$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: y0OY1JQR1XKyesxgYXTlscU+rQLJTc4dOBduyy59Td8= Subject key identifier: 7F:6D:1A:29:26:D9:73:9C:66:14:FE:4A:F3:4A:67:44:34:40:68:AF Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 02A7 Signing time: Fri 25 Apr 2025 01:16:56 +0000 Manifest this update: Fri 25 Apr 2025 01:16:56 +0000 Manifest next update: Fri 02 May 2025 01:16:56 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: IIpGA6hR0784S4CaQHKag3fGPkkm72auqKlf+RkQWeU=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: QErLnurbIXvxhMRBkoUfFlZlnlUaVJAze8ZqVt/qUq4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: P+1Rqy+ACA4e0I+pwLJRreU8z9vqEtggvk9g8eqBcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Apr 25 01:16:56 2025 GMT Not After : May 2 01:16:56 2025 GMT Subject: CN=680ae288-b6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:39:28:36:ee:ce:72:13:35:00:f5:f1:f5: ca:36:1d:31:bc:b4:02:d0:da:f6:e2:ac:58:ad:2b: 1d:87:5d:f9:e2:ea:f0:cd:68:85:b3:b7:fd:4a:b1: a0:45:bc:69:80:04:56:95:05:9f:d1:5e:04:b3:b8: d4:4b:d6:46:4f:07:a5:b5:c7:2c:8a:f9:d2:fd:5d: 91:7d:d2:e3:50:db:69:90:e7:5b:dd:0f:99:f4:aa: 67:77:74:be:5c:81:a9:17:46:c7:bf:b3:f8:cd:9f: 89:dd:77:fe:ad:dc:2d:39:99:56:61:71:07:44:db: 53:46:6a:2e:f5:02:41:63:80:80:aa:2f:6f:d5:f5: 73:2b:3e:c5:60:e7:46:77:32:f1:ee:78:8b:c3:b7: df:f8:8a:e9:4c:a3:cf:28:ee:a4:4c:b9:91:a8:d0: 28:8f:43:5c:d9:c1:22:24:f8:f1:16:15:8b:fd:3b: 12:ea:1c:2e:ac:03:af:02:ca:f1:f8:c2:0d:c6:ed: 6a:c6:b3:a6:b3:4b:af:b0:fa:9d:1a:9e:21:9d:6e: 84:98:73:5f:5d:46:7a:39:84:39:9a:22:0b:57:97: e8:9c:16:38:2d:33:73:55:0c:24:fd:4c:70:da:4a: 3c:c5:de:c8:8d:3b:94:31:59:cb:77:6c:88:af:c5: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:1A:29:26:D9:73:9C:66:14:FE:4A:F3:4A:67:44:34:40:68:AF X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b0:6f:07:f1:09:29:24:5c:1e:74:91:2d:b7:cd:0c:94:60: 90:60:9d:e8:e3:11:f4:06:df:27:7f:c0:51:2d:96:ac:9d:74: c6:55:2c:7a:ce:ce:53:25:bb:63:e4:ef:4f:0c:26:10:2d:c4: 00:1f:68:64:da:48:ee:4d:66:f0:45:5a:7a:42:c7:9a:26:39: 9a:2d:25:41:de:c3:37:a5:df:5e:38:41:b0:b6:7c:4a:65:1d: d1:81:0f:c7:66:c6:c4:e9:c4:73:37:18:b8:f9:00:2d:e6:91: 4e:01:bf:49:06:d1:18:07:71:27:cb:a4:98:d5:a9:4b:9a:1f: e2:36:54:39:a8:dd:80:a6:a6:ad:e4:f3:ef:cc:bf:80:44:a1: d7:9b:78:92:5a:8d:76:95:09:75:6a:45:5a:f2:fd:bf:9e:ae: a0:54:ef:ac:fb:9e:b9:a1:6d:f6:e4:3c:81:3e:af:2b:22:83: a1:89:2b:e7:04:8e:26:5b:46:0b:88:d4:a9:c4:ac:9c:88:14: 72:e7:f9:0a:92:cf:d0:fc:04:ee:58:ed:55:9c:5e:37:c1:e6: 2e:81:bd:79:81:4f:f8:27:a8:fc:22:1e:54:86:4a:d3:04:2c: 05:a6:3e:4e:fb:bf:61:9b:19:f4:03:d5:35:0e:72:5c:d5:3f: 43:a6:95:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUwNDI1MDExNjU2WhcNMjUwNTAyMDExNjU2WjAYMRYwFAYD VQQDEw02ODBhZTI4OC1iNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup05KDbuznITNQD18fXKNh0xvLQC0Nr24qxYrSsdh1354urwzWiFs7f9SrGg RbxpgARWlQWf0V4Es7jUS9ZGTweltccsivnS/V2RfdLjUNtpkOdb3Q+Z9Kpnd3S+ XIGpF0bHv7P4zZ+J3Xf+rdwtOZlWYXEHRNtTRmou9QJBY4CAqi9v1fVzKz7FYOdG dzLx7niLw7ff+IrpTKPPKO6kTLmRqNAoj0Nc2cEiJPjxFhWL/TsS6hwurAOvAsrx +MINxu1qxrOms0uvsPqdGp4hnW6EmHNfXUZ6OYQ5miILV5fonBY4LTNzVQwk/Uxw 2ko8xd7IjTuUMVnLd2yIr8XXIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9tGikm 2XOcZhT+SvNKZ0Q0QGivMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtsG8H8QkpJFwedJEtt80MlGCQYJ3o4xH0Bt8nf8BRLZasnXTGVSx6 zs5TJbtj5O9PDCYQLcQAH2hk2kjuTWbwRVp6QseaJjmaLSVB3sM3pd9eOEGwtnxK ZR3RgQ/HZsbE6cRzNxi4+QAt5pFOAb9JBtEYB3Eny6SY1alLmh/iNlQ5qN2Apqat 5PPvzL+ARKHXm3iSWo12lQl1akVa8v2/nq6gVO+s+565oW325DyBPq8rIoOhiSvn BI4mW0YLiNSpxKyciBRy5/kKks/Q/ATuWO1VnF43weYugb15gU/4J6j8Ih5UhkrT BCwFpj5O+79hmxn0A9U1DnJc1T9DppX/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:39 2025 by rpki-client