$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: Hvs5ieeGPSjhc5yf96p9Wu0TN1aQGovpU4PPlFOSdXM= Subject key identifier: 6F:9B:D8:76:D8:C2:52:FD:DE:9C:E6:D7:4D:11:8A:78:73:6C:68:2D Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01F1 Signing time: Sat 19 Jul 2025 02:42:32 +0000 Manifest this update: Sat 19 Jul 2025 02:42:32 +0000 Manifest next update: Sat 26 Jul 2025 02:42:32 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: SdbrjlOEW1ZHHeDDbUcwbkcM5/O97tg/g4HpA9FhE7I=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Jul 19 02:42:32 2025 GMT Not After : Jul 26 02:42:32 2025 GMT Subject: CN=687b0618-d1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:91:2d:45:3b:ef:33:fa:09:2f:b0:69:fa: 05:60:fb:6c:df:63:75:1a:3a:30:64:bc:e8:e2:95: a1:57:8c:d5:9a:a6:a4:5b:35:a9:4e:98:7b:df:b4: 18:c2:0e:a0:02:68:aa:5f:73:41:47:46:dc:17:34: 45:61:d7:d9:86:df:57:0d:aa:2d:c1:c5:ad:4e:12: 5d:46:67:84:5c:f5:5f:ce:c8:e1:a2:9a:5c:e3:cd: df:07:7e:ec:53:64:ea:7a:16:44:0b:dd:4e:b9:36: 9c:97:a1:e0:31:a6:eb:f9:af:80:32:30:40:bb:6c: eb:6f:f6:a5:ab:bf:39:3d:0d:a3:da:b1:83:27:50: 3e:11:2a:d6:5e:50:d0:b6:79:3d:8f:28:a0:2c:64: a1:18:d1:9f:1d:e5:58:90:5d:d1:55:09:b4:24:3a: 63:bb:fb:fa:13:8e:d7:79:5c:8a:eb:9a:b2:3a:fc: 9c:4c:1a:00:ab:23:0a:56:23:c8:79:4b:da:8b:c5: a7:36:c2:b7:df:19:9e:0c:58:98:41:d3:81:47:0c: 48:3f:81:de:c9:fa:b3:f5:20:3e:cd:62:38:6d:55: e0:ee:93:0e:22:43:1d:b8:61:05:49:da:85:bf:8e: b4:2d:4b:bd:14:14:ab:7a:a4:09:bf:0e:ee:ee:76: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9B:D8:76:D8:C2:52:FD:DE:9C:E6:D7:4D:11:8A:78:73:6C:68:2D X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b4:c4:c6:24:92:a6:4e:dc:d7:d0:c2:4a:a3:96:47:e2:23: 7e:ba:65:85:ad:27:ac:d9:df:be:53:d3:8a:56:37:65:ee:be: 68:a4:d6:39:c2:05:9d:fc:8e:28:b1:76:96:7c:3a:07:9c:51: e6:e9:13:c2:0d:b4:11:8d:17:6c:9e:f9:93:71:31:9d:e6:a3: c5:20:43:2e:53:49:ab:8f:b5:8e:e6:01:01:15:3d:50:5d:f7: 65:72:1c:fb:fd:82:f3:92:e5:51:25:8b:bc:69:54:f4:6a:b5: 6b:29:6e:51:fa:9c:73:41:90:a2:b7:54:1f:37:01:db:a2:4b: 1f:65:9b:18:27:b5:f6:9c:e1:ba:d4:e3:5a:ae:19:1b:be:1c: de:38:cc:1a:ad:c6:84:45:d9:51:5d:8f:84:f7:70:2c:f8:ac: e7:de:e2:54:26:58:c3:4c:5e:d2:7c:6d:55:0c:d1:5d:8b:16: 85:15:d9:42:01:b2:03:73:fc:0e:30:65:2a:6b:b4:38:83:0f: 27:67:b6:35:f8:fe:9f:78:53:86:1a:a9:9b:1f:7e:9a:6d:8a: fd:fb:13:2f:7d:7f:a6:72:b9:9b:d4:7f:3e:76:64:f2:4d:2c: 10:2b:25:af:ae:7c:2b:f3:d2:dc:25:ea:e5:96:b3:e9:8e:17: fc:26:b7:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwNzE5MDI0MjMyWhcNMjUwNzI2MDI0MjMyWjAYMRYwFAYD VQQDEw02ODdiMDYxOC1kMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6uRLUU77zP6CS+wafoFYPts32N1GjowZLzo4pWhV4zVmqakWzWpTph737QY wg6gAmiqX3NBR0bcFzRFYdfZht9XDaotwcWtThJdRmeEXPVfzsjhoppc483fB37s U2TqehZEC91OuTacl6HgMabr+a+AMjBAu2zrb/alq785PQ2j2rGDJ1A+ESrWXlDQ tnk9jyigLGShGNGfHeVYkF3RVQm0JDpju/v6E47XeVyK65qyOvycTBoAqyMKViPI eUvai8WnNsK33xmeDFiYQdOBRwxIP4Heyfqz9SA+zWI4bVXg7pMOIkMduGEFSdqF v460LUu9FBSreqQJvw7u7nYuxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+b2HbY wlL93pzm100RinhzbGgtMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPtMTGJJKmTtzX0MJKo5ZH4iN+umWFrSes2d++U9OKVjdl7r5opNY5 wgWd/I4osXaWfDoHnFHm6RPCDbQRjRdsnvmTcTGd5qPFIEMuU0mrj7WO5gEBFT1Q Xfdlchz7/YLzkuVRJYu8aVT0arVrKW5R+pxzQZCit1QfNwHboksfZZsYJ7X2nOG6 1ONarhkbvhzeOMwarcaERdlRXY+E93As+Kzn3uJUJljDTF7SfG1VDNFdixaFFdlC AbIDc/wOMGUqa7Q4gw8nZ7Y1+P6feFOGGqmbH36abYr9+xMvfX+mcrmb1H8+dmTy TSwQKyWvrnwr89LcJerllrPpjhf8JrfZ -----END CERTIFICATE-----Generated at Sun Jul 20 06:13:40 2025 by rpki-client