$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft File: mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json) Hash identifier: FVzI7gLI1iWdzIg6OiI1+NyP1ku4KysaPyX+mafD52k= Subject key identifier: 64:4A:0C:B5:29:2E:4D:07:1B:6A:78:DF:F0:88:DE:B9:FA:B8:A4:FD Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft Manifest number: 7C Signing time: Wed 03 Sep 2025 07:21:20 +0000 Manifest this update: Wed 03 Sep 2025 07:21:20 +0000 Manifest next update: Wed 10 Sep 2025 07:21:20 +0000 Files and hashes: 1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: T3jiETKw+2Qu6SBvyXujCW7HgdsV/dbM6SMAojWZj7Y=) 2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: GSX0pyaiwOS5Abzctg8JuUZl0TI6LV3O2e6/wEsG5kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90 Validity Not Before: Sep 3 07:21:20 2025 GMT Not After : Sep 10 07:21:20 2025 GMT Subject: CN=68b7ec70-b7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:ca:e2:17:37:ca:38:c6:1e:63:9b:92:62: 0b:fc:3e:ba:85:8b:f5:f1:db:0b:e6:07:e1:1a:17: 17:a6:e8:9e:1d:c9:94:d9:4d:fb:6d:72:7a:7d:4f: b8:ce:9e:96:4d:52:2b:1f:6e:bc:a6:25:e8:2b:bb: e8:92:ff:05:1c:b8:f9:4d:51:42:97:3d:28:5f:24: 76:82:cb:e8:eb:46:1d:fb:82:42:a0:43:41:52:72: 78:33:29:cb:ed:27:b2:6f:cb:e5:c6:ef:f6:a6:00: b3:2e:e0:90:16:d6:99:fc:1e:01:7e:79:79:6e:12: 2d:a7:14:c7:25:e2:07:2f:a4:28:de:2c:44:f0:19: bf:dd:91:21:49:ff:84:6b:9d:04:5c:79:db:46:74: 66:b9:c1:c0:fe:96:23:70:2b:8c:62:e6:f1:64:fe: 31:a0:2b:77:32:7e:d2:4e:09:15:6a:71:03:b1:21: 6b:6e:6d:51:e2:0e:0c:e6:18:b4:f9:af:f9:8b:98: 75:93:14:a4:57:c8:00:3b:b8:36:f6:7f:7a:1b:10: 26:66:d4:d5:d3:ca:9c:3f:1b:56:80:c6:b8:7f:a0: ea:34:ca:d2:e1:77:11:18:24:5d:8a:ee:3d:6b:1c: 49:fa:55:d4:a9:17:62:a4:50:6b:f0:0f:35:6f:1d: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:0C:B5:29:2E:4D:07:1B:6A:78:DF:F0:88:DE:B9:FA:B8:A4:FD X509v3 Authority Key Identifier: keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8e:a4:15:9d:e4:b6:19:fb:ea:f4:91:41:d8:df:73:a1:d7: 73:5d:34:ae:8c:9f:fa:a4:b9:24:22:87:02:14:61:3a:83:7b: b6:62:54:5a:b2:18:e9:82:79:af:14:48:55:e4:f1:99:79:d6: 8d:40:f9:41:79:fd:f3:65:e0:0c:6d:c8:c5:01:1b:bc:88:ad: 27:32:ac:54:3a:5b:ad:c1:aa:0d:fe:47:7f:90:c1:75:2e:85: c2:04:15:de:3c:da:8b:03:3e:a7:21:6a:ba:d7:05:8a:5b:b2: 78:c0:d8:ae:31:d1:30:4f:19:6a:ae:c1:27:4a:9c:8e:48:24: e9:e1:26:a2:0a:b3:a2:df:21:37:e2:1f:ba:a1:fc:57:0d:a8: 42:e8:f5:ee:3c:cf:1e:1f:de:1f:65:8b:27:a9:31:96:df:b7: 22:30:74:fa:46:e5:69:73:47:ec:d1:33:a2:b4:d5:16:ca:56: e8:46:fd:4c:b7:7c:64:bf:cd:f5:9b:85:cc:06:10:00:03:86: d7:aa:9c:21:fd:b0:aa:07:f2:de:5d:3b:46:a2:f9:79:9c:9f: 9d:29:31:89:17:b9:3c:be:e0:f8:92:d9:52:11:88:35:ec:f7: 97:45:43:aa:c0:99:b5:fe:96:f2:63:cc:9e:b4:43:56:e9:c0: 26:7b:00:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoOTgwQ0U1QkJGMkNGMzVENjBBRTNCMDcyMThBQjVDQTkx MDE0MkM5MDAeFw0yNTA5MDMwNzIxMjBaFw0yNTA5MTAwNzIxMjBaMBgxFjAUBgNV BAMTDTY4YjdlYzcwLWI3Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/OsriFzfKOMYeY5uSYgv8PrqFi/Xx2wvmB+EaFxem6J4dyZTZTfttcnp9T7jO npZNUisfbrymJegru+iS/wUcuPlNUUKXPShfJHaCy+jrRh37gkKgQ0FScngzKcvt J7Jvy+XG7/amALMu4JAW1pn8HgF+eXluEi2nFMcl4gcvpCjeLETwGb/dkSFJ/4Rr nQRcedtGdGa5wcD+liNwK4xi5vFk/jGgK3cyftJOCRVqcQOxIWtubVHiDgzmGLT5 r/mLmHWTFKRXyAA7uDb2f3obECZm1NXTypw/G1aAxrh/oOo0ytLhdxEYJF2K7j1r HEn6VdSpF2KkUGvwDzVvHSuzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZEoMtSku TQcbanjf8Ijeufq4pP0wHwYDVR0jBBgwFoAUmAzlu/LPNdYK47ByGKtcqRAULJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzVFOUM0QkIwQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZSzQ3QnlHS3RjcVJBVUxK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUF6bHVfTFBOZFlLNDdCeUdLdGNxUkFVTEpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzVFOUM0QkIwQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQTmRZ SzQ3QnlHS3RjcVJBVUxKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2OpBWd5LYZ++r0kUHY33Oh13NdNK6Mn/qkuSQihwIUYTqDe7ZiVFqy GOmCea8USFXk8Zl51o1A+UF5/fNl4AxtyMUBG7yIrScyrFQ6W63Bqg3+R3+QwXUu hcIEFd482osDPqcharrXBYpbsnjA2K4x0TBPGWquwSdKnI5IJOnhJqIKs6LfITfi H7qh/FcNqELo9e48zx4f3h9liyepMZbftyIwdPpG5WlzR+zRM6K01RbKVuhG/Uy3 fGS/zfWbhcwGEAADhteqnCH9sKoH8t5dO0ai+Xmcn50pMYkXuTy+4PiS2VIRiDXs 95dFQ6rAmbX+lvJjzJ60Q1bpwCZ7ABo= -----END CERTIFICATE-----Generated at Thu Sep 4 13:56:46 2025 by rpki-client