$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: Q1bSH1IEeWZtk0o0C6YuTIQf2XaZOj0K61ITM4Em/UE= Subject key identifier: 73:54:0A:92:6D:09:5E:86:0A:28:8B:62:C6:1F:65:34:FC:DF:21:41 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 02C9 Signing time: Thu 03 Jul 2025 01:48:36 +0000 Manifest this update: Thu 03 Jul 2025 01:48:36 +0000 Manifest next update: Thu 10 Jul 2025 01:48:36 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: mhsyh+8/20whmjlKJxNKHS9N40mKkbi7Fobm2boEQwo=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: QErLnurbIXvxhMRBkoUfFlZlnlUaVJAze8ZqVt/qUq4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: P+1Rqy+ACA4e0I+pwLJRreU8z9vqEtggvk9g8eqBcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Jul 3 01:48:36 2025 GMT Not After : Jul 10 01:48:36 2025 GMT Subject: CN=6865e174-05fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:c5:d0:6f:00:ee:f8:3f:37:13:71:61:84: 21:3c:d8:20:8c:c7:0a:c8:08:c4:f9:f5:f3:79:9e: 42:97:87:f8:30:aa:44:ef:c3:8c:bc:d7:6e:81:17: bb:68:d8:45:af:c2:10:ab:5f:79:99:d0:4e:05:0b: 09:ca:99:31:83:0e:5a:d9:c7:35:82:b1:fa:88:c5: 9c:f4:b5:b6:8c:ec:1b:69:5f:ac:ff:1f:26:2b:e0: c0:54:fa:f9:42:6c:8f:b7:e9:b4:12:c2:9a:2b:b6: 6f:a1:54:6f:6e:83:09:3e:ca:ef:c3:0c:92:07:a7: c8:01:a5:39:5e:82:e5:74:a0:3a:1f:d3:7e:e7:1f: b0:17:0c:a1:44:d4:4d:01:00:1a:f2:23:60:fd:4e: 8b:ab:9d:dc:c6:d6:d1:80:3a:88:8d:f7:d6:93:ac: c3:c2:3d:37:4c:76:fb:df:c3:58:1f:a0:f3:cf:ed: 71:62:c4:d2:a3:1d:c6:4e:01:3e:b0:18:7a:75:5e: a4:66:b5:60:28:cc:52:06:01:63:79:e6:c7:55:14: 30:e3:d0:a3:fa:dd:c6:d9:19:b0:3a:99:51:b4:69: 40:db:56:a1:1f:f2:b5:ba:f2:c3:13:d3:40:5a:c9: eb:80:59:ce:ea:bf:f1:69:95:b3:20:4a:cc:17:dd: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:0A:92:6D:09:5E:86:0A:28:8B:62:C6:1F:65:34:FC:DF:21:41 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:66:ca:60:d7:2e:11:58:97:9b:a2:bd:59:a9:e2:bc:1d:c8: a2:02:4b:a2:e4:eb:8d:49:d6:7a:f1:c8:b3:f6:a2:bd:cc:03: 52:3c:7d:08:13:f0:4a:ec:c6:3b:6e:3c:cf:5b:18:5c:22:7b: 6c:21:ef:6d:b3:7f:6e:f0:0a:b9:cc:6e:4e:fa:ca:d7:93:9c: ca:39:01:2f:1f:ce:cc:59:60:fa:1e:54:af:0c:42:66:d6:5d: 44:8a:36:34:cd:d4:1e:8f:7e:13:32:66:41:82:16:8b:40:df: 5f:22:cd:2e:99:af:64:5a:07:11:e0:bd:46:94:76:2b:e1:48: 38:18:c9:07:9c:bd:f5:41:5d:19:14:67:4d:35:ac:bd:09:88: 6c:fb:9e:b2:32:ba:01:32:b2:b4:ea:44:a0:7b:24:dc:09:d8: ac:3b:01:89:c3:64:19:9e:ac:60:64:bc:d1:57:7f:91:9f:5b: a6:ef:5a:28:c1:26:2d:ee:15:74:5c:71:e6:6a:ce:b5:3f:da: 43:93:22:68:8d:ec:68:12:43:61:52:32:25:96:f6:a9:e4:2e: c9:0e:6f:a8:f8:e9:74:1e:b8:f8:b5:18:13:42:b6:45:c3:ea: f6:01:e0:1b:95:ea:9b:27:38:7e:22:4c:a7:b6:c2:8e:31:b3: 2b:93:e6:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUwNzAzMDE0ODM2WhcNMjUwNzEwMDE0ODM2WjAYMRYwFAYD VQQDEw02ODY1ZTE3NC0wNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt3F0G8A7vg/NxNxYYQhPNggjMcKyAjE+fXzeZ5Cl4f4MKpE78OMvNdugRe7 aNhFr8IQq195mdBOBQsJypkxgw5a2cc1grH6iMWc9LW2jOwbaV+s/x8mK+DAVPr5 QmyPt+m0EsKaK7ZvoVRvboMJPsrvwwySB6fIAaU5XoLldKA6H9N+5x+wFwyhRNRN AQAa8iNg/U6Lq53cxtbRgDqIjffWk6zDwj03THb738NYH6Dzz+1xYsTSox3GTgE+ sBh6dV6kZrVgKMxSBgFjeebHVRQw49Cj+t3G2RmwOplRtGlA21ahH/K1uvLDE9NA WsnrgFnO6r/xaZWzIErMF91pcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNUCpJt CV6GCiiLYsYfZTT83yFBMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHZspg1y4RWJebor1ZqeK8HciiAkui5OuNSdZ68ciz9qK9zANSPH0I E/BK7MY7bjzPWxhcIntsIe9ts39u8Aq5zG5O+srXk5zKOQEvH87MWWD6HlSvDEJm 1l1EijY0zdQej34TMmZBghaLQN9fIs0uma9kWgcR4L1GlHYr4Ug4GMkHnL31QV0Z FGdNNay9CYhs+56yMroBMrK06kSgeyTcCdisOwGJw2QZnqxgZLzRV3+Rn1um71oo wSYt7hV0XHHmas61P9pDkyJojexoEkNhUjIllvap5C7JDm+o+Ol0Hrj4tRgTQrZF w+r2AeAbleqbJzh+IkyntsKOMbMrk+Yp -----END CERTIFICATE-----Generated at Fri Jul 4 07:24:23 2025 by rpki-client