$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json) Hash identifier: 1i8SnRyelFrpoz7PGGeanxB8zFa9UqiX+uBZK5UsDRs= Subject key identifier: 5A:0A:21:12:5D:3D:D0:E1:F7:C4:2D:37:C9:2D:82:CA:CA:7A:5D:E0 Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft Manifest number: 0513 Signing time: Fri 18 Jul 2025 23:59:22 +0000 Manifest this update: Fri 18 Jul 2025 23:59:22 +0000 Manifest next update: Fri 25 Jul 2025 23:59:22 +0000 Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: 0qa6ix26I+OCkC6UF3XV9lZ3rbyKm0dyxcrWYAoYD50=) 2: 4FE459C8B97211EFA7B7E47DC4F9AE02.roa (hash: m7WV1VKI7ClZpgbpWthM6Ip2WNf7bXuqABVjburQENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Validity Not Before: Jul 18 23:59:22 2025 GMT Not After : Jul 25 23:59:22 2025 GMT Subject: CN=687adfda-61a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:d8:db:b9:6f:5a:ac:4e:87:e4:aa:1f:66: 75:d7:96:e3:fa:c4:5c:45:b6:90:a5:b4:58:66:e1: 40:f2:a1:df:4c:5b:b1:02:15:35:72:74:6d:75:0c: d1:92:89:8f:74:4f:12:36:43:84:e2:78:88:2b:3a: 45:5b:4c:7a:f4:10:76:22:66:ca:47:66:63:40:ef: 89:53:ca:fb:54:43:82:ca:ba:db:14:1e:11:0b:ba: 4d:aa:17:5f:ec:29:2e:48:be:dd:87:f4:9c:f4:e3: 19:5b:19:aa:0a:4a:72:4e:72:39:a2:93:94:17:eb: 9b:c0:d3:82:1f:68:c6:43:ff:5e:f7:7b:f5:df:fc: 33:7a:cf:f1:ac:6b:42:25:b3:cc:d4:38:95:4e:ad: f0:86:62:d5:a2:83:ec:9a:c2:20:58:c3:9c:12:4a: 21:b6:33:27:9f:b5:17:7c:29:cb:1c:54:37:89:49: dd:47:2f:ad:47:03:eb:96:45:58:28:12:39:12:a0: 53:42:cc:57:04:10:ea:8a:d9:47:2b:55:01:34:6a: ba:b9:50:f2:a5:3a:84:bf:ec:57:b3:8d:79:2e:eb: e9:9d:b1:f7:2b:e2:c5:e3:1d:86:92:62:ef:29:42: df:7f:15:a8:99:d3:8c:b3:6d:ff:c8:59:a8:de:a0: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:21:12:5D:3D:D0:E1:F7:C4:2D:37:C9:2D:82:CA:CA:7A:5D:E0 X509v3 Authority Key Identifier: keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:43:c1:41:9c:46:13:50:a2:66:d7:3f:84:19:cb:dc:95:9e: f9:6b:de:ca:29:7d:b8:19:58:5f:77:9b:cc:23:41:e7:00:0a: c8:77:c1:63:60:80:2e:7c:e1:be:6e:17:2c:a4:b4:b0:20:48: b8:42:90:fd:5f:b5:12:80:6d:23:bd:c4:95:34:93:fc:7d:9b: da:9c:e5:d8:d3:d8:72:ec:4a:4a:86:f1:8b:57:f7:33:59:64: d7:71:b4:9f:82:11:73:b1:4a:85:2a:91:d8:e3:4d:f0:d5:d3: 62:44:1a:67:81:9d:a1:97:24:34:2e:99:07:82:31:b3:82:84: d5:74:f0:37:ed:33:85:04:b2:17:75:62:8e:93:e4:cd:67:74: 68:05:f7:4c:31:09:cf:e6:cd:0e:a0:01:4c:a5:37:dc:33:59: 2e:72:bc:b4:9a:70:65:66:c5:b9:b1:b4:82:cd:74:5e:28:44: c3:e2:c8:ae:21:a9:7a:6e:45:1c:62:78:39:69:a7:70:39:ac: ae:4f:27:2d:81:ff:0d:f7:a9:cc:d8:46:20:72:4b:41:bf:a6: ee:72:db:08:59:aa:48:86:84:e5:2b:b1:1b:40:48:a2:be:4b: 22:26:f9:45:07:6d:ed:8e:e7:45:bc:57:fb:ad:5d:b4:0c:98: f1:9c:b1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzQjAxMTAvBgNVBAUTKDAxOTgzMTExRkQ2RjBCMjdFMjQwNDYzQjY4QTdBMTk4 NDVDN0JCMEEwHhcNMjUwNzE4MjM1OTIyWhcNMjUwNzI1MjM1OTIyWjAYMRYwFAYD VQQDEw02ODdhZGZkYS02MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+TY27lvWqxOh+SqH2Z115bj+sRcRbaQpbRYZuFA8qHfTFuxAhU1cnRtdQzR komPdE8SNkOE4niIKzpFW0x69BB2ImbKR2ZjQO+JU8r7VEOCyrrbFB4RC7pNqhdf 7CkuSL7dh/Sc9OMZWxmqCkpyTnI5opOUF+ubwNOCH2jGQ/9e93v13/wzes/xrGtC JbPM1DiVTq3whmLVooPsmsIgWMOcEkohtjMnn7UXfCnLHFQ3iUndRy+tRwPrlkVY KBI5EqBTQsxXBBDqitlHK1UBNGq6uVDypTqEv+xXs415LuvpnbH3K+LF4x2GkmLv KULffxWomdOMs23/yFmo3qANawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoKIRJd PdDh98QtN8ktgsrKel3gMB8GA1UdIwQYMBaAFAGYMRH9bwsn4kBGO2inoZhFx7sK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNCMC8xMzhFMTQzMDE0 NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5ZmlRRVk3YUtlaG1FWEh1 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaZ3hFZjF2Q3lmaVFFWTdhS2VobUVYSHV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNCMC8xMzhFMTQzMDE0NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5 ZmlRRVk3YUtlaG1FWEh1d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABQ8FBnEYTUKJm1z+EGcvclZ75a97KKX24GVhfd5vMI0HnAArId8Fj YIAufOG+bhcspLSwIEi4QpD9X7USgG0jvcSVNJP8fZvanOXY09hy7EpKhvGLV/cz WWTXcbSfghFzsUqFKpHY403w1dNiRBpngZ2hlyQ0LpkHgjGzgoTVdPA37TOFBLIX dWKOk+TNZ3RoBfdMMQnP5s0OoAFMpTfcM1kucry0mnBlZsW5sbSCzXReKETD4siu Ial6bkUcYng5aadwOayuTyctgf8N96nM2EYgcktBv6buctsIWapIhoTlK7EbQEii vksiJvlFB23tjudFvFf7rV20DJjxnLHu -----END CERTIFICATE-----Generated at Sun Jul 20 01:56:12 2025 by rpki-client