$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: Lz2af6RvTFDXFVemmRvULC5dIFPTcWxiTR/Y+oe6YCA= Subject key identifier: F8:AC:9C:B4:35:B3:28:33:45:9D:5C:D0:8A:91:D9:04:21:6D:6D:B4 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C54 Signing time: Mon 02 Jun 2025 16:22:43 +0000 Manifest this update: Mon 02 Jun 2025 16:22:43 +0000 Manifest next update: Mon 09 Jun 2025 16:22:43 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: B34Zui+857SZpjlIn7HnfjX0sgDbY7Bzv/HMZS80wUk=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7279 (0x1c6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Jun 2 16:22:43 2025 GMT Not After : Jun 9 16:22:43 2025 GMT Subject: CN=683dcfd3-28fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:dc:fa:60:e9:74:ce:0c:2e:c3:41:6e:75: bc:69:96:dd:c5:1f:0c:41:e5:0e:ae:4b:f9:b6:15: 71:4b:ac:ec:05:0b:12:2f:01:ea:a5:35:2d:ef:a0: 1a:d7:77:d7:15:2a:71:67:af:b3:bc:b3:df:65:bd: 32:9e:ab:a3:91:45:24:75:00:8e:48:b9:36:ed:b5: e3:57:18:eb:0b:45:72:6e:37:8e:22:63:a0:cf:ea: 32:1e:63:47:f2:f2:98:68:8c:24:35:6c:6a:5c:29: ec:e5:20:11:34:c9:6a:da:4e:af:da:fc:4e:bd:19: e3:9d:1c:df:0f:3c:0f:62:7d:ca:b8:87:a1:a4:a7: f6:21:98:ad:78:e1:0c:42:0b:0e:43:0c:cc:fa:f0: fa:4b:ca:52:a5:bd:15:70:61:88:25:ce:38:ff:a6: 7d:e9:5d:44:29:2e:b5:a0:ef:b9:de:4e:a3:ea:d1: 45:2e:97:f9:57:47:61:45:4f:12:c4:4a:e8:53:f4: 86:a5:57:2e:9f:16:08:39:72:ed:66:c4:ad:af:fa: aa:42:2d:11:5e:ef:b5:95:52:96:d5:47:fc:f4:c8: 0a:bd:ca:15:b9:e5:8e:7b:b3:8e:2e:ee:1e:0d:9d: 4a:a6:80:06:3a:06:ae:92:83:e1:19:5d:50:b4:01: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AC:9C:B4:35:B3:28:33:45:9D:5C:D0:8A:91:D9:04:21:6D:6D:B4 X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:dd:63:12:af:fa:91:24:38:f2:85:65:b3:73:3a:d5:87:30: f0:03:5e:2a:9d:f0:e2:f4:1f:ba:44:7b:82:df:53:e5:01:a2: 89:5c:91:8e:63:87:e7:67:e5:02:5a:51:45:33:0a:5f:ff:4e: 95:2d:cc:7d:1f:7b:0a:af:a0:b2:e6:64:ae:d5:c6:50:53:f1: bd:6c:e5:b0:ee:31:3a:e5:8d:d2:f8:8c:6a:f9:b5:17:e3:33: 5d:87:c8:8a:89:e3:16:88:85:3a:90:25:49:4e:d3:70:e8:e5: 87:1e:be:66:22:0d:b5:6c:d0:50:05:e9:3d:3c:98:4e:6b:d5: 02:63:4c:2f:85:64:fa:56:76:12:1b:7d:b4:82:1d:46:ab:c3: 76:d3:35:62:63:ad:51:4a:53:c8:74:b0:0c:db:7f:37:42:3a: 71:79:89:d5:a9:09:3a:1c:80:53:d0:83:5c:1c:53:5e:b7:e9: 8f:d7:07:0c:0d:a4:9d:aa:95:a6:dd:06:13:4e:13:bc:28:c8: 12:b8:9d:a1:85:e9:dc:68:7a:4f:04:16:a4:f9:8b:5b:70:5f: 5f:a0:8b:cd:c0:65:3d:4d:87:83:60:55:90:56:52:c5:9c:98: 4f:37:36:b3:e5:70:d7:17:9e:5a:04:b6:33:90:a5:d8:42:d5: a7:56:3f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwNjAyMTYyMjQzWhcNMjUwNjA5MTYyMjQzWjAYMRYwFAYD VQQDEw02ODNkY2ZkMy0yOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IPc+mDpdM4MLsNBbnW8aZbdxR8MQeUOrkv5thVxS6zsBQsSLwHqpTUt76Aa 13fXFSpxZ6+zvLPfZb0ynqujkUUkdQCOSLk27bXjVxjrC0VybjeOImOgz+oyHmNH 8vKYaIwkNWxqXCns5SARNMlq2k6v2vxOvRnjnRzfDzwPYn3KuIehpKf2IZiteOEM QgsOQwzM+vD6S8pSpb0VcGGIJc44/6Z96V1EKS61oO+53k6j6tFFLpf5V0dhRU8S xEroU/SGpVcunxYIOXLtZsStr/qqQi0RXu+1lVKW1Uf89MgKvcoVueWOe7OOLu4e DZ1KpoAGOgaukoPhGV1QtAGvVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPisnLQ1 sygzRZ1c0IqR2QQhbW20MB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/3WMSr/qRJDjyhWWzczrVhzDwA14qnfDi9B+6RHuC31PlAaKJXJGO Y4fnZ+UCWlFFMwpf/06VLcx9H3sKr6Cy5mSu1cZQU/G9bOWw7jE65Y3S+Ixq+bUX 4zNdh8iKieMWiIU6kCVJTtNw6OWHHr5mIg21bNBQBek9PJhOa9UCY0wvhWT6VnYS G320gh1Gq8N20zViY61RSlPIdLAM2383QjpxeYnVqQk6HIBT0INcHFNet+mP1wcM DaSdqpWm3QYTThO8KMgSuJ2hhencaHpPBBak+YtbcF9foIvNwGU9TYeDYFWQVlLF nJhPNzaz5XDXF55aBLYzkKXYQtWnVj+A -----END CERTIFICATE-----Generated at Mon Jun 2 21:51:04 2025 by rpki-client