$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: ysIJOUI+06h+tDUOVfdnl91C1of3dQqq63tnR+yU0w4= Subject key identifier: 95:8D:78:F8:95:8B:D1:05:D3:D0:F8:ED:29:BA:55:F1:3F:95:D5:91 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 02DE Signing time: Sat 09 Aug 2025 01:54:04 +0000 Manifest this update: Sat 09 Aug 2025 01:54:03 +0000 Manifest next update: Sat 16 Aug 2025 01:54:03 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: t8RH10SImQnbDO4AsCDZvghwMG0qe8rfpSdyK3nHgsk=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: M5PKDMLMdavH6GN3M2mqYtrVkK8hWINqy8WhALabjko=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: 0v3ssTpGYmDhNqBqiZ+NsO29KdOi8s2cwnExbbi6d8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Aug 9 01:54:03 2025 GMT Not After : Aug 16 01:54:03 2025 GMT Subject: CN=6896aa3b-f0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:d4:65:54:ec:18:9b:97:85:69:27:23:54: aa:d9:17:38:9c:3d:60:45:c5:10:c5:0c:46:25:80: 8e:ab:f3:58:51:be:fe:00:20:71:4a:b9:f1:7d:79: 0f:c8:8b:a7:18:b6:6e:6d:50:a5:a3:d4:96:b8:e5: 08:93:a2:ae:b3:61:fb:13:88:5f:15:5a:13:c4:bb: 18:49:10:78:6e:a0:5f:88:0e:14:1a:e5:6d:5b:09: 94:2b:2d:21:0d:12:26:0a:b3:16:c0:c2:13:d3:6f: 02:56:7d:38:8c:ef:0d:8a:af:26:ac:b7:a5:91:b9: 7f:29:23:88:f5:44:f1:13:b0:95:30:2c:37:eb:d2: a8:62:a6:4c:9d:dd:1d:e3:16:0d:8e:a1:76:7a:98: 45:67:7f:9d:93:b7:e2:f8:34:30:7d:4d:8f:06:c0: ab:f0:2d:12:b7:9e:73:b1:4a:9d:35:98:c1:60:5e: bb:d6:af:da:ec:63:ba:fb:d6:a3:d2:4c:6d:07:c5: 40:1d:bf:77:5b:fb:90:56:3d:c2:ab:bf:18:d1:5c: 42:c5:c8:0e:93:c7:0c:63:df:f6:a2:36:44:e6:7a: b8:d0:86:38:4c:16:97:4f:85:9b:b7:ed:9f:0c:db: 44:f2:66:c3:a1:ea:e1:6f:4a:09:23:76:4c:10:1d: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:78:F8:95:8B:D1:05:D3:D0:F8:ED:29:BA:55:F1:3F:95:D5:91 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:16:44:67:e1:8c:80:e5:e7:2b:84:37:e2:6b:5f:2d:5a:40: 62:af:76:f7:86:72:c5:40:03:96:7f:5a:8b:1e:bb:ab:27:28: 09:28:ce:e9:06:4c:05:4f:8b:db:3b:98:b9:cb:97:63:93:dd: eb:61:d0:61:d3:e3:1b:11:a6:cf:08:d4:2a:4b:7b:b7:47:53: 04:83:fe:09:dd:07:89:af:8c:9d:bb:ae:bd:48:b8:44:97:21: e6:a0:e1:58:3c:3b:ef:ed:f3:9e:63:ec:ad:1f:91:43:a2:86: c3:34:de:f7:d2:dd:17:7e:2c:c9:ed:73:a1:eb:5f:bf:12:dd: e8:ee:d3:77:78:c2:f4:3b:d3:6b:43:de:37:75:b0:51:a4:7a: 7a:ac:8e:79:3c:a8:e7:b0:69:72:ab:07:aa:ab:f1:e1:7b:9a: d0:4d:06:28:de:d5:04:4a:ee:f2:39:01:2b:ae:c4:d6:74:db: 84:40:52:d8:fc:f3:a2:8b:a6:07:9e:53:62:6b:90:de:fa:ac: f1:c5:70:4f:a9:fb:86:1c:04:73:a5:ec:7d:93:6f:13:87:d4: 40:c5:9d:e9:ef:82:4f:c8:7c:28:ee:e2:cb:d0:ca:dd:cc:ce: 44:85:6a:7b:5c:b4:b0:6f:3d:66:df:97:67:bc:62:4c:4b:e3: a5:de:f9:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUwODA5MDE1NDAzWhcNMjUwODE2MDE1NDAzWjAYMRYwFAYD VQQDEw02ODk2YWEzYi1mMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4XUZVTsGJuXhWknI1Sq2Rc4nD1gRcUQxQxGJYCOq/NYUb7+ACBxSrnxfXkP yIunGLZubVClo9SWuOUIk6Kus2H7E4hfFVoTxLsYSRB4bqBfiA4UGuVtWwmUKy0h DRImCrMWwMIT028CVn04jO8Niq8mrLelkbl/KSOI9UTxE7CVMCw369KoYqZMnd0d 4xYNjqF2ephFZ3+dk7fi+DQwfU2PBsCr8C0St55zsUqdNZjBYF671q/a7GO6+9aj 0kxtB8VAHb93W/uQVj3Cq78Y0VxCxcgOk8cMY9/2ojZE5nq40IY4TBaXT4Wbt+2f DNtE8mbDoerhb0oJI3ZMEB1bxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWNePiV i9EF09D47Sm6VfE/ldWRMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+FkRn4YyA5ecrhDfia18tWkBir3b3hnLFQAOWf1qLHrurJygJKM7p BkwFT4vbO5i5y5djk93rYdBh0+MbEabPCNQqS3u3R1MEg/4J3QeJr4ydu669SLhE lyHmoOFYPDvv7fOeY+ytH5FDoobDNN730t0XfizJ7XOh61+/Et3o7tN3eML0O9Nr Q943dbBRpHp6rI55PKjnsGlyqweqq/Hhe5rQTQYo3tUESu7yOQErrsTWdNuEQFLY /POii6YHnlNia5De+qzxxXBPqfuGHARzpex9k28Th9RAxZ3p74JPyHwo7uLL0Mrd zM5EhWp7XLSwbz1m35dnvGJMS+Ol3vmk -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:23 2025 by rpki-client