$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: 4AltoCF2MBfFrYu+411miX23Bk2YJE0j9OGaNn9EDf0= Subject key identifier: 9C:65:CF:EB:F7:DB:40:8C:CF:58:6D:DD:8D:BB:02:D4:0E:24:9B:18 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C6B Signing time: Fri 18 Jul 2025 16:18:36 +0000 Manifest this update: Fri 18 Jul 2025 16:18:36 +0000 Manifest next update: Fri 25 Jul 2025 16:18:36 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: AnWs0HX8o+00hVzSSw2SHwt4Ra2B4df0ZCJlITxWOrQ=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7302 (0x1c86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Jul 18 16:18:36 2025 GMT Not After : Jul 25 16:18:36 2025 GMT Subject: CN=687a73dc-3f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:b1:3a:b7:5b:cf:b8:93:f2:09:a5:6f:0e: 2a:a4:20:19:a0:d6:99:c2:eb:d7:36:73:67:57:a6: 86:60:85:82:7e:52:b8:32:0d:55:45:fe:b4:7f:9a: 3a:a4:01:ac:08:01:2b:c9:68:06:f6:b3:69:32:90: c0:d3:92:ab:55:c7:32:e0:fd:ee:86:90:06:c2:62: 31:bc:86:54:56:80:01:bf:43:1e:49:e4:09:a5:55: 62:e1:e0:e0:f4:ac:aa:09:fa:fe:58:11:02:90:6d: 53:4f:6c:43:0f:42:df:ea:db:db:26:28:8b:59:61: d0:bf:d1:98:a7:41:a4:26:93:4d:b6:f1:59:d1:9c: 22:96:2b:91:da:f0:ef:c1:b0:9a:7f:be:83:f9:76: 68:dd:02:16:89:8e:84:b6:a5:e6:3b:10:60:20:17: e6:36:ed:73:b8:e8:75:c8:15:26:7d:1a:ed:32:d4: 82:3c:69:f3:96:83:7c:35:8d:cf:7c:3c:04:33:96: f0:6c:83:e8:0c:4c:99:39:60:d9:5d:c8:6b:e2:86: 72:00:33:5f:0c:96:29:84:c0:1c:b7:db:08:49:cc: 79:90:7f:75:25:85:d2:ce:b3:42:e8:4c:f6:e7:df: 81:33:33:9e:68:8f:0d:cb:0c:4e:ff:58:59:40:74: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:65:CF:EB:F7:DB:40:8C:CF:58:6D:DD:8D:BB:02:D4:0E:24:9B:18 X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:69:0d:36:1b:ee:cb:55:f9:d3:9a:87:19:f3:74:7a:6c:81: 1d:84:fb:57:6b:45:5b:3a:80:a9:ff:37:48:23:0b:1e:d1:c8: 8a:5d:c5:19:05:dc:d4:c7:03:74:75:f7:1b:c7:df:d2:8b:f2: 9a:2c:9c:20:12:29:7b:0c:a8:ec:3e:b0:82:ec:7b:95:cd:d5: 39:a1:0e:64:e6:de:4b:9a:b2:f8:b9:69:9d:96:c4:fc:0c:44: 35:57:df:d7:c2:60:ea:be:21:41:a1:5d:e2:13:7d:de:65:d0: 1b:2c:1e:d2:64:07:32:4f:be:d6:1c:d2:00:37:f8:c1:5c:38: 53:fb:a8:57:51:07:b2:52:21:ac:f6:8e:b8:6f:a7:94:d8:12: 25:52:16:d0:76:32:c4:f1:80:63:e0:9c:19:2f:02:91:82:2a: 17:33:6e:70:c0:17:bb:2a:7b:99:69:47:35:b0:69:58:e4:d4: 40:2b:ce:3c:7d:ae:55:11:a6:7c:ec:88:bd:7b:e9:97:7d:2f: fd:d0:1b:91:dc:d0:62:d0:5d:d3:02:03:c6:08:1c:f2:ef:91: 5c:56:16:fe:50:9e:c6:fe:7c:80:12:5d:30:cd:6b:5d:82:be: d7:da:f4:37:f1:09:8a:ce:e2:88:ed:a4:76:c1:e6:f1:9c:11: 3e:2d:09:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwNzE4MTYxODM2WhcNMjUwNzI1MTYxODM2WjAYMRYwFAYD VQQDEw02ODdhNzNkYy0zZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQaxOrdbz7iT8gmlbw4qpCAZoNaZwuvXNnNnV6aGYIWCflK4Mg1VRf60f5o6 pAGsCAEryWgG9rNpMpDA05KrVccy4P3uhpAGwmIxvIZUVoABv0MeSeQJpVVi4eDg 9KyqCfr+WBECkG1TT2xDD0Lf6tvbJiiLWWHQv9GYp0GkJpNNtvFZ0ZwiliuR2vDv wbCaf76D+XZo3QIWiY6EtqXmOxBgIBfmNu1zuOh1yBUmfRrtMtSCPGnzloN8NY3P fDwEM5bwbIPoDEyZOWDZXchr4oZyADNfDJYphMAct9sIScx5kH91JYXSzrNC6Ez2 59+BMzOeaI8NywxO/1hZQHRWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxlz+v3 20CMz1ht3Y27AtQOJJsYMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkaQ02G+7LVfnTmocZ83R6bIEdhPtXa0VbOoCp/zdIIwse0ciKXcUZ BdzUxwN0dfcbx9/Si/KaLJwgEil7DKjsPrCC7HuVzdU5oQ5k5t5LmrL4uWmdlsT8 DEQ1V9/XwmDqviFBoV3iE33eZdAbLB7SZAcyT77WHNIAN/jBXDhT+6hXUQeyUiGs 9o64b6eU2BIlUhbQdjLE8YBj4JwZLwKRgioXM25wwBe7KnuZaUc1sGlY5NRAK848 fa5VEaZ87Ii9e+mXfS/90BuR3NBi0F3TAgPGCBzy75FcVhb+UJ7G/nyAEl0wzWtd gr7X2vQ38QmKzuKI7aR2webxnBE+LQkM -----END CERTIFICATE-----Generated at Sat Jul 19 20:29:57 2025 by rpki-client