$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: HQid/zwDRetbPNfX7IK081JXd4WI76kP57wa9DHp3Io= Subject key identifier: 62:CB:0B:93:A1:07:E1:91:01:9A:B2:E6:98:01:27:17:FB:E6:D3:FA Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01DA Signing time: Tue 03 Jun 2025 02:35:01 +0000 Manifest this update: Tue 03 Jun 2025 02:35:01 +0000 Manifest next update: Tue 10 Jun 2025 02:35:01 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: yLH3+4lmBg4r7jyD8zZNdf85RDnGWpkQ3b48FYPzkY8=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Jun 3 02:35:01 2025 GMT Not After : Jun 10 02:35:01 2025 GMT Subject: CN=683e5f55-cd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:df:46:0e:04:cb:f2:b2:2e:47:00:20:1e: 8a:0e:a4:66:94:88:c2:a6:58:71:1e:25:e9:18:bc: 48:a7:81:b0:27:37:6f:f4:38:45:2d:87:bb:62:9f: ed:e4:52:9a:3e:85:7d:06:e6:cf:d2:6c:98:ae:d9: 05:4f:6d:1b:ee:73:3b:78:7b:1f:ae:aa:47:76:6f: 23:e0:25:57:9e:5f:de:d8:de:23:a7:42:8b:07:23: 63:ee:7f:51:3e:dc:aa:52:f2:5d:0b:c6:72:89:02: 7e:a5:68:74:82:ba:91:d1:3a:4d:ff:53:8f:4c:86: 07:56:63:0c:82:f4:a7:da:7f:c2:ca:df:e7:3e:08: 1b:e1:72:83:4c:fc:13:15:3c:e6:99:fa:9f:ac:4c: 2d:1f:39:ed:f1:a8:8f:ab:10:94:c7:14:ec:22:60: a7:a2:b8:76:eb:31:d5:31:37:d2:74:3a:d8:ad:bd: 57:95:d6:73:d0:eb:08:5b:20:d4:73:49:0d:80:83: aa:d8:6c:8f:e3:a1:06:10:e0:71:5b:a3:85:1a:de: 95:a4:c2:a8:ba:0c:8b:61:91:44:67:d1:68:69:6d: 9c:00:12:45:13:59:b2:75:f7:c9:61:e0:e2:6e:6e: 4e:01:aa:fe:57:28:05:bc:73:79:5e:7f:e8:8e:7e: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CB:0B:93:A1:07:E1:91:01:9A:B2:E6:98:01:27:17:FB:E6:D3:FA X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9f:8b:d3:05:00:7f:24:83:b8:2d:11:76:c7:9b:53:42:72: 1f:64:fb:13:5d:ab:68:79:3a:d2:c8:de:43:72:21:d3:cc:68: 38:e4:46:43:3b:fc:69:cf:ac:5d:92:72:ec:d5:46:f6:c4:ac: 0f:2d:48:c7:bc:07:45:0f:b0:54:54:86:99:eb:52:28:88:38: 71:8d:a5:a1:9c:67:85:8d:9e:bf:63:7d:59:e2:90:38:44:61: 5b:d4:41:b5:14:c9:f4:53:1c:8a:f0:51:7e:13:49:5d:73:b0: 98:59:8b:c5:8d:25:da:33:53:94:80:aa:21:f4:69:c4:db:21: a0:a9:64:fa:e5:a9:95:18:3b:aa:7d:5a:13:f1:48:0f:af:52: 7b:40:f4:6b:e3:6f:bf:4a:92:4f:8d:0d:14:81:d2:a0:83:43: ce:13:ff:b4:8e:ee:84:24:5f:62:63:f0:62:c6:57:c4:6f:39: 9e:f3:e8:0c:bd:cc:37:59:4a:bc:39:db:ce:5a:89:d2:7b:02: 32:10:a0:41:7f:88:23:40:b0:5a:3d:a1:86:20:8b:13:5b:07: d9:eb:fb:9a:77:04:2c:ea:6f:8f:ea:ea:67:89:8c:25:95:09: b7:8d:b1:af:44:ed:09:14:c9:9f:ea:d6:4a:6c:19:57:49:15: 4e:76:82:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwNjAzMDIzNTAxWhcNMjUwNjEwMDIzNTAxWjAYMRYwFAYD VQQDEw02ODNlNWY1NS1jZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XLfRg4Ey/KyLkcAIB6KDqRmlIjCplhxHiXpGLxIp4GwJzdv9DhFLYe7Yp/t 5FKaPoV9BubP0myYrtkFT20b7nM7eHsfrqpHdm8j4CVXnl/e2N4jp0KLByNj7n9R PtyqUvJdC8ZyiQJ+pWh0grqR0TpN/1OPTIYHVmMMgvSn2n/Cyt/nPggb4XKDTPwT FTzmmfqfrEwtHznt8aiPqxCUxxTsImCnorh26zHVMTfSdDrYrb1XldZz0OsIWyDU c0kNgIOq2GyP46EGEOBxW6OFGt6VpMKougyLYZFEZ9FoaW2cABJFE1mydffJYeDi bm5OAar+VygFvHN5Xn/ojn7NbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLLC5Oh B+GRAZqy5pgBJxf75tP6MB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9n4vTBQB/JIO4LRF2x5tTQnIfZPsTXatoeTrSyN5DciHTzGg45EZD O/xpz6xdknLs1Ub2xKwPLUjHvAdFD7BUVIaZ61IoiDhxjaWhnGeFjZ6/Y31Z4pA4 RGFb1EG1FMn0UxyK8FF+E0ldc7CYWYvFjSXaM1OUgKoh9GnE2yGgqWT65amVGDuq fVoT8UgPr1J7QPRr42+/SpJPjQ0UgdKgg0POE/+0ju6EJF9iY/BixlfEbzme8+gM vcw3WUq8OdvOWonSewIyEKBBf4gjQLBaPaGGIIsTWwfZ6/uadwQs6m+P6upniYwl lQm3jbGvRO0JFMmf6tZKbBlXSRVOdoJ+ -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:40 2025 by rpki-client