$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: +82F+QsWoK9Q+jHvBgjtChBIZ5BGPekCrTQUmICp9rg= Subject key identifier: 58:BA:B2:00:93:A0:9F:0D:B5:A7:5E:EF:DC:8C:ED:AA:17:EC:FA:FD Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 0302 Signing time: Sun 19 Oct 2025 03:19:18 +0000 Manifest this update: Sun 19 Oct 2025 03:19:17 +0000 Manifest next update: Sun 26 Oct 2025 03:19:17 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: ZBrh6jYzaWJcZ7PzKeN2Xg0H78O/uSnn98foF3QEE54=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: M5PKDMLMdavH6GN3M2mqYtrVkK8hWINqy8WhALabjko=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: 0v3ssTpGYmDhNqBqiZ+NsO29KdOi8s2cwnExbbi6d8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Oct 19 03:19:17 2025 GMT Not After : Oct 26 03:19:17 2025 GMT Subject: CN=68f458b5-7630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:ac:c2:d4:19:8a:ab:9d:2c:2d:1a:25:b2: c1:b8:0a:be:c7:92:24:e8:bf:4c:51:a9:0e:14:33: fd:43:74:e9:1c:b5:92:b5:64:9d:7a:fc:64:68:8d: 71:96:57:46:b8:dc:83:d0:77:d7:1b:72:26:15:ce: cd:c4:a2:0e:be:f0:bf:be:67:75:8e:91:d9:bf:62: 0b:7f:81:db:28:3b:ab:f7:f1:01:82:d7:96:bc:2d: a9:aa:6e:28:16:3d:41:19:e1:38:c5:1d:27:f3:46: f8:cf:dd:8d:c6:a1:02:19:cc:18:11:c7:e2:4e:f4: 1e:0c:dc:d3:64:e6:3c:5a:91:26:8d:ae:5b:02:81: 77:14:ed:a0:da:be:87:42:3c:85:54:2f:8c:cf:bd: 87:14:d9:95:f1:45:4f:e0:fa:e1:77:e2:7c:35:8f: fe:58:9b:62:a1:32:d9:81:82:13:e6:9d:ad:22:57: d1:df:ad:ee:0d:8b:d8:aa:9d:91:da:0f:f2:15:4b: 15:2a:ef:69:aa:9f:56:5e:8d:8b:f6:d4:ca:55:b3: b8:86:fa:c0:cd:cb:4a:c7:a0:1f:7a:d6:1a:bd:06: 6e:c8:50:fc:3f:d2:cc:ad:44:88:37:25:9e:fd:64: 2a:8c:6c:73:ea:55:2f:2c:fd:96:44:0e:7c:4b:60: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BA:B2:00:93:A0:9F:0D:B5:A7:5E:EF:DC:8C:ED:AA:17:EC:FA:FD X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:29:e3:e7:eb:86:c4:b7:94:73:65:49:e3:dd:c3:b9:d6:14: 35:f6:2e:35:a4:85:ac:dc:af:85:22:d8:c3:6e:fc:04:37:de: ae:75:e3:3b:4d:25:e8:bb:c1:ac:2d:55:3d:ac:1e:b6:ea:2a: bb:df:b5:a3:5d:24:f4:1b:89:f3:3c:2d:c0:0a:c7:4f:e2:cb: 3d:8e:4d:45:b4:c3:af:76:ec:56:41:d3:a1:35:fa:83:ca:54: f2:3a:b6:01:e7:2e:1e:30:27:5b:55:6e:c9:cc:15:17:34:8b: de:45:60:44:45:34:7a:02:4d:10:4b:37:85:90:80:64:a5:6b: 24:0d:2a:cf:a4:a8:4d:98:50:55:fd:42:84:c5:b4:e7:98:52: 54:77:02:2d:c7:27:d9:cc:04:31:0c:ea:7e:00:36:74:e3:d0: 55:86:ce:08:fa:71:d3:a2:8e:74:b8:85:9a:90:6b:a3:ae:35: c1:17:54:38:66:a9:53:91:98:05:df:83:5f:42:c5:f8:4e:30: 4b:46:c9:4f:e0:06:3e:ae:b1:3c:48:97:6f:35:22:0f:b4:9f: 52:fe:39:a9:42:d7:ff:6f:4e:fa:bd:d6:ed:c6:4a:c5:24:a2: 1e:d2:f1:4f:11:8e:6c:c4:47:26:b0:ed:b8:4e:07:c3:84:f5: 9e:08:1b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjUxMDE5MDMxOTE3WhcNMjUxMDI2MDMxOTE3WjAYMRYwFAYD VQQDEw02OGY0NThiNS03NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp+swtQZiqudLC0aJbLBuAq+x5Ik6L9MUakOFDP9Q3TpHLWStWSdevxkaI1x lldGuNyD0HfXG3ImFc7NxKIOvvC/vmd1jpHZv2ILf4HbKDur9/EBgteWvC2pqm4o Fj1BGeE4xR0n80b4z92NxqECGcwYEcfiTvQeDNzTZOY8WpEmja5bAoF3FO2g2r6H QjyFVC+Mz72HFNmV8UVP4Prhd+J8NY/+WJtioTLZgYIT5p2tIlfR363uDYvYqp2R 2g/yFUsVKu9pqp9WXo2L9tTKVbO4hvrAzctKx6AfetYavQZuyFD8P9LMrUSINyWe /WQqjGxz6lUvLP2WRA58S2CatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi6sgCT oJ8Ntade79yM7aoX7Pr9MB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdKePn64bEt5RzZUnj3cO51hQ19i41pIWs3K+FItjDbvwEN96udeM7 TSXou8GsLVU9rB626iq737WjXST0G4nzPC3ACsdP4ss9jk1FtMOvduxWQdOhNfqD ylTyOrYB5y4eMCdbVW7JzBUXNIveRWBERTR6Ak0QSzeFkIBkpWskDSrPpKhNmFBV /UKExbTnmFJUdwItxyfZzAQxDOp+ADZ049BVhs4I+nHToo50uIWakGujrjXBF1Q4 ZqlTkZgF34NfQsX4TjBLRslP4AY+rrE8SJdvNSIPtJ9S/jmpQtf/b076vdbtxkrF JKIe0vFPEY5sxEcmsO24TgfDhPWeCBuH -----END CERTIFICATE-----Generated at Mon Oct 20 16:03:50 2025 by rpki-client