$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: YTPho6OSMi0tZzkWS+jzHJCZ0yxMxT6Ki+S7v38ZsZg= Subject key identifier: A9:4A:65:BA:F0:67:3C:63:E3:63:54:67:20:6F:A4:65:6A:ED:DC:64 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 0203 Signing time: Sat 23 Aug 2025 02:26:52 +0000 Manifest this update: Sat 23 Aug 2025 02:26:52 +0000 Manifest next update: Sat 30 Aug 2025 02:26:52 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: olNXBehb5zuFCbeGC0I8dEWAHomqdEAiGmvxx5naVs4=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Aug 23 02:26:52 2025 GMT Not After : Aug 30 02:26:52 2025 GMT Subject: CN=68a926ec-c81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:0d:dd:c7:1a:ee:54:76:21:a2:0e:d3:00: 7a:92:ab:23:21:d4:5b:23:95:ca:de:13:6f:2c:88: 4a:20:5c:2e:0e:f7:64:2c:ad:d8:f3:51:b3:96:da: 2a:98:e0:12:db:4f:87:3c:e0:ea:50:3f:6e:c1:0c: 9c:dc:4c:a2:be:61:35:2f:7e:8e:4b:4b:4f:bc:4e: e2:1c:a5:24:3d:8b:49:5b:56:4e:95:63:0e:c7:e8: 07:b4:b7:e3:38:06:1f:de:d2:a4:8f:51:28:f2:82: 21:c4:40:e7:de:dd:31:38:ba:30:2f:1c:a6:0e:80: 87:69:eb:d1:2f:8d:06:e2:26:0c:24:55:24:ea:36: ef:fe:7b:bd:c3:34:b7:25:8a:f2:86:17:e8:63:da: 56:8e:6c:49:00:03:dc:13:7a:af:78:63:3e:43:70: 39:9e:01:f1:c3:41:d5:66:43:b6:37:e6:36:3d:26: 7c:ff:03:91:de:5e:70:84:34:9d:d3:fc:54:9d:60: 52:93:1a:ea:62:c4:c3:22:61:07:b1:54:59:51:5b: e5:79:3c:04:cb:b8:09:31:90:18:24:41:2b:63:50: c9:27:47:7f:05:5f:84:11:88:e6:c2:97:6e:95:5a: 7f:fe:7c:b0:0e:83:17:27:c3:ce:52:de:62:b2:30: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:65:BA:F0:67:3C:63:E3:63:54:67:20:6F:A4:65:6A:ED:DC:64 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:db:2d:f7:d1:da:58:01:c6:0d:28:13:bc:d2:cf:15:4b:94: f4:53:f9:9d:8c:84:b1:e6:75:9b:e5:2b:24:73:0d:a5:b2:2a: 66:21:98:54:c3:13:dc:61:fc:28:1e:fd:ad:08:5f:f4:d6:11: d5:2b:bd:90:40:9c:95:80:76:b9:86:a0:e8:88:b6:0b:98:2e: 71:93:7c:71:ba:bb:59:cc:0e:a7:7c:82:28:49:c8:2a:c6:9f: 0c:c6:29:98:82:e2:b8:b2:38:81:71:30:44:37:69:cd:41:d2: 73:49:5a:b4:e7:51:86:de:38:7f:2d:da:c3:34:8d:d7:0a:1b: ca:aa:6d:85:f5:6a:69:ee:a3:66:cc:e9:4a:7c:bc:1c:91:39: 97:4c:0d:8b:b7:72:17:8f:11:bf:e9:9a:ec:de:61:79:7b:17: 32:1f:17:b6:28:10:36:88:14:a4:66:0b:7a:fb:ad:02:76:14: 4f:72:83:f7:78:af:b9:0f:91:00:c2:87:ed:eb:1b:e4:71:e2: 02:0d:ff:8e:5b:a4:bf:90:89:2f:c6:9d:d8:65:13:1e:89:d3: 38:36:aa:f8:0b:42:f7:d3:a0:38:a3:ba:1a:88:40:b0:eb:b7: e9:71:7e:e3:cd:ea:85:13:a4:8c:68:4f:32:94:b8:d8:8e:d9: f5:52:11:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwODIzMDIyNjUyWhcNMjUwODMwMDIyNjUyWjAYMRYwFAYD VQQDEw02OGE5MjZlYy1jODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNMN3cca7lR2IaIO0wB6kqsjIdRbI5XK3hNvLIhKIFwuDvdkLK3Y81Gzltoq mOAS20+HPODqUD9uwQyc3EyivmE1L36OS0tPvE7iHKUkPYtJW1ZOlWMOx+gHtLfj OAYf3tKkj1Eo8oIhxEDn3t0xOLowLxymDoCHaevRL40G4iYMJFUk6jbv/nu9wzS3 JYryhhfoY9pWjmxJAAPcE3qveGM+Q3A5ngHxw0HVZkO2N+Y2PSZ8/wOR3l5whDSd 0/xUnWBSkxrqYsTDImEHsVRZUVvleTwEy7gJMZAYJEErY1DJJ0d/BV+EEYjmwpdu lVp//nywDoMXJ8POUt5isjDz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlKZbrw Zzxj42NUZyBvpGVq7dxkMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg2y330dpYAcYNKBO80s8VS5T0U/mdjISx5nWb5Sskcw2lsipmIZhU wxPcYfwoHv2tCF/01hHVK72QQJyVgHa5hqDoiLYLmC5xk3xxurtZzA6nfIIoScgq xp8MximYguK4sjiBcTBEN2nNQdJzSVq051GG3jh/LdrDNI3XChvKqm2F9Wpp7qNm zOlKfLwckTmXTA2Lt3IXjxG/6Zrs3mF5excyHxe2KBA2iBSkZgt6+60CdhRPcoP3 eK+5D5EAwoft6xvkceICDf+OW6S/kIkvxp3YZRMeidM4Nqr4C0L306A4o7oaiECw 67fpcX7jzeqFE6SMaE8ylLjYjtn1UhHA -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:03 2025 by rpki-client