$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft File: mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json) Hash identifier: ZiD5z429n5/egURrbuSuTp0Ru28uZHx4xtA1CBXAPd4= Subject key identifier: 81:22:18:A2:0A:31:83:DA:FC:54:27:FC:FD:09:9E:14:FD:A7:7F:60 Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:14:09 +0000 Manifest this update: Sat 19 Jul 2025 07:14:08 +0000 Manifest next update: Sat 26 Jul 2025 07:14:08 +0000 Files and hashes: 1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: XplcqGhSvQ5iT2WkhQXkealUASKo/PHgv3zcPylRgQk=) 2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: GSX0pyaiwOS5Abzctg8JuUZl0TI6LV3O2e6/wEsG5kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Validity Not Before: Jul 19 07:14:08 2025 GMT Not After : Jul 26 07:14:08 2025 GMT Subject: CN=687b45c1-290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:0d:43:63:79:ae:e6:c1:d3:e9:04:b1:78: f3:6f:38:ac:e9:78:d6:41:78:5d:83:a7:c4:0a:7d: 1b:64:ea:ee:2a:bb:fc:0d:25:70:18:78:39:17:2a: 3f:d8:7d:8f:08:df:ac:88:f1:5b:6f:92:4e:04:26: 5a:91:72:e8:3b:af:09:ae:8b:70:dc:3f:9a:02:ea: 0c:e3:59:c6:07:bf:c8:76:7d:3f:e2:3b:65:1b:da: 58:63:f9:68:79:1d:8d:d4:b3:9d:a0:0e:50:74:63: 7a:6b:c7:c9:7f:62:02:6d:67:95:fa:f7:58:cf:1f: d9:f3:0d:e0:eb:26:1b:50:90:91:fc:fb:37:f2:eb: 76:39:25:58:e7:21:16:fd:ef:e8:44:9e:e6:be:f4: 1d:e7:08:56:e7:88:d1:ad:9d:82:7b:af:fa:27:b4: 35:22:8d:56:a5:0a:53:e8:a0:25:c7:e9:25:6e:86: 1f:e5:4c:02:d1:88:ab:d6:11:d1:7e:21:e2:13:30: cd:f0:3c:f5:f4:37:32:ac:64:eb:3a:41:a9:63:69: 6b:0f:08:90:26:ee:9e:31:56:79:86:c5:64:97:99: 5b:b5:ce:c1:ea:22:74:3d:af:a8:98:01:2f:06:ff: e0:62:47:7f:4a:26:6a:8b:9c:9e:46:a5:6c:cc:3f: af:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:18:A2:0A:31:83:DA:FC:54:27:FC:FD:09:9E:14:FD:A7:7F:60 X509v3 Authority Key Identifier: keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c7:19:d8:66:bb:7a:fd:17:0a:15:fa:44:84:b3:d0:24:85: ed:73:8e:c6:da:31:55:b0:8b:24:25:f5:66:ea:ed:10:1f:d1: e4:f8:72:f5:6e:a7:22:19:e4:74:72:6a:47:53:b8:88:c8:d5: e4:57:0f:aa:22:77:4e:c2:20:67:d8:62:2c:fc:d2:79:c8:3f: 1d:2b:bf:19:2e:bf:17:98:55:8e:00:45:1e:82:ac:f8:2f:13: 1d:10:10:1c:de:b9:2e:58:a6:6f:8f:97:2b:44:b2:3d:67:30: 33:e5:d5:30:97:2e:32:b8:80:26:20:6f:0f:2b:cc:64:23:c2: 72:18:4f:bb:38:01:ea:09:b8:6b:51:12:6f:cf:f4:85:19:57: f0:98:16:db:73:34:8f:b3:4d:e6:d7:40:af:d6:af:86:d9:a3: a3:f5:53:e3:77:e6:40:55:29:ec:b2:10:15:a8:4c:1a:0c:91: b2:de:1b:d4:c1:0d:69:03:04:ff:d8:48:54:db:ad:d3:d3:79: 4e:6a:16:3e:de:e2:cf:92:00:dd:1f:bb:0e:f7:0f:8d:e6:35: 68:b3:6f:2c:b4:5f:8e:f7:30:80:8a:fe:76:62:92:69:1c:eb: dc:9f:ae:70:fb:81:a2:c8:43:96:93:70:9d:93:9a:62:f8:79: ae:9b:29:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoOTgwQ0U1QkJGMkNGMzVENjBBRTNCMDcyMThBQjVDQTkx MDE0MkM5MDAeFw0yNTA3MTkwNzE0MDhaFw0yNTA3MjYwNzE0MDhaMBgxFjAUBgNV BAMTDTY4N2I0NWMxLTI5MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrXg1DY3mu5sHT6QSxePNvOKzpeNZBeF2Dp8QKfRtk6u4qu/wNJXAYeDkXKj/Y fY8I36yI8Vtvkk4EJlqRcug7rwmui3DcP5oC6gzjWcYHv8h2fT/iO2Ub2lhj+Wh5 HY3Us52gDlB0Y3prx8l/YgJtZ5X691jPH9nzDeDrJhtQkJH8+zfy63Y5JVjnIRb9 7+hEnua+9B3nCFbniNGtnYJ7r/ontDUijValClPooCXH6SVuhh/lTALRiKvWEdF+ IeITMM3wPPX0NzKsZOs6QaljaWsPCJAm7p4xVnmGxWSXmVu1zsHqInQ9r6iYAS8G /+BiR39KJmqLnJ5GpWzMP69bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgSIYogox g9r8VCf8/QmeFP2nf2AwHwYDVR0jBBgwFoAUmAzlu/LPNdYK47ByGKtcqRAULJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzVFOUM0QkIwQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZSzQ3QnlHS3RjcVJBVUxK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUF6bHVfTFBOZFlLNDdCeUdLdGNxUkFVTEpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzVFOUM0QkIwQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZ SzQ3QnlHS3RjcVJBVUxKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzHGdhmu3r9FwoV+kSEs9Akhe1zjsbaMVWwiyQl9Wbq7RAf0eT4cvVu pyIZ5HRyakdTuIjI1eRXD6oid07CIGfYYiz80nnIPx0rvxkuvxeYVY4ARR6CrPgv Ex0QEBzeuS5Ypm+PlytEsj1nMDPl1TCXLjK4gCYgbw8rzGQjwnIYT7s4AeoJuGtR Em/P9IUZV/CYFttzNI+zTebXQK/Wr4bZo6P1U+N35kBVKeyyEBWoTBoMkbLeG9TB DWkDBP/YSFTbrdPTeU5qFj7e4s+SAN0fuw73D43mNWizbyy0X473MICK/nZikmkc 69yfrnD7gaLIQ5aTcJ2TmmL4ea6bKVQ= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:45 2025 by rpki-client