$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: FoWtgfFiHq2PFw6IwZm0O6vZMjV7vYZw6PceLPLayuQ= Subject key identifier: FA:60:F9:8F:D1:C4:28:CD:9D:44:FB:F4:A2:09:08:E8:0F:88:AF:6C Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 0113 Signing time: Sat 31 May 2025 04:36:26 +0000 Manifest this update: Sat 31 May 2025 04:36:26 +0000 Manifest next update: Sat 07 Jun 2025 04:36:26 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: rKI057mtrWUMXmwMJsXgeoRNOULwoBNgJ+AIX3EinMM=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: May 31 04:36:26 2025 GMT Not After : Jun 7 04:36:26 2025 GMT Subject: CN=683a874a-0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:3c:59:c7:a4:89:47:39:9d:89:24:1d:ff: 48:b8:26:83:1d:b9:63:aa:00:20:70:59:83:69:54: a2:39:7b:fe:f4:4d:ae:30:2f:b9:28:90:56:c6:31: 3d:a8:06:1f:27:9d:21:da:c7:8c:b9:a2:b2:ef:4f: 59:ef:8b:0b:2a:b2:4d:79:8e:62:f9:56:b8:c6:ac: 33:9e:51:5a:ff:38:0b:c9:87:b6:3b:6b:36:74:48: 8d:a0:c2:ff:a1:d4:d4:bf:a4:5a:2a:d3:3f:14:17: 99:97:fd:d0:61:1a:8d:9e:6a:ad:51:a1:3c:c4:a8: ac:23:8d:b0:65:b3:0d:12:61:ad:00:f3:2d:af:dd: cf:7e:13:4f:de:13:55:09:a4:0d:26:c6:0d:2a:b7: 07:11:17:42:c2:c8:fa:00:88:e9:2c:d3:e5:c1:5b: db:fd:64:4e:4d:3e:e6:9d:9b:8d:17:9a:ae:7d:72: a8:be:bf:f3:73:01:55:f8:96:3e:93:48:6e:ab:23: 30:f1:ee:4e:b0:8c:59:cd:fe:c0:93:3b:aa:74:28: 19:d4:43:95:09:b6:a8:1c:13:da:d5:f3:90:7c:b8: fd:3a:3d:7e:b6:5b:52:c3:fd:52:13:8e:44:77:1c: 1a:54:67:a0:05:2d:4e:b5:60:db:49:e1:a0:2e:db: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:60:F9:8F:D1:C4:28:CD:9D:44:FB:F4:A2:09:08:E8:0F:88:AF:6C X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a9:20:37:e6:b8:65:ab:46:a1:3b:56:a1:f0:de:37:b8:07: 2e:50:75:1c:aa:30:6e:0d:8b:f1:80:8e:6b:85:a3:87:aa:a4: 1c:fc:51:61:13:f7:28:c3:4c:17:69:66:8e:d3:8e:4a:67:f2: d4:aa:15:e5:b5:57:03:d7:3d:d8:90:da:e7:9d:04:38:41:03: cd:73:77:07:b4:d3:cf:cf:07:fd:18:29:af:ee:db:51:30:e3: fb:b6:6a:a3:1b:41:9c:6a:a6:47:bd:22:e8:6e:74:1b:6d:49: d6:f6:48:fa:0e:ba:ac:35:b9:56:dd:b2:28:94:6d:31:d6:a2: 41:89:f8:50:b6:3e:21:4e:c1:de:2e:f2:58:46:b7:97:c7:91: 7b:a2:73:b3:ab:df:58:ff:a6:24:32:6c:65:c5:61:db:5c:1e: 09:9b:1f:e0:86:94:60:ed:2c:c6:b3:b2:70:21:54:99:57:87: e7:a0:2d:78:59:f2:e4:f4:47:95:31:af:18:2b:10:b1:c1:56: 8d:e2:36:0a:c5:07:e9:44:c2:06:2f:fd:47:d2:bd:35:71:bd: da:61:0a:96:7e:36:41:83:b1:03:fb:40:a2:94:40:8a:10:c1: 54:3e:76:d0:11:6d:9f:12:cf:95:cf:85:73:7c:a8:5f:27:88: 8b:2e:2b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjUwNTMxMDQzNjI2WhcNMjUwNjA3MDQzNjI2WjAYMRYwFAYD VQQDEw02ODNhODc0YS0wMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr788WcekiUc5nYkkHf9IuCaDHbljqgAgcFmDaVSiOXv+9E2uMC+5KJBWxjE9 qAYfJ50h2seMuaKy709Z74sLKrJNeY5i+Va4xqwznlFa/zgLyYe2O2s2dEiNoML/ odTUv6RaKtM/FBeZl/3QYRqNnmqtUaE8xKisI42wZbMNEmGtAPMtr93PfhNP3hNV CaQNJsYNKrcHERdCwsj6AIjpLNPlwVvb/WROTT7mnZuNF5qufXKovr/zcwFV+JY+ k0huqyMw8e5OsIxZzf7AkzuqdCgZ1EOVCbaoHBPa1fOQfLj9Oj1+tltSw/1SE45E dxwaVGegBS1OtWDbSeGgLtsiIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpg+Y/R xCjNnUT79KIJCOgPiK9sMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNqSA35rhlq0ahO1ah8N43uAcuUHUcqjBuDYvxgI5rhaOHqqQc/FFh E/cow0wXaWaO045KZ/LUqhXltVcD1z3YkNrnnQQ4QQPNc3cHtNPPzwf9GCmv7ttR MOP7tmqjG0GcaqZHvSLobnQbbUnW9kj6DrqsNblW3bIolG0x1qJBifhQtj4hTsHe LvJYRreXx5F7onOzq99Y/6YkMmxlxWHbXB4Jmx/ghpRg7SzGs7JwIVSZV4fnoC14 WfLk9EeVMa8YKxCxwVaN4jYKxQfpRMIGL/1H0r01cb3aYQqWfjZBg7ED+0CilECK EMFUPnbQEW2fEs+Vz4VzfKhfJ4iLLiuu -----END CERTIFICATE-----Generated at Sat May 31 17:58:47 2025 by rpki-client