$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: GScGbUg/IW2fDNp7JllMUvOSF8SahuhDCBvUZfeh+o4= Subject key identifier: 1C:C0:F7:90:5B:82:84:A2:13:83:9A:DB:04:D4:A9:1B:EF:7F:25:89 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01E2 Signing time: Thu 19 Jun 2025 02:07:30 +0000 Manifest this update: Thu 19 Jun 2025 02:07:30 +0000 Manifest next update: Thu 26 Jun 2025 02:07:30 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: 9RY2LiPFM6oOiaAfLLV5Hv1DDvPcii6b08xkcJ2sAw4=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Jun 19 02:07:30 2025 GMT Not After : Jun 26 02:07:30 2025 GMT Subject: CN=685370e2-eeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1d:39:a9:5a:74:cb:bf:0d:f6:b0:26:98:5f: 0c:25:dd:d7:98:2d:8a:65:d9:29:bb:05:12:57:0d: a9:ed:59:10:a5:7d:c8:3c:33:3b:bd:02:f4:bb:fa: 70:98:7c:84:cd:8d:76:56:16:af:3c:ed:67:cc:2d: 30:09:35:af:b6:72:5c:f3:15:6d:62:1a:12:3d:92: 22:de:24:6c:7f:e9:46:24:5f:aa:fb:5c:93:c0:74: 40:a3:77:b5:56:58:a3:e6:6a:fc:00:03:db:2b:f9: ee:db:ec:8e:9a:30:b0:2b:51:d3:e3:6e:12:29:2e: c0:a8:77:b9:08:28:51:1d:2c:d3:ae:88:c2:66:c8: 7e:a3:8b:26:17:b4:c9:2c:34:a9:3e:21:c5:b7:54: ec:dc:ef:34:fd:59:ae:68:04:5a:b6:a0:72:7a:15: 3d:de:66:01:8a:8d:78:2b:a2:84:3a:4d:c0:ec:26: cb:b1:e5:b5:1c:23:ef:5c:2e:a8:82:b1:1f:14:bc: c9:9c:38:41:8a:b3:e7:0e:c8:df:64:f0:8e:a4:2a: 31:0a:6f:80:bb:50:cc:0f:60:12:31:db:ef:7a:f2: 91:80:2b:53:bd:6b:9e:7d:44:96:ee:82:cc:04:bc: 77:16:d4:41:1f:fb:36:08:c1:bd:aa:a0:b8:c8:10: 4f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C0:F7:90:5B:82:84:A2:13:83:9A:DB:04:D4:A9:1B:EF:7F:25:89 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cf:ef:47:3c:81:7c:45:bf:51:bf:1e:f6:62:98:36:f3:23: 67:92:26:71:99:24:81:bf:ee:46:1d:4b:0d:ca:e5:cf:ec:ac: a4:d4:3f:11:f0:05:75:db:82:33:98:3e:99:a6:41:37:96:bf: ea:6c:2c:dc:e7:78:5e:fd:58:f9:8f:0a:76:f6:ad:08:4c:39: ca:a1:da:64:7a:cd:27:35:e8:7a:00:c1:8c:e9:93:6a:ff:23: d7:7a:65:bd:c3:24:9f:14:9e:a8:35:c9:6d:1f:b5:05:b5:19: ad:df:09:4b:3a:7e:f0:1a:58:83:0b:17:4d:05:56:67:5c:ef: f3:db:88:6b:a9:0e:19:6a:60:9c:18:39:75:c1:df:27:ed:a2: 2f:f0:10:63:d5:5a:30:3b:84:48:00:d0:ef:a9:c3:ca:98:4e: dc:8b:89:59:ef:01:fa:75:ea:b1:dd:a7:15:df:a3:9b:61:48: 19:c3:97:f6:b0:93:7d:33:39:77:85:66:b5:60:7a:45:7a:1c: 3f:b2:78:99:31:4d:ce:05:e6:e5:5a:a8:25:f0:0e:7a:3a:54: dc:b3:98:8f:5d:86:bd:d9:8a:4c:5f:9d:7a:0f:f5:87:fc:36: 1f:d2:d0:29:03:8a:bb:66:9e:33:87:8f:7e:a4:6b:3e:86:1e: 80:11:25:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwNjE5MDIwNzMwWhcNMjUwNjI2MDIwNzMwWjAYMRYwFAYD VQQDEw02ODUzNzBlMi1lZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR05qVp0y78N9rAmmF8MJd3XmC2KZdkpuwUSVw2p7VkQpX3IPDM7vQL0u/pw mHyEzY12VhavPO1nzC0wCTWvtnJc8xVtYhoSPZIi3iRsf+lGJF+q+1yTwHRAo3e1 Vlij5mr8AAPbK/nu2+yOmjCwK1HT424SKS7AqHe5CChRHSzTrojCZsh+o4smF7TJ LDSpPiHFt1Ts3O80/VmuaARatqByehU93mYBio14K6KEOk3A7CbLseW1HCPvXC6o grEfFLzJnDhBirPnDsjfZPCOpCoxCm+Au1DMD2ASMdvvevKRgCtTvWuefUSW7oLM BLx3FtRBH/s2CMG9qqC4yBBPAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzA95Bb goSiE4Oa2wTUqRvvfyWJMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPz+9HPIF8Rb9Rvx72Ypg28yNnkiZxmSSBv+5GHUsNyuXP7Kyk1D8R 8AV124IzmD6ZpkE3lr/qbCzc53he/Vj5jwp29q0ITDnKodpkes0nNeh6AMGM6ZNq /yPXemW9wySfFJ6oNcltH7UFtRmt3wlLOn7wGliDCxdNBVZnXO/z24hrqQ4ZamCc GDl1wd8n7aIv8BBj1VowO4RIANDvqcPKmE7ci4lZ7wH6deqx3acV36ObYUgZw5f2 sJN9Mzl3hWa1YHpFehw/sniZMU3OBeblWqgl8A56OlTcs5iPXYa92YpMX516D/WH /DYf0tApA4q7Zp4zh49+pGs+hh6AESXJ -----END CERTIFICATE-----Generated at Thu Jun 19 09:14:44 2025 by rpki-client