$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: 6w5hpQ7JMSAQ57DoHgbBw5/PSaWtCsAFsqrSA6vqTyw= Subject key identifier: D4:D2:6A:2B:0A:63:F7:2E:40:15:DC:9D:3C:3A:71:73:B2:BB:FD:48 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01FA Signing time: Tue 05 Aug 2025 02:52:21 +0000 Manifest this update: Tue 05 Aug 2025 02:52:20 +0000 Manifest next update: Tue 12 Aug 2025 02:52:20 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: OMjbTl8e9B3dX98lHc/QLAwKzOd+wYd9PxHijkLL/H8=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Aug 5 02:52:20 2025 GMT Not After : Aug 12 02:52:20 2025 GMT Subject: CN=689171e5-c75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:f1:4f:3f:9c:f5:29:b9:39:20:9b:3d:6d: a3:dc:fa:bc:74:c0:d5:19:2b:23:24:3a:9d:52:1a: 6e:b5:87:e9:4b:f0:2e:3d:3a:df:16:fb:08:8c:64: a2:a4:b6:4e:c0:b3:78:c0:da:38:d7:c0:a2:b7:44: f3:b5:47:b4:e3:b2:0e:d6:93:37:f4:1f:69:63:ba: d1:62:1e:fb:a5:8b:b8:f7:91:a9:00:8d:26:82:e5: 0a:9a:23:f6:05:3b:56:72:4e:54:8c:ce:56:ff:6e: 36:9c:e2:bc:fd:7f:5d:a8:b6:46:65:e7:1b:bd:d7: b0:71:39:d5:60:62:7e:37:b5:45:95:6e:c5:a7:47: f3:ec:ce:94:21:43:58:18:e3:1b:a0:92:a0:9e:0f: a0:84:b3:a0:8f:a0:0d:a0:7a:61:e8:dc:e8:c1:d2: 4a:e0:9e:45:bc:16:3d:b0:ff:63:9b:4b:38:e7:c2: 64:59:db:ff:7d:9c:37:5b:52:97:83:5c:5a:a4:90: b1:1f:e5:a2:1a:a9:ae:0a:1c:b1:0f:c5:28:46:cd: 70:ac:fc:90:d5:b7:ac:1a:5a:de:69:ab:97:04:c3: cb:02:9f:48:ad:74:cd:80:4c:ad:3d:5c:93:be:9f: d6:50:d7:cc:c5:53:ce:cc:49:c1:4d:6c:4d:be:2a: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:6A:2B:0A:63:F7:2E:40:15:DC:9D:3C:3A:71:73:B2:BB:FD:48 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:05:d2:44:ad:3a:0d:56:68:00:66:78:ed:a4:45:9b:eb:77: 28:56:21:c1:ec:69:f6:f1:3a:50:fd:99:53:f8:60:4a:1a:bd: cc:24:38:27:60:13:87:1d:2b:7f:66:8b:57:8f:46:e3:8f:45: 44:be:29:82:70:cc:71:5e:db:4d:03:f0:bf:06:78:af:3b:38: 94:72:1c:88:fe:ef:b1:70:5a:55:0b:ff:6b:5c:4b:31:a0:7a: a3:86:d7:bf:79:2a:a4:a3:8f:7f:64:f9:25:e7:0b:72:b2:e8: af:6c:81:8f:1a:e9:92:1b:77:8f:2f:c2:14:8d:8c:a2:c6:01: a0:7c:d3:5d:1f:df:0a:d6:e3:4f:b0:4f:f8:14:38:71:84:1b: 43:bf:04:18:f9:79:8c:a9:fb:a5:ff:d0:d5:cd:f4:9c:ae:36: 09:5f:34:a6:ed:dd:ee:fc:46:1a:65:9c:20:c4:c0:10:7c:73: 3a:66:55:77:36:b4:f1:02:32:07:f6:d2:b8:18:74:4f:c8:51: 16:54:95:88:70:01:93:9d:7b:63:ec:1d:4b:70:64:3c:d9:13: 56:86:07:d2:06:ed:39:85:1f:53:d8:ff:d6:8b:48:36:d6:42: f1:cd:6f:e5:95:fe:44:1e:19:b2:be:48:4a:8e:5a:36:4c:7c: 37:51:26:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwODA1MDI1MjIwWhcNMjUwODEyMDI1MjIwWjAYMRYwFAYD VQQDEw02ODkxNzFlNS1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP3xTz+c9Sm5OSCbPW2j3Pq8dMDVGSsjJDqdUhputYfpS/AuPTrfFvsIjGSi pLZOwLN4wNo418Cit0TztUe047IO1pM39B9pY7rRYh77pYu495GpAI0mguUKmiP2 BTtWck5UjM5W/242nOK8/X9dqLZGZecbvdewcTnVYGJ+N7VFlW7Fp0fz7M6UIUNY GOMboJKgng+ghLOgj6ANoHph6NzowdJK4J5FvBY9sP9jm0s458JkWdv/fZw3W1KX g1xapJCxH+WiGqmuChyxD8UoRs1wrPyQ1besGlreaauXBMPLAp9IrXTNgEytPVyT vp/WUNfMxVPOzEnBTWxNviphqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTSaisK Y/cuQBXcnTw6cXOyu/1IMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXBdJErToNVmgAZnjtpEWb63coViHB7Gn28TpQ/ZlT+GBKGr3MJDgn YBOHHSt/ZotXj0bjj0VEvimCcMxxXttNA/C/BnivOziUchyI/u+xcFpVC/9rXEsx oHqjhte/eSqko49/ZPkl5wtysuivbIGPGumSG3ePL8IUjYyixgGgfNNdH98K1uNP sE/4FDhxhBtDvwQY+XmMqful/9DVzfScrjYJXzSm7d3u/EYaZZwgxMAQfHM6ZlV3 NrTxAjIH9tK4GHRPyFEWVJWIcAGTnXtj7B1LcGQ82RNWhgfSBu05hR9T2P/Wi0g2 1kLxzW/llf5EHhmyvkhKjlo2THw3USar -----END CERTIFICATE-----Generated at Wed Aug 6 19:33:36 2025 by rpki-client