$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: XLLwGslHFKgh9/sAazXIDVo2ZegYSDpmNvlU6xdvAUA= Subject key identifier: A6:0C:B8:06:5F:E2:AA:2F:60:A8:44:0D:94:19:87:0B:3F:86:BF:29 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 020A Signing time: Fri 05 Sep 2025 02:33:15 +0000 Manifest this update: Fri 05 Sep 2025 02:33:15 +0000 Manifest next update: Fri 12 Sep 2025 02:33:15 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: p0kqKPvwEkynEU6k0niRHtndCdyjJ7HstbcPmsqAKqs=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Sep 5 02:33:15 2025 GMT Not After : Sep 12 02:33:15 2025 GMT Subject: CN=68ba4beb-cab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:50:df:33:d1:08:0b:e0:88:ae:1d:a9:64: e6:d7:ae:dd:e9:d2:84:0f:2c:9f:18:24:80:69:35: aa:c2:71:ce:60:bf:40:91:1d:ac:8a:19:a2:f1:d0: 07:9d:38:be:71:a7:66:44:2a:b2:40:89:a7:9f:f3: 21:c9:05:88:8c:2e:29:e4:ae:c6:85:36:9e:8d:be: 36:54:99:79:7d:5d:61:21:ae:e6:03:74:82:9b:1e: ab:40:b3:58:d3:86:91:2a:1b:7d:7d:83:b8:c2:9c: ee:6c:34:f2:5a:4b:62:45:1e:38:77:da:8f:34:16: 46:dc:14:d1:66:d7:e0:6b:a7:a5:23:f6:da:d9:66: 18:2c:da:d2:d4:cc:84:02:8b:3c:ce:4f:8a:9c:5c: 11:2d:6b:81:36:d2:db:dc:54:2c:3a:a6:61:c1:2a: ef:a0:12:bf:d6:d3:91:0d:cd:d6:b4:8c:a7:ad:a7: 3f:88:42:f3:8a:6c:5a:4c:82:fb:b3:4b:70:5a:a7: 0d:e7:6a:91:62:3e:e5:0c:d9:e2:f9:f0:a4:84:c4: a9:de:5f:74:01:5f:89:39:c9:86:66:36:91:eb:d3: e4:3b:1f:c4:37:af:1b:32:98:f3:54:1b:60:36:b6: 1a:3f:12:35:94:25:b2:1b:f0:eb:59:18:29:4b:59: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:B8:06:5F:E2:AA:2F:60:A8:44:0D:94:19:87:0B:3F:86:BF:29 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:21:a1:53:1f:d8:20:d3:a6:57:f9:f5:2e:01:3c:fa:a4: e4:5f:df:40:7e:d6:2e:14:d5:2b:e9:e0:de:3c:95:43:55:0a: b6:82:c0:78:06:b3:2e:1b:68:27:3e:3e:44:b1:9a:6e:53:40: 9f:19:55:83:44:a7:d0:10:be:98:f0:66:ba:6a:45:05:3f:48: c0:7c:a3:8d:62:0e:a4:96:db:7c:fb:42:07:b6:90:0d:7f:45: 9b:47:57:f5:b7:d2:0b:bc:14:ae:c7:d6:69:be:82:b4:7f:1a: ac:54:d3:89:c1:5a:25:49:64:8f:d4:0a:16:00:0f:fe:cf:be: 3b:94:28:d6:c7:d5:3f:27:3a:8e:ea:3f:f9:bb:da:74:af:76: f4:29:96:a0:2d:6f:b5:10:cd:42:2a:ce:a8:c4:37:4b:09:74: 01:b4:83:95:b1:6b:76:31:93:5b:73:a2:a2:6a:22:be:cd:20: 22:f0:40:d0:6b:12:6c:66:e2:48:10:b4:2a:68:64:c0:b0:b0: d0:0a:07:98:36:52:c7:9c:00:01:96:d2:e5:de:5f:62:c1:a9: e0:6c:f1:1e:65:21:95:46:60:9a:e0:1a:60:80:3c:8d:e3:96: 24:8b:64:2e:29:5c:e9:86:96:0a:48:62:1e:50:e5:11:c9:27: 92:cc:7c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwOTA1MDIzMzE1WhcNMjUwOTEyMDIzMzE1WjAYMRYwFAYD VQQDEw02OGJhNGJlYi1jYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqo1Q3zPRCAvgiK4dqWTm167d6dKEDyyfGCSAaTWqwnHOYL9AkR2sihmi8dAH nTi+cadmRCqyQImnn/MhyQWIjC4p5K7GhTaejb42VJl5fV1hIa7mA3SCmx6rQLNY 04aRKht9fYO4wpzubDTyWktiRR44d9qPNBZG3BTRZtfga6elI/ba2WYYLNrS1MyE Aos8zk+KnFwRLWuBNtLb3FQsOqZhwSrvoBK/1tORDc3WtIynrac/iELzimxaTIL7 s0twWqcN52qRYj7lDNni+fCkhMSp3l90AV+JOcmGZjaR69PkOx/EN68bMpjzVBtg NrYaPxI1lCWyG/DrWRgpS1n4BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYMuAZf 4qovYKhEDZQZhws/hr8pMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5fSGhUx/YINOmV/n1LgE8+qTkX99AftYuFNUr6eDePJVDVQq2gsB4 BrMuG2gnPj5EsZpuU0CfGVWDRKfQEL6Y8Ga6akUFP0jAfKONYg6kltt8+0IHtpAN f0WbR1f1t9ILvBSux9ZpvoK0fxqsVNOJwVolSWSP1AoWAA/+z747lCjWx9U/JzqO 6j/5u9p0r3b0KZagLW+1EM1CKs6oxDdLCXQBtIOVsWt2MZNbc6KiaiK+zSAi8EDQ axJsZuJIELQqaGTAsLDQCgeYNlLHnAABltLl3l9iwangbPEeZSGVRmCa4BpggDyN 45Yki2QuKVzphpYKSGIeUOURySeSzHxO -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:22 2025 by rpki-client