$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: Svko7r0tfckKfh1BHQDQ9K6mca5DkXTHQGmwFH+tJho= Subject key identifier: A5:20:F6:82:FF:20:8F:AE:15:B6:22:C9:97:A4:63:F7:10:72:7C:33 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 02E5 Signing time: Sat 23 Aug 2025 01:35:15 +0000 Manifest this update: Sat 23 Aug 2025 01:35:14 +0000 Manifest next update: Sat 30 Aug 2025 01:35:14 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: rNz9ZnH+HpkSoeIatDpuv6aNgDZ1COyWnnFYK9JDLoc=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: M5PKDMLMdavH6GN3M2mqYtrVkK8hWINqy8WhALabjko=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: 0v3ssTpGYmDhNqBqiZ+NsO29KdOi8s2cwnExbbi6d8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Aug 23 01:35:14 2025 GMT Not After : Aug 30 01:35:14 2025 GMT Subject: CN=68a91ad2-8fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:69:ce:1b:5e:f8:3c:ad:80:c3:40:da:83: ee:0a:df:d8:dc:71:b3:9f:a8:e8:9c:e3:3c:1e:33: 4a:18:6f:96:54:b7:8d:fc:ff:7d:c5:de:f9:5f:0e: 2b:14:e0:bc:1c:20:72:41:a7:df:32:07:bd:63:cf: e9:0a:81:5c:0f:60:f6:08:be:e3:1c:aa:90:b0:7c: b6:e9:ba:5e:c5:3c:31:e8:b0:ac:4d:5a:1d:58:35: 6a:cc:35:28:5a:20:fc:51:13:09:03:10:67:80:c9: a2:b2:57:e4:e6:a3:39:6f:07:7b:19:a3:f0:27:2c: 67:85:00:5f:3a:45:d0:41:84:3b:eb:75:e4:a0:69: 30:99:93:6b:c4:b7:e8:c2:3f:ff:7c:e6:d1:35:08: 10:ba:02:8a:52:36:56:5a:f9:ea:7f:ad:87:04:c2: d3:1e:64:5b:c2:54:d4:9a:2a:1c:3e:c1:0f:1f:e1: 08:57:91:0c:0f:3a:ed:40:bf:e7:d5:0b:a1:53:44: 31:e3:20:10:9d:d6:97:ac:c6:d4:71:a4:4b:b1:a1: 67:0a:37:55:1c:3a:04:b9:22:4c:1f:8f:a8:94:27: 7f:ac:7e:38:23:9f:7f:02:57:63:61:b4:ba:c0:01: 15:e8:fa:81:f2:4d:d7:7a:f2:9a:22:7c:b3:55:4a: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:F6:82:FF:20:8F:AE:15:B6:22:C9:97:A4:63:F7:10:72:7C:33 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0b:91:3a:7e:f5:75:c3:3d:5e:1c:da:f4:7d:6e:d1:6e:e9: dc:1a:fe:bd:1b:d0:50:82:fc:13:50:fa:7c:3e:a6:6c:7d:8c: 80:5c:ff:c2:1b:72:55:5f:fe:c4:7c:10:25:01:ab:9f:a1:b8: 37:63:a2:8a:4c:56:b5:f4:c9:fc:7d:cb:5d:7e:50:3e:64:9f: eb:15:c7:fb:fe:55:dc:83:94:05:4e:75:fd:ba:10:c4:a0:27: dd:99:9b:61:d4:30:0b:8a:35:d2:82:b3:8a:28:a4:20:8c:40: 38:3c:44:94:4b:25:6a:35:c7:5f:81:e5:a1:38:fd:22:24:1c: a2:af:bc:4e:0a:90:a1:a6:12:01:10:1d:12:03:2e:cd:ea:fa: 5c:0c:3e:2f:a2:62:d4:a5:36:52:f1:4d:c6:de:af:3a:ee:b3: ba:4f:68:36:b8:ae:99:e1:4d:a9:ff:b4:5b:f7:81:32:e3:f8: 68:e9:c1:ba:a5:f9:0a:12:d2:05:8d:1c:a4:b6:8f:cd:75:c0: a1:7a:9b:ac:0d:66:4d:28:2d:ed:2a:7b:0c:10:05:25:25:70: 38:92:ad:e1:bc:51:b6:1e:d7:8d:76:62:d1:ab:ee:97:42:f7: 90:e7:c1:9c:b9:9c:fc:35:17:e1:94:69:18:fb:59:4c:2e:08: 6d:f2:2e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUwODIzMDEzNTE0WhcNMjUwODMwMDEzNTE0WjAYMRYwFAYD VQQDEw02OGE5MWFkMi04ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BZpzhte+DytgMNA2oPuCt/Y3HGzn6jonOM8HjNKGG+WVLeN/P99xd75Xw4r FOC8HCByQaffMge9Y8/pCoFcD2D2CL7jHKqQsHy26bpexTwx6LCsTVodWDVqzDUo WiD8URMJAxBngMmislfk5qM5bwd7GaPwJyxnhQBfOkXQQYQ763XkoGkwmZNrxLfo wj//fObRNQgQugKKUjZWWvnqf62HBMLTHmRbwlTUmiocPsEPH+EIV5EMDzrtQL/n 1QuhU0Qx4yAQndaXrMbUcaRLsaFnCjdVHDoEuSJMH4+olCd/rH44I59/AldjYbS6 wAEV6PqB8k3XevKaInyzVUrNaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUg9oL/ II+uFbYiyZekY/cQcnwzMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtC5E6fvV1wz1eHNr0fW7RbuncGv69G9BQgvwTUPp8PqZsfYyAXP/C G3JVX/7EfBAlAaufobg3Y6KKTFa19Mn8fctdflA+ZJ/rFcf7/lXcg5QFTnX9uhDE oCfdmZth1DALijXSgrOKKKQgjEA4PESUSyVqNcdfgeWhOP0iJByir7xOCpChphIB EB0SAy7N6vpcDD4vomLUpTZS8U3G3q867rO6T2g2uK6Z4U2p/7Rb94Ey4/ho6cG6 pfkKEtIFjRykto/NdcChepusDWZNKC3tKnsMEAUlJXA4kq3hvFG2HteNdmLRq+6X QveQ58GcuZz8NRfhlGkY+1lMLght8i5v -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:47 2025 by rpki-client