$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: 0a/x0YJRhXKOnCiLceuARGBWreERUEPq5BmqM66oblw= Subject key identifier: 5C:FF:72:3C:FD:8D:B6:41:CB:5B:DE:09:E4:D9:46:CC:A7:EE:7B:BF Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1CA0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C85 Signing time: Sat 06 Sep 2025 16:14:53 +0000 Manifest this update: Sat 06 Sep 2025 16:14:53 +0000 Manifest next update: Sat 13 Sep 2025 16:14:53 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: hBPtdHdtK7vDKNIIk07my9SCwVqNmSZIuUw2BKVD8YY=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7328 (0x1ca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Sep 6 16:14:53 2025 GMT Not After : Sep 13 16:14:53 2025 GMT Subject: CN=68bc5dfd-96f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:ad:a8:89:cb:4b:f3:e4:35:56:a3:31:99: 32:4b:c6:39:9a:80:67:de:7e:c5:23:65:d4:3b:af: 86:ad:d2:ff:2c:37:a9:e6:90:36:a4:af:66:64:f2: 19:69:4e:44:2a:5e:ac:34:33:9e:ed:12:1e:c5:22: 11:3d:84:77:a6:f2:3f:16:ef:39:85:88:83:7f:01: 9c:7c:f8:60:b3:fe:ac:46:a8:d1:a5:2c:d4:2c:21: 1c:74:49:8e:99:ae:e7:3e:3f:c6:68:c6:92:88:db: 91:61:71:ed:52:86:48:82:80:a4:0b:92:1d:3d:f3: 3b:9b:f5:a7:8e:70:f9:f0:03:b7:08:df:28:d6:c1: 9c:c4:0e:2f:40:09:ba:0c:61:2c:30:f3:75:17:c3: 30:5b:49:f5:42:13:27:19:62:8e:60:df:71:50:12: 4b:cf:cf:f7:e3:05:d5:a7:83:60:2f:65:70:04:15: 4e:60:c7:88:1b:02:0d:d9:5f:ee:37:e0:49:4e:ef: 15:b7:d1:c6:12:7c:2d:77:44:94:35:37:66:0e:3b: ce:23:d7:11:3d:6e:9d:ff:03:94:4b:12:4e:38:7c: 6f:64:a2:3c:54:53:8e:8d:1f:ad:d0:a8:4c:ab:db: 28:fb:ad:01:41:7c:68:eb:91:cb:65:dd:25:84:2f: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:72:3C:FD:8D:B6:41:CB:5B:DE:09:E4:D9:46:CC:A7:EE:7B:BF X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9e:ba:3d:75:dc:90:e1:67:b9:51:31:ff:fd:33:17:57:52: 9a:02:6d:d9:59:a0:e2:73:68:de:b9:bc:6d:d3:e1:64:d1:70: f6:d5:45:82:83:93:f2:46:d1:7a:b4:5c:13:94:f5:e4:d2:cc: 92:ce:5d:d1:db:0e:cd:33:ef:1b:18:e3:f3:21:6e:76:07:f1: 2a:b3:6f:0e:43:ee:8b:85:ef:c4:f5:f4:d2:7d:5a:47:85:3a: 7f:c3:59:9d:e5:ec:2e:69:35:0d:13:0d:af:a7:34:fc:1f:9d: b5:69:8f:b0:e6:de:05:89:b8:29:e1:99:90:4c:1e:3e:2c:86: a5:ef:88:e3:28:3a:e1:35:82:d3:7e:cb:f1:bc:e1:c8:22:28: ad:be:22:f5:53:d3:52:8b:7c:ff:fb:b0:7d:bd:60:d3:d3:a3: 33:3c:f4:6b:e0:63:d6:b2:a7:58:2f:64:4b:98:3c:8c:50:16: 34:72:a7:9e:93:23:88:34:22:57:16:d8:0d:f1:e0:f8:84:14: ac:d8:41:b8:79:99:3a:8f:78:33:2f:ba:83:dc:f3:8f:1a:36: 60:5a:a9:45:e7:4c:bc:7b:c2:6f:2f:9a:51:09:e2:79:6f:e4: 80:f7:d7:92:2d:93:c3:29:c5:ec:74:a8:08:ef:b4:53:ae:b9: 70:79:dc:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwOTA2MTYxNDUzWhcNMjUwOTEzMTYxNDUzWjAYMRYwFAYD VQQDEw02OGJjNWRmZC05NmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylGtqInLS/PkNVajMZkyS8Y5moBn3n7FI2XUO6+GrdL/LDep5pA2pK9mZPIZ aU5EKl6sNDOe7RIexSIRPYR3pvI/Fu85hYiDfwGcfPhgs/6sRqjRpSzULCEcdEmO ma7nPj/GaMaSiNuRYXHtUoZIgoCkC5IdPfM7m/WnjnD58AO3CN8o1sGcxA4vQAm6 DGEsMPN1F8MwW0n1QhMnGWKOYN9xUBJLz8/34wXVp4NgL2VwBBVOYMeIGwIN2V/u N+BJTu8Vt9HGEnwtd0SUNTdmDjvOI9cRPW6d/wOUSxJOOHxvZKI8VFOOjR+t0KhM q9so+60BQXxo65HLZd0lhC8U+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz/cjz9 jbZBy1veCeTZRsyn7nu/MB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4nro9ddyQ4We5UTH//TMXV1KaAm3ZWaDic2jeubxt0+Fk0XD21UWC g5PyRtF6tFwTlPXk0sySzl3R2w7NM+8bGOPzIW52B/Eqs28OQ+6Lhe/E9fTSfVpH hTp/w1md5ewuaTUNEw2vpzT8H521aY+w5t4Fibgp4ZmQTB4+LIal74jjKDrhNYLT fsvxvOHIIiitviL1U9NSi3z/+7B9vWDT06MzPPRr4GPWsqdYL2RLmDyMUBY0cqee kyOINCJXFtgN8eD4hBSs2EG4eZk6j3gzL7qD3POPGjZgWqlF50y8e8JvL5pRCeJ5 b+SA99eSLZPDKcXsdKgI77RTrrlwedyI -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:12 2025 by rpki-client