$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: nxLfVag6DieK2b8eDbvje9kBcVe07vJP5yX/JzHCBNw= Subject key identifier: F9:B3:4F:29:E4:DE:8B:B1:FC:75:07:EF:9A:58:D6:29:12:E2:64:A2 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 02B8 Signing time: Sat 31 May 2025 01:39:49 +0000 Manifest this update: Sat 31 May 2025 01:39:49 +0000 Manifest next update: Sat 07 Jun 2025 01:39:49 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: nU0VfNS5bxhJ9NaT/OATGGXFV+r4XCSHeHNZYbYI/Wg=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: QErLnurbIXvxhMRBkoUfFlZlnlUaVJAze8ZqVt/qUq4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: P+1Rqy+ACA4e0I+pwLJRreU8z9vqEtggvk9g8eqBcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: May 31 01:39:49 2025 GMT Not After : Jun 7 01:39:49 2025 GMT Subject: CN=683a5de5-f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:dd:14:c7:b2:35:f1:eb:c2:45:a4:91:96: 1f:4d:a8:4c:2c:43:40:ac:ea:30:92:e4:34:06:6d: 45:10:6f:e0:c0:8b:6a:cd:24:62:83:40:ef:c2:70: 4c:f1:47:fd:e8:b5:d2:f7:c6:c5:d6:f9:ab:94:4b: 35:54:33:1a:c0:78:2b:cd:12:e0:01:7e:00:dc:15: 02:60:6e:d1:e5:e3:7e:15:24:1e:21:6c:1a:96:2e: 5c:ac:9a:53:5d:ca:2e:4f:03:6b:36:b6:da:a1:1a: ff:d0:ee:6a:2b:bb:fd:35:ff:50:5d:8a:89:e5:a5: 35:56:27:1d:69:17:36:e4:fb:fd:65:4d:48:b7:b0: 11:6b:30:ad:9e:9a:f3:20:b4:c7:77:e5:7d:42:af: eb:3f:af:58:eb:d2:d0:53:1f:af:5b:39:a3:fb:49: 4d:b2:da:2c:f0:58:5e:c6:61:b7:00:6f:04:5c:aa: fb:09:ef:f5:fc:19:70:11:b3:86:d4:00:44:f8:22: ef:ba:7e:63:8d:84:e1:46:0f:bf:7a:3c:5a:f8:a6: b2:3a:dd:c4:b0:09:4c:85:cd:f5:6a:c8:8f:4c:a5: ba:33:fc:c1:a9:98:ff:92:14:12:cf:c8:e5:eb:e7: 5c:f1:b1:15:65:43:10:7b:16:7c:85:36:e0:90:30: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B3:4F:29:E4:DE:8B:B1:FC:75:07:EF:9A:58:D6:29:12:E2:64:A2 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a8:d9:96:17:b9:7b:52:c7:96:e5:ba:3c:c4:fe:d7:39:68: 7c:a6:e3:24:a0:cd:89:f8:89:a9:0c:28:d7:0a:55:20:0d:80: 89:52:2e:34:88:82:bd:d8:87:63:f1:70:a4:61:83:c0:bf:c8: 8e:13:39:a8:38:bf:b3:2c:83:f1:df:c4:a5:79:60:76:63:ed: f5:4a:96:96:e5:44:5e:0b:b3:84:b6:ef:b3:f6:5c:06:9c:ed: 54:f0:5c:ea:94:97:6a:fa:c2:60:25:bc:32:1c:51:a6:f5:d4: be:5f:49:2c:e9:fa:81:2e:30:e6:3d:35:03:85:7b:8b:5b:36: 37:53:95:bc:76:ac:49:e3:b4:be:bf:ea:6f:8a:3a:d5:d1:64: 37:9d:e4:04:3e:1f:9b:c7:d0:29:e9:b6:db:41:97:09:1f:bb: b0:52:78:7e:5b:e6:44:bb:97:57:df:50:52:d1:d4:97:08:41: 00:fc:f2:ca:86:74:8a:4c:e9:8e:1f:4a:02:d5:9d:08:18:a4: ae:35:10:79:11:d2:06:0f:70:50:85:cb:25:1c:1f:12:45:6f: a0:4d:7c:e6:28:ab:3f:d3:0a:c4:ee:3c:12:ec:d1:f9:f5:15: de:17:5f:cb:bc:fa:f6:b1:0b:12:4e:6e:48:ed:88:71:5b:8f: a0:6f:75:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUwNTMxMDEzOTQ5WhcNMjUwNjA3MDEzOTQ5WjAYMRYwFAYD VQQDEw02ODNhNWRlNS1mMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTDdFMeyNfHrwkWkkZYfTahMLENArOowkuQ0Bm1FEG/gwItqzSRig0DvwnBM 8Uf96LXS98bF1vmrlEs1VDMawHgrzRLgAX4A3BUCYG7R5eN+FSQeIWwali5crJpT XcouTwNrNrbaoRr/0O5qK7v9Nf9QXYqJ5aU1VicdaRc25Pv9ZU1It7ARazCtnprz ILTHd+V9Qq/rP69Y69LQUx+vWzmj+0lNstos8FhexmG3AG8EXKr7Ce/1/BlwEbOG 1ABE+CLvun5jjYThRg+/ejxa+KayOt3EsAlMhc31asiPTKW6M/zBqZj/khQSz8jl 6+dc8bEVZUMQexZ8hTbgkDDMZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmzTynk 3oux/HUH75pY1ikS4mSiMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKqNmWF7l7UseW5bo8xP7XOWh8puMkoM2J+ImpDCjXClUgDYCJUi40 iIK92Idj8XCkYYPAv8iOEzmoOL+zLIPx38SleWB2Y+31SpaW5UReC7OEtu+z9lwG nO1U8FzqlJdq+sJgJbwyHFGm9dS+X0ks6fqBLjDmPTUDhXuLWzY3U5W8dqxJ47S+ v+pvijrV0WQ3neQEPh+bx9Ap6bbbQZcJH7uwUnh+W+ZEu5dX31BS0dSXCEEA/PLK hnSKTOmOH0oC1Z0IGKSuNRB5EdIGD3BQhcslHB8SRW+gTXzmKKs/0wrE7jwS7NH5 9RXeF1/LvPr2sQsSTm5I7YhxW4+gb3WQ -----END CERTIFICATE-----Generated at Sat May 31 17:14:45 2025 by rpki-client