$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: vI5cpRBGRn3uql/4keEh3LRwzRf0XKMGgk5D1e8FvZg= Subject key identifier: 78:3F:3B:5B:F6:18:D3:FB:58:3C:29:7B:B9:85:AD:0C:92:C7:46:C8 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: F7 Signing time: Thu 03 Apr 2025 04:32:07 +0000 Manifest this update: Thu 03 Apr 2025 04:32:06 +0000 Manifest next update: Thu 10 Apr 2025 04:32:06 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: 5b5JtanGBF/r2oAWLmlhXjOIt3+OIFBlqtIlLnmZSBc=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE Validity Not Before: Apr 3 04:32:06 2025 GMT Not After : Apr 10 04:32:06 2025 GMT Subject: CN=67ee0f46-5d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:06:67:1b:9f:ca:2e:11:96:6e:50:bf:33:83: 45:22:b2:3a:67:ed:35:e4:40:c3:0a:85:72:65:d4: 61:ab:59:68:3b:de:d4:a7:7c:bc:b2:ac:87:30:cc: 1b:be:ca:31:99:04:e0:d3:27:a0:4c:4a:63:3b:c3: 3f:7e:73:06:1e:50:20:00:5f:11:51:8d:47:0a:c1: 9b:42:9e:2a:35:74:c3:14:99:11:16:23:2d:d2:a6: c9:77:2e:99:59:ad:7c:45:20:fb:01:b8:fc:74:a8: 15:ad:9a:68:3c:2b:57:91:f3:62:77:c7:a5:87:b9: 12:e1:1a:89:c6:3c:91:79:03:28:93:1e:03:d0:da: 14:97:78:f2:6c:39:0c:77:48:c3:4b:91:84:09:9e: 46:3c:7d:2f:ad:76:e6:b5:f0:5a:cd:62:ce:32:39: fc:a9:de:bb:26:8b:90:21:39:34:b6:3f:8f:69:dc: 34:b1:69:47:a0:40:85:a0:4a:67:b0:b8:51:e0:d4: 4c:d0:cc:79:2c:2d:3c:8d:1e:33:3d:8f:b3:63:01: df:a8:af:e2:ab:0a:47:20:4b:7c:61:5f:53:01:c8: 8c:06:e3:ad:cd:2a:40:20:d7:b9:d5:ea:2d:12:80: 0f:cc:0b:23:42:2a:83:8e:12:07:ab:44:cc:06:54: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3F:3B:5B:F6:18:D3:FB:58:3C:29:7B:B9:85:AD:0C:92:C7:46:C8 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:18:8d:eb:c8:c2:32:e3:4b:e6:c7:e8:7b:4a:94:ba:b7:fc: 02:19:1b:67:d7:2c:ea:49:ea:6a:26:34:78:34:05:77:cc:0b: ab:90:65:aa:55:95:b5:54:4d:dc:6f:36:81:dd:17:5b:43:2c: 6a:5a:61:d5:03:ca:30:05:ff:3b:3c:c5:e6:f5:45:6e:8e:cd: f8:db:40:03:61:c6:8a:03:cb:46:bd:6f:44:88:dd:d7:e9:81: 0c:fb:29:6d:81:08:c0:e3:e9:0b:b5:bf:30:3e:db:67:11:6b: 09:e0:b9:31:4a:24:a2:b8:ee:a7:a2:ba:5a:78:6e:b3:8c:6b: b8:87:43:7f:dd:8c:6d:a1:7e:a1:e6:8a:67:d7:d6:f9:51:a1: 21:c4:2c:ae:b9:b7:68:a8:34:3f:50:70:2c:84:6f:70:f4:32: 96:ae:82:ad:04:4d:a4:53:c7:cd:8f:a1:01:a4:91:7d:db:c6: 6a:3f:ed:04:21:c3:03:77:04:d9:22:c5:9d:18:78:ae:aa:d8: 39:45:7b:97:dc:a2:cc:ac:1d:e0:5a:52:31:5e:83:13:7b:51: 6d:6b:d5:d0:25:83:a4:a8:3e:48:fa:1a:5c:15:4c:97:25:71: bd:30:d7:22:01:c0:ca:45:9a:28:6c:b3:d4:c9:2e:a3:dd:f3: 10:cd:f3:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjUwNDAzMDQzMjA2WhcNMjUwNDEwMDQzMjA2WjAYMRYwFAYD VQQDEw02N2VlMGY0Ni01ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QZnG5/KLhGWblC/M4NFIrI6Z+015EDDCoVyZdRhq1loO97Up3y8sqyHMMwb vsoxmQTg0yegTEpjO8M/fnMGHlAgAF8RUY1HCsGbQp4qNXTDFJkRFiMt0qbJdy6Z Wa18RSD7Abj8dKgVrZpoPCtXkfNid8elh7kS4RqJxjyReQMokx4D0NoUl3jybDkM d0jDS5GECZ5GPH0vrXbmtfBazWLOMjn8qd67JouQITk0tj+Padw0sWlHoECFoEpn sLhR4NRM0Mx5LC08jR4zPY+zYwHfqK/iqwpHIEt8YV9TAciMBuOtzSpAINe51eot EoAPzAsjQiqDjhIHq0TMBlTt4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg/O1v2 GNP7WDwpe7mFrQySx0bIMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhGI3ryMIy40vmx+h7SpS6t/wCGRtn1yzqSepqJjR4NAV3zAurkGWq VZW1VE3cbzaB3RdbQyxqWmHVA8owBf87PMXm9UVujs3420ADYcaKA8tGvW9EiN3X 6YEM+yltgQjA4+kLtb8wPttnEWsJ4LkxSiSiuO6norpaeG6zjGu4h0N/3YxtoX6h 5opn19b5UaEhxCyuubdoqDQ/UHAshG9w9DKWroKtBE2kU8fNj6EBpJF928ZqP+0E IcMDdwTZIsWdGHiuqtg5RXuX3KLMrB3gWlIxXoMTe1Fta9XQJYOkqD5I+hpcFUyX JXG9MNciAcDKRZoobLPUyS6j3fMQzfOM -----END CERTIFICATE-----Generated at Fri Apr 4 18:44:12 2025 by rpki-client