:69:9c:02:1e:92:fb:dd:e7:9f:d9:fa:c1:b5:16: a0:6c:3a:ec:08:4f:59:ea:92:f8:e9:07:8a:61:86: 4a:4e:79:ad:d8:db:90:0a:e3:78:23:b2:8a:b2:68: 7e:e0:a0:3e:a6:78:2e:fe:06:49:e2:de:79:9d:c2: 22:5e:0d:d4:b0:dd:63:8e:10:7e:3c:c4:c3:c4:cb: d4:39:1c:41:58:cd:04:76:d8:a3:b6:b8:aa:45:6a: d9:eb:fb:e3:5c:72:82:2e:35:08:83:e3:ab:ab:4d: 01:38:fc:37:0a:e7:24:55:c8:d4:97:6d:81:49:a1: 2d:c6:3b:9a:d2:88:25:46:14:00:42:b0:dc:52:8f: 94:11:ae:2d:36:c7:c5:58:51:cb:50:81:9f:a5:cf: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:71:F3:90:C9:EF:2B:2F:3D:8A:38:CC:82:E9:A0:AF:09:C2:9E:E2 X509v3 Authority Key Identifier: keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b5:c0:69:54:98:c6:95:6f:25:60:cd:2e:51:26:f1:ec:a0: d0:36:b4:29:39:8b:c3:2a:3b:f2:52:7a:1c:5b:b4:0f:76:8f: a4:4d:b9:78:6b:6e:0e:40:5d:e9:50:84:75:24:13:41:e6:95: 3f:72:5f:ea:0e:b2:e7:a1:55:89:eb:00:cc:5b:64:d5:87:ba: 66:81:3b:da:54:e6:99:57:b4:32:70:71:ce:c6:aa:db:44:46: 23:d9:d5:5b:66:db:76:e0:fa:cf:2d:81:0a:58:22:73:b8:fb: 88:bb:6d:ef:db:a2:aa:12:e9:ed:8d:cb:db:46:1b:b0:89:72: ff:87:5c:bd:6e:fb:07:86:2c:54:82:1e:98:05:d0:03:c6:4c: 6c:4a:41:18:54:a1:bb:fe:b1:87:9f:7f:52:6b:d6:c0:96:b3: ce:31:ec:d4:df:0c:d5:9b:1f:9d:d0:44:9b:cd:45:c4:c3:6e: ad:ff:33:34:fe:f6:5b:99:a6:33:7a:ff:46:e2:0a:c4:96:d6: 2e:9d:1b:c9:be:e4:2f:90:5b:12:c0:25:a0:71:32:dc:89:e7: 49:d6:db:76:74:e8:95:76:88:76:f2:4d:21:e4:12:a1:b0:7c: 51:23:0f:a1:70:26:09:43:1b:73:9a:25:09:2a:2f:24:be:6d: 4a:a9:70:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoOTgwQ0U1QkJGMkNGMzVENjBBRTNCMDcyMThBQjVDQTkx MDE0MkM5MDAeFw0yNTA2MTUwNjE4MjBaFw0yNTA2MjIwNjE4MjBaMBgxFjAUBgNV BAMTDTY4NGU2NWFjLTFhY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjxMveT8QlN5xjU8GIST32nEPilWP8QIp/ogTQGjyjC0VeUfchNRj3rcSmVqbb qCu8N/szisHHpR1FVo5QnuBrGw4Q4dRicFoHVRHC/Cpwy4gLAsp1cH6R/osjCbtc Nd5aFSbAnrOmtwxpnAIekvvd55/Z+sG1FqBsOuwIT1nqkvjpB4phhkpOea3Y25AK 43gjsoqyaH7goD6meC7+Bkni3nmdwiJeDdSw3WOOEH48xMPEy9Q5HEFYzQR22KO2 uKpFatnr++NccoIuNQiD46urTQE4/DcK5yRVyNSXbYFJoS3GO5rSiCVGFABCsNxS j5QRri02x8VYUctQgZ+lz3vjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5nHzkMnv Ky89ijjMgumgrwnCnuIwHwYDVR0jBBgwFoAUmAzlu/LPNdYK47ByGKtcqRAULJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzVFOUM0QkIwQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZSzQ3QnlHS3RjcVJBVUxK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUF6bHVfTFBOZFlLNDdCeUdLdGNxUkFVTEpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzVFOUM0QkIwQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZ SzQ3QnlHS3RjcVJBVUxKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHu1wGlUmMaVbyVgzS5RJvHsoNA2tCk5i8MqO/JSehxbtA92j6RNuXhr bg5AXelQhHUkE0HmlT9yX+oOsuehVYnrAMxbZNWHumaBO9pU5plXtDJwcc7GqttE RiPZ1Vtm23bg+s8tgQpYInO4+4i7be/boqoS6e2Ny9tGG7CJcv+HXL1u+weGLFSC HpgF0APGTGxKQRhUobv+sYeff1Jr1sCWs84x7NTfDNWbH53QRJvNRcTDbq3/MzT+ 9luZpjN6/0biCsSW1i6dG8m+5C+QWxLAJaBxMtyJ50nW23Z06JV2iHbyTSHkEqGw fFEjD6FwJglDG3OaJQkqLyS+bUqpcA4= -----END CERTIFICATE-----Generated at Mon Jun 16 18:17:04 2025 by rpki-client