$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json) Hash identifier: QV+kil6+iqdBWu3QJCswmDhTtfQc5Fj2juGlYqnsnMU= Subject key identifier: 17:48:6F:C2:67:E6:AD:4A:F3:3A:6E:83:E3:F6:E4:66:49:0E:2D:1A Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft Manifest number: 069D Signing time: Fri 30 May 2025 23:57:40 +0000 Manifest this update: Fri 30 May 2025 23:57:40 +0000 Manifest next update: Fri 06 Jun 2025 23:57:40 +0000 Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: M/hz+lb02xqujuTRU6DfkkKs2cFh53KozGJmREDGzS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Validity Not Before: May 30 23:57:40 2025 GMT Not After : Jun 6 23:57:40 2025 GMT Subject: CN=683a45f4-f027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:58:1a:9d:5d:31:77:11:22:8b:ef:97:4f: 43:e7:0c:9b:02:84:50:89:c9:8e:25:9a:3f:e3:d4: 79:be:84:11:18:ac:78:86:14:c0:4e:91:7f:4b:10: d3:b5:7b:11:38:84:26:e9:b2:b8:73:ed:d8:d4:77: 56:81:58:7b:16:9d:8d:9b:1f:e4:5a:57:6a:d3:7c: 44:3d:d5:b2:81:65:a9:44:09:fd:9e:5a:4b:56:04: 47:ff:42:9f:2b:f1:ba:3b:07:aa:b4:7e:ec:51:6b: f5:c0:ed:1a:f1:f3:0b:87:6b:25:73:5c:01:3b:90: 69:bc:ab:07:b4:fc:b2:12:4d:89:8f:91:b8:b2:8d: 49:82:f1:1a:48:54:8c:9e:70:7f:7d:50:96:e6:a2: 15:ac:d1:75:40:c5:79:a4:4f:9a:f9:b1:0a:27:a2: 85:4e:d8:22:78:3c:30:58:c3:d7:7e:2b:a2:45:5b: 90:1b:da:20:af:b1:5b:b1:d7:92:64:0d:e6:49:42: 0d:6d:ca:5c:a3:9d:c3:8f:6c:92:8a:ba:a4:93:68: 24:63:a6:64:bd:e6:c3:1d:93:d1:05:7d:05:f4:3f: b9:80:7d:97:74:46:0a:18:f0:33:c7:8e:1f:fd:31: 04:9c:29:9b:ad:bb:e6:64:03:3c:9e:44:d3:41:b1: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:48:6F:C2:67:E6:AD:4A:F3:3A:6E:83:E3:F6:E4:66:49:0E:2D:1A X509v3 Authority Key Identifier: keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:95:fe:c9:54:44:f0:bf:78:c0:54:5a:7d:8f:6c:5a:fa:bd: 66:98:9e:69:bb:36:4e:d0:8d:23:3a:7d:9d:e6:74:f1:d5:e1: 51:77:39:81:f4:47:d1:b0:3b:65:28:c3:0b:0a:3a:33:ad:ad: cc:74:a3:0d:1e:eb:3a:72:68:0e:b7:16:de:cf:d4:b6:09:a5: 34:19:19:6b:ba:68:1f:2f:3d:4e:f7:ef:07:a3:2e:5f:25:85: c9:f1:34:b3:82:30:e0:06:4b:0a:c8:af:6c:a8:d5:6c:67:e3: 50:0e:83:d9:96:5a:45:75:d6:a6:64:d1:db:68:16:7d:a5:3a: 1e:ba:7e:d6:52:58:9c:87:8e:65:f8:2f:93:8c:a9:d0:3e:19: bf:38:ea:bb:67:be:58:3f:81:1e:30:43:1a:fd:21:1b:be:c4: cc:ab:91:69:83:1d:cf:0a:70:76:54:ca:11:da:4b:79:14:2a: fc:a2:06:ba:45:a4:cd:f6:a5:ae:dc:ee:fe:ec:a6:47:ef:9d: 6b:97:6c:47:aa:b5:04:b3:e6:e2:5f:11:0b:c0:ef:08:df:f6: 11:75:30:61:08:ab:0a:14:51:19:c7:72:e3:8d:a0:ed:1c:ca: fb:53:8b:4f:af:bd:9a:64:ec:4a:87:9b:e4:9c:c1:4d:6e:ff: e5:de:97:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1 OERGMDVBOEEwHhcNMjUwNTMwMjM1NzQwWhcNMjUwNjA2MjM1NzQwWjAYMRYwFAYD VQQDEw02ODNhNDVmNC1mMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wVYGp1dMXcRIovvl09D5wybAoRQicmOJZo/49R5voQRGKx4hhTATpF/SxDT tXsROIQm6bK4c+3Y1HdWgVh7Fp2Nmx/kWldq03xEPdWygWWpRAn9nlpLVgRH/0Kf K/G6OweqtH7sUWv1wO0a8fMLh2slc1wBO5BpvKsHtPyyEk2Jj5G4so1JgvEaSFSM nnB/fVCW5qIVrNF1QMV5pE+a+bEKJ6KFTtgieDwwWMPXfiuiRVuQG9ogr7FbsdeS ZA3mSUINbcpco53Dj2ySirqkk2gkY6ZkvebDHZPRBX0F9D+5gH2XdEYKGPAzx44f /TEEnCmbrbvmZAM8nkTTQbEhWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdIb8Jn 5q1K8zpug+P25GZJDi0aMB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXlf7JVETwv3jAVFp9j2xa+r1mmJ5puzZO0I0jOn2d5nTx1eFRdzmB 9EfRsDtlKMMLCjozra3MdKMNHus6cmgOtxbez9S2CaU0GRlrumgfLz1O9+8Hoy5f JYXJ8TSzgjDgBksKyK9sqNVsZ+NQDoPZllpFddamZNHbaBZ9pToeun7WUlich45l +C+TjKnQPhm/OOq7Z75YP4EeMEMa/SEbvsTMq5Fpgx3PCnB2VMoR2kt5FCr8oga6 RaTN9qWu3O7+7KZH751rl2xHqrUEs+biXxELwO8I3/YRdTBhCKsKFFEZx3LjjaDt HMr7U4tPr72aZOxKh5vknMFNbv/l3pcl -----END CERTIFICATE-----Generated at Sat May 31 17:28:52 2025 by rpki-client