$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: 7Kb9QOuMXr3mxSVsEWW0ZQoai+UvdVum8OZ4ltOl3e4= Subject key identifier: 79:46:67:F1:C3:C7:B2:0F:ED:95:C0:0D:B6:0B:9E:87:96:4C:A5:B8 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 0220 Signing time: Sun 19 Oct 2025 04:21:15 +0000 Manifest this update: Sun 19 Oct 2025 04:21:15 +0000 Manifest next update: Sun 26 Oct 2025 04:21:15 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: EgyRFA9nYNj+QRPb7PHVBeDDFAGFgjy0mDcIZdWpKNE=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Oct 19 04:21:15 2025 GMT Not After : Oct 26 04:21:15 2025 GMT Subject: CN=68f4673b-892b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:8d:85:31:57:f2:25:0c:92:c3:99:61:22: 36:f1:e0:40:7b:97:ae:d5:9c:ac:e5:45:d2:e5:47: e1:5a:c1:24:e8:62:c1:39:08:83:a4:07:11:13:9c: 0f:7b:be:5d:b4:6a:49:6d:5e:b4:d7:7c:fa:6c:35: a5:aa:0d:33:54:89:f4:c6:bc:00:c4:94:25:6b:b9: 5a:db:04:2f:71:77:1f:6a:cc:f9:88:37:0c:ab:56: 64:b4:d6:9a:7c:13:81:d3:0f:63:4f:10:88:eb:85: 94:8b:bb:1a:de:a0:52:f2:5f:25:18:18:f9:2c:09: 2f:21:a9:2c:9e:b9:c9:fd:1c:b6:31:30:07:56:bb: e0:be:41:61:bf:00:b0:f9:41:a0:e9:fa:a4:ba:48: 99:4f:1f:c4:0d:50:27:b3:31:10:6a:10:07:4d:a0: 99:10:27:9f:7b:8f:9a:00:ff:84:e3:d7:a8:ae:08: af:8e:a9:3c:b3:2f:89:63:3c:ea:59:24:7d:cf:5e: 8d:9b:44:96:7b:63:0e:7a:25:35:ed:8c:b2:0e:6a: a4:5c:ec:8e:16:b1:62:30:14:cb:0c:ee:62:83:ec: d4:8e:85:18:0a:df:b1:d7:e0:8b:2e:96:b9:1f:6a: 6f:95:e0:64:61:03:c9:33:14:3c:f9:ef:25:50:61: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:46:67:F1:C3:C7:B2:0F:ED:95:C0:0D:B6:0B:9E:87:96:4C:A5:B8 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6b:39:18:dd:30:18:06:89:08:9c:c1:8f:13:00:14:f8:0a: e6:e1:dc:9e:17:70:e6:2f:7d:d8:41:e5:2d:00:64:3d:3d:37: b5:ab:43:5a:b7:78:af:b1:aa:a3:18:db:27:a4:d7:05:bd:2a: 62:9a:e5:94:29:7c:b2:d1:bc:cd:70:72:99:fe:e8:ab:4b:f6: c0:a3:e8:f2:b5:e2:68:54:55:c3:41:fc:2c:45:4d:79:d1:48: 05:b4:da:1f:ac:d4:d7:50:e3:70:32:db:8a:25:1a:28:45:ea: fd:24:6b:82:6c:83:81:70:a2:12:39:99:32:03:fd:56:5e:1a: 62:dd:98:30:58:5a:f0:9b:f8:cf:3d:64:30:bc:e7:4c:44:1a: cb:9c:9e:f8:b6:24:a9:57:4b:e2:4c:e4:00:ad:19:96:d4:ea: 19:4c:95:27:98:af:7c:57:22:05:73:99:c6:50:41:1f:68:7f: d4:ea:be:f5:e6:79:98:eb:37:1c:84:15:74:31:ac:02:73:94: 5c:22:a6:8e:5f:b1:78:ca:63:fb:dd:d5:0e:b8:f7:5a:e3:be: d8:7a:d2:27:0c:38:2b:6f:bb:3d:85:d3:3f:2a:fa:8f:73:52: 93:53:53:dd:f0:3d:33:c2:ff:61:c9:03:34:0a:2f:49:4e:ac: 0e:c9:77:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUxMDE5MDQyMTE1WhcNMjUxMDI2MDQyMTE1WjAYMRYwFAYD VQQDEw02OGY0NjczYi04OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdONhTFX8iUMksOZYSI28eBAe5eu1Zys5UXS5UfhWsEk6GLBOQiDpAcRE5wP e75dtGpJbV6013z6bDWlqg0zVIn0xrwAxJQla7la2wQvcXcfasz5iDcMq1ZktNaa fBOB0w9jTxCI64WUi7sa3qBS8l8lGBj5LAkvIaksnrnJ/Ry2MTAHVrvgvkFhvwCw +UGg6fqkukiZTx/EDVAnszEQahAHTaCZECefe4+aAP+E49eorgivjqk8sy+JYzzq WSR9z16Nm0SWe2MOeiU17YyyDmqkXOyOFrFiMBTLDO5ig+zUjoUYCt+x1+CLLpa5 H2pvleBkYQPJMxQ8+e8lUGEzYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlGZ/HD x7IP7ZXADbYLnoeWTKW4MB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAazkY3TAYBokInMGPEwAU+Arm4dyeF3DmL33YQeUtAGQ9PTe1q0Na t3ivsaqjGNsnpNcFvSpimuWUKXyy0bzNcHKZ/uirS/bAo+jyteJoVFXDQfwsRU15 0UgFtNofrNTXUONwMtuKJRooRer9JGuCbIOBcKISOZkyA/1WXhpi3ZgwWFrwm/jP PWQwvOdMRBrLnJ74tiSpV0viTOQArRmW1OoZTJUnmK98VyIFc5nGUEEfaH/U6r71 5nmY6zcchBV0MawCc5RcIqaOX7F4ymP73dUOuPda477YetInDDgrb7s9hdM/KvqP c1KTU1Pd8D0zwv9hyQM0Ci9JTqwOyXcV -----END CERTIFICATE-----Generated at Tue Oct 21 12:47:33 2025 by rpki-client