$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: uDiDOBx44f/ljG87ZoO2Mn06LR1tSwIDeKvUukgIP+0= Subject key identifier: E0:63:87:8E:E1:85:32:E2:CA:72:6A:0B:5F:82:E6:16:5F:B9:7F:61 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 0309 Signing time: Mon 03 Nov 2025 01:08:59 +0000 Manifest this update: Mon 03 Nov 2025 01:08:58 +0000 Manifest next update: Mon 10 Nov 2025 01:08:58 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: AQfhc/WReNi5gtMGjZgJ7EbnmTUwekb3r7Iivhf+U38=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: M5PKDMLMdavH6GN3M2mqYtrVkK8hWINqy8WhALabjko=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: 0v3ssTpGYmDhNqBqiZ+NsO29KdOi8s2cwnExbbi6d8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Nov 3 01:08:58 2025 GMT Not After : Nov 10 01:08:58 2025 GMT Subject: CN=690800ab-2180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:9a:ba:fd:18:20:21:4d:ed:ed:b7:1f:5d: a4:6d:d4:12:48:78:6e:17:f0:31:a8:5b:23:45:d8: 93:03:a4:c7:e2:e0:fd:4d:47:a3:6d:54:94:c0:c8: 2e:e7:01:d0:20:4c:08:0d:98:9e:5b:29:8e:9e:07: f0:2e:2c:69:a1:d1:66:db:36:e3:12:e2:05:64:74: 81:15:71:b0:e6:0e:4c:0c:fb:31:66:9a:df:81:9f: 73:b4:e2:1a:5f:31:9f:22:1a:1b:03:d0:fa:4f:f2: 5c:77:74:ed:2b:6c:d2:cf:3c:a9:23:b6:5d:b1:e4: 29:ed:39:36:70:56:9d:3f:f8:b8:e7:9d:eb:47:de: 30:d3:f4:fa:7b:8b:3c:3d:ef:3d:e0:2b:5b:21:57: 56:88:57:7c:14:fb:92:3b:1b:c5:61:ed:f3:0b:2a: 76:70:c3:dc:6c:9f:4e:09:f8:7f:66:b5:3c:23:b7: 5f:e2:72:c7:c5:fa:78:6d:27:77:19:2b:84:fa:44: a9:79:5a:0c:b0:ea:0b:e4:3d:24:51:03:5a:c9:ad: d6:64:cc:99:e5:07:d5:e6:c9:a4:bc:a7:e1:a5:c6: 8e:37:8a:8c:10:8b:ec:5a:c1:fc:cd:66:c1:43:6c: ce:fc:97:54:f0:4d:fe:50:76:ab:e5:df:8d:dc:42: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:63:87:8E:E1:85:32:E2:CA:72:6A:0B:5F:82:E6:16:5F:B9:7F:61 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2e:14:f3:ca:44:fc:71:b4:b2:bd:c9:80:2b:75:12:e8:09: e4:32:46:7c:70:13:57:4d:11:69:99:fa:77:70:14:db:7f:ec: 2d:df:4f:e1:ed:0f:93:61:fa:fa:3d:09:3a:c6:a0:f3:56:79: 16:13:37:89:6a:16:c0:1f:34:05:7d:c2:05:84:77:0a:88:9e: 83:50:7b:cc:da:c5:f8:b6:98:2a:98:2b:d6:69:f6:66:6d:be: 85:d1:da:d2:b4:5d:40:d6:02:52:b1:8a:e4:09:e1:fa:d3:e0: 0b:da:cc:bc:b9:3c:fc:a6:94:07:7b:e3:35:24:4f:26:c2:83: de:ef:71:17:3b:94:38:3a:fb:57:1b:a3:19:11:31:71:00:77: 3f:74:d4:82:1a:f3:09:0f:ec:13:91:53:e8:be:ab:06:29:81: 3d:d2:fb:e1:6e:4b:12:c0:69:3b:12:10:f6:1b:8b:65:8e:7c: 2c:ed:6a:06:12:97:e3:30:51:ad:ac:82:69:aa:bd:f6:44:30: da:67:a4:8a:d9:04:45:62:43:f4:a3:e3:d3:26:20:cc:a4:b3: 65:cf:78:ef:3c:ee:9d:2b:d5:46:22:dd:3c:9b:ce:5d:ae:3e: cc:30:a4:d1:09:c6:05:73:22:3b:78:38:54:f1:94:8d:82:3e: 9a:13:92:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUxMTAzMDEwODU4WhcNMjUxMTEwMDEwODU4WjAYMRYwFAYD VQQDEw02OTA4MDBhYi0yMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+aauv0YICFN7e23H12kbdQSSHhuF/AxqFsjRdiTA6TH4uD9TUejbVSUwMgu 5wHQIEwIDZieWymOngfwLixpodFm2zbjEuIFZHSBFXGw5g5MDPsxZprfgZ9ztOIa XzGfIhobA9D6T/Jcd3TtK2zSzzypI7ZdseQp7Tk2cFadP/i4553rR94w0/T6e4s8 Pe894CtbIVdWiFd8FPuSOxvFYe3zCyp2cMPcbJ9OCfh/ZrU8I7df4nLHxfp4bSd3 GSuE+kSpeVoMsOoL5D0kUQNaya3WZMyZ5QfV5smkvKfhpcaON4qMEIvsWsH8zWbB Q2zO/JdU8E3+UHar5d+N3EJEBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBjh47h hTLiynJqC1+C5hZfuX9hMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwLhTzykT8cbSyvcmAK3US6AnkMkZ8cBNXTRFpmfp3cBTbf+wt30/h 7Q+TYfr6PQk6xqDzVnkWEzeJahbAHzQFfcIFhHcKiJ6DUHvM2sX4tpgqmCvWafZm bb6F0drStF1A1gJSsYrkCeH60+AL2sy8uTz8ppQHe+M1JE8mwoPe73EXO5Q4OvtX G6MZETFxAHc/dNSCGvMJD+wTkVPovqsGKYE90vvhbksSwGk7EhD2G4tljnws7WoG EpfjMFGtrIJpqr32RDDaZ6SK2QRFYkP0o+PTJiDMpLNlz3jvPO6dK9VGIt08m85d rj7MMKTRCcYFcyI7eDhU8ZSNgj6aE5KS -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:41 2025 by rpki-client