$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: zgRaVIlkAskmK+VpDYNqNlL/HfG3+4+e+AYk5r5rC8s= Subject key identifier: 1B:C3:CA:15:68:A0:36:4D:98:47:F3:44:14:AC:54:80:C2:7F:6B:86 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 02B0 Signing time: Tue 13 May 2025 01:17:36 +0000 Manifest this update: Tue 13 May 2025 01:17:36 +0000 Manifest next update: Tue 20 May 2025 01:17:36 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: SkoGh0UJxLK2La9CfOE0SsVlSmCeeMeP3Gsn+uAAoBY=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: QErLnurbIXvxhMRBkoUfFlZlnlUaVJAze8ZqVt/qUq4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: P+1Rqy+ACA4e0I+pwLJRreU8z9vqEtggvk9g8eqBcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: May 13 01:17:36 2025 GMT Not After : May 20 01:17:36 2025 GMT Subject: CN=68229db0-f21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:75:ae:25:34:8e:60:f8:ec:7d:33:9b:e3: 46:99:5f:43:34:bd:cc:d9:d9:ce:5c:d1:43:5b:0e: 39:0b:3d:cc:40:15:e3:eb:21:cd:bf:df:02:f2:06: 65:ed:7e:95:f1:e5:c6:96:93:6f:fb:95:53:6e:05: 5e:d7:0b:5d:f2:ce:f3:3a:79:98:78:a1:9e:ab:bb: 7b:43:82:fc:cf:f1:0e:7a:6d:2b:43:0f:88:6e:ec: 16:5c:0e:d6:86:2d:5d:2b:22:57:36:6b:9e:98:b7: 6f:3e:93:2e:08:d3:39:6d:95:d4:71:59:50:79:e1: f3:36:31:aa:90:1c:d0:ac:ea:f6:98:e8:6c:cf:d4: f9:a4:91:96:85:0b:dd:10:87:94:57:af:fb:8d:5e: 9b:3e:97:d6:7a:fa:aa:a8:2a:a3:df:22:3a:c9:89: 44:9e:c4:ec:1a:be:96:83:74:78:7d:95:21:9c:b4: a2:1d:e4:bc:02:ba:06:61:48:0a:86:aa:48:c1:6a: 94:38:34:d7:8b:fb:51:f1:1a:11:d9:0e:2e:31:20: 09:c9:7a:4f:89:c7:44:b7:29:fe:34:46:37:3e:e0: b3:82:58:70:31:c9:56:c3:b8:0d:8d:9a:02:e7:45: 2a:a8:3f:dd:23:57:37:75:4f:f1:e3:b4:22:22:1a: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:CA:15:68:A0:36:4D:98:47:F3:44:14:AC:54:80:C2:7F:6B:86 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6e:98:1b:f2:17:f2:e5:c1:d3:3c:9c:9f:58:67:ac:d1:82: c1:ae:06:23:39:dd:35:3d:88:97:02:d5:16:6a:3a:0b:37:eb: a5:74:aa:58:dc:45:30:26:2e:57:e8:c4:ae:14:59:47:6b:ff: d3:7a:8e:eb:ab:f4:27:65:9a:87:dd:4e:7a:d7:d0:d8:8e:80: 28:fc:b8:d3:ec:c0:db:22:36:d9:99:d7:f8:8c:82:4b:c0:f1: 26:20:bc:f6:9e:28:04:a8:43:4c:8d:cc:fc:03:bb:52:ce:21: 2d:7b:02:5e:91:f9:df:4e:4e:a5:9b:bf:d1:ca:78:37:de:23: 08:fd:9c:5d:46:fb:c4:3e:cb:b8:6e:0d:ec:27:dc:ff:d2:1c: 5f:9b:0b:a0:23:ca:47:3e:a2:f6:69:8d:62:19:22:ed:26:23: 49:db:40:25:b9:df:59:05:66:1e:59:d8:1e:df:57:49:87:99: 5c:04:b6:41:ad:7b:ba:6d:f5:9b:94:4e:7c:f5:0a:d0:f2:7a: df:97:2e:9d:56:8f:8c:8c:90:2b:25:29:be:b1:cb:af:be:48: 3a:e8:24:7f:76:33:f6:2b:20:99:90:c7:0b:ed:b1:0b:3b:b7: 2b:e2:c4:ea:51:89:18:4e:8c:0f:7d:aa:2b:a9:50:91:ba:a1: 71:71:55:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUwNTEzMDExNzM2WhcNMjUwNTIwMDExNzM2WjAYMRYwFAYD VQQDEw02ODIyOWRiMC1mMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TB1riU0jmD47H0zm+NGmV9DNL3M2dnOXNFDWw45Cz3MQBXj6yHNv98C8gZl 7X6V8eXGlpNv+5VTbgVe1wtd8s7zOnmYeKGeq7t7Q4L8z/EOem0rQw+IbuwWXA7W hi1dKyJXNmuemLdvPpMuCNM5bZXUcVlQeeHzNjGqkBzQrOr2mOhsz9T5pJGWhQvd EIeUV6/7jV6bPpfWevqqqCqj3yI6yYlEnsTsGr6Wg3R4fZUhnLSiHeS8AroGYUgK hqpIwWqUODTXi/tR8RoR2Q4uMSAJyXpPicdEtyn+NEY3PuCzglhwMclWw7gNjZoC 50UqqD/dI1c3dU/x47QiIhoaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvDyhVo oDZNmEfzRBSsVIDCf2uGMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5bpgb8hfy5cHTPJyfWGes0YLBrgYjOd01PYiXAtUWajoLN+uldKpY 3EUwJi5X6MSuFFlHa//Teo7rq/QnZZqH3U5619DYjoAo/LjT7MDbIjbZmdf4jIJL wPEmILz2nigEqENMjcz8A7tSziEtewJekfnfTk6lm7/Ryng33iMI/ZxdRvvEPsu4 bg3sJ9z/0hxfmwugI8pHPqL2aY1iGSLtJiNJ20Alud9ZBWYeWdge31dJh5lcBLZB rXu6bfWblE589QrQ8nrfly6dVo+MjJArJSm+scuvvkg66CR/djP2KyCZkMcL7bEL O7cr4sTqUYkYTowPfaorqVCRuqFxcVXt -----END CERTIFICATE-----Generated at Wed May 14 08:13:40 2025 by rpki-client