$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: Ct+MmrvxA4BCkt0sKEbsN4dTRYFujpWr4rRP7YWOssU= Subject key identifier: C0:FD:93:B6:DC:1A:C9:D9:78:C2:53:A5:15:95:C4:0C:23:E5:BB:7A Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 0228 Signing time: Wed 05 Nov 2025 02:08:13 +0000 Manifest this update: Wed 05 Nov 2025 02:08:12 +0000 Manifest next update: Wed 12 Nov 2025 02:08:12 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: u/1DACE0FgWhMs/8l+Pn0CqfPjwnyrHJ/90PyYhBOHA=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Nov 5 02:08:12 2025 GMT Not After : Nov 12 02:08:12 2025 GMT Subject: CN=690ab18c-2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:b2:fc:bd:82:87:c2:1c:e0:14:34:a8:a4: a2:08:23:90:20:3d:59:b0:d6:f5:fb:59:1d:35:df: d1:0c:ed:23:7e:b3:f6:05:02:58:12:8e:8d:5b:5d: 6b:93:d3:fa:25:dd:a2:1d:7e:63:6f:87:bc:a1:1b: ec:f2:aa:91:2b:66:f6:e8:10:b8:ce:be:e2:39:88: 48:a2:c0:8b:da:a1:a7:2a:27:51:aa:c5:8b:55:5a: 80:ad:0e:3a:2f:1d:ea:fa:80:77:c0:6e:a5:c8:c7: 15:63:ea:7b:95:aa:80:3e:84:b6:b9:d4:e7:a8:bf: 2c:b4:ad:de:d5:bb:5d:bc:04:f2:5f:77:ad:b2:44: de:73:2a:0d:80:43:40:b5:2c:1f:4b:56:20:9c:6e: 59:0e:78:11:54:c1:b3:63:6c:86:ee:8a:52:ef:30: 50:f6:95:0f:c6:ff:20:9b:1c:00:8a:ad:55:e6:b2: 85:49:d2:42:7b:7a:1d:3e:bb:24:de:b4:5d:93:f6: 83:24:b6:47:6e:4e:ab:f7:0e:87:e3:ce:ef:b7:2b: 7d:67:48:64:8c:61:fb:3f:89:e9:18:e5:c0:61:10: cc:38:1a:4c:5b:80:d0:8e:6a:b5:a8:42:e1:ba:36: b9:98:af:8f:af:9e:2c:18:ee:33:84:ff:38:94:95: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:93:B6:DC:1A:C9:D9:78:C2:53:A5:15:95:C4:0C:23:E5:BB:7A X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:36:1d:0f:83:8f:62:9b:a9:28:c9:fb:1f:67:38:5f:cd: c0:ef:e1:e0:49:05:04:1f:16:83:df:f4:25:5c:10:60:89:b5: bf:28:49:7d:cc:33:5a:d8:c1:97:17:8b:85:d4:dc:f4:94:15: fc:08:ca:c3:d7:36:3f:0a:da:68:0b:c5:45:bb:a8:b6:52:af: b8:06:c5:2b:31:4d:d2:45:dd:c5:80:6d:77:b2:61:5e:5b:1e: e6:d1:58:56:5d:1a:8c:07:ac:b2:12:0a:d7:c1:91:2a:54:9b: 83:83:ad:ce:5e:e4:e7:63:b6:8e:06:5f:b0:23:a8:2a:d3:01: 2b:a1:ec:2b:2d:41:5d:bb:c7:e2:ef:1a:d3:9c:89:4f:3c:e6: 6c:69:c3:ac:52:d6:4d:f6:88:6a:4a:2e:43:fe:c9:35:95:d3: 24:15:20:af:72:5b:fc:33:ac:56:fb:c1:44:e9:74:4f:5d:01: de:01:e9:c5:2a:d4:71:a6:a3:83:77:06:6b:ec:c3:91:a4:c1: 9e:65:47:78:d3:4c:7e:0c:34:18:c0:92:00:08:6a:af:37:24: d6:95:55:1b:d9:0c:2e:93:a7:53:10:9a:dd:38:72:f9:3e:d2: 30:e3:3b:5f:5c:4c:e5:4d:49:86:66:1f:9d:50:e2:72:1f:f0: 41:15:b2:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUxMTA1MDIwODEyWhcNMjUxMTEyMDIwODEyWjAYMRYwFAYD VQQDEw02OTBhYjE4Yy0yMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycSy/L2Ch8Ic4BQ0qKSiCCOQID1ZsNb1+1kdNd/RDO0jfrP2BQJYEo6NW11r k9P6Jd2iHX5jb4e8oRvs8qqRK2b26BC4zr7iOYhIosCL2qGnKidRqsWLVVqArQ46 Lx3q+oB3wG6lyMcVY+p7laqAPoS2udTnqL8stK3e1btdvATyX3etskTecyoNgENA tSwfS1YgnG5ZDngRVMGzY2yG7opS7zBQ9pUPxv8gmxwAiq1V5rKFSdJCe3odPrsk 3rRdk/aDJLZHbk6r9w6H487vtyt9Z0hkjGH7P4npGOXAYRDMOBpMW4DQjmq1qELh uja5mK+Pr54sGO4zhP84lJW57QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD9k7bc GsnZeMJTpRWVxAwj5bt6MB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoHDYdD4OPYpupKMn7H2c4X83A7+HgSQUEHxaD3/QlXBBgibW/KEl9 zDNa2MGXF4uF1Nz0lBX8CMrD1zY/CtpoC8VFu6i2Uq+4BsUrMU3SRd3FgG13smFe Wx7m0VhWXRqMB6yyEgrXwZEqVJuDg63OXuTnY7aOBl+wI6gq0wEroewrLUFdu8fi 7xrTnIlPPOZsacOsUtZN9ohqSi5D/sk1ldMkFSCvclv8M6xW+8FE6XRPXQHeAenF KtRxpqODdwZr7MORpMGeZUd400x+DDQYwJIACGqvNyTWlVUb2Qwuk6dTEJrdOHL5 PtIw4ztfXEzlTUmGZh+dUOJyH/BBFbLX -----END CERTIFICATE-----Generated at Wed Nov 5 22:45:01 2025 by rpki-client