$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: CuNaXp5LOVvBg2eSYbJ6MJjIuoigYxWB4Xfde9vtulE= Subject key identifier: 94:A8:B3:F7:7B:22:99:EA:3A:A4:76:7E:64:FC:C3:7F:A2:5F:5B:6F Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0B33 Signing time: Sun 10 Aug 2025 19:13:07 +0000 Manifest this update: Sun 10 Aug 2025 19:13:07 +0000 Manifest next update: Sun 17 Aug 2025 19:13:07 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: qbkuWM6iS04l8pS+BqZj10+GnMpJGy3d01o5/k0ZJmY=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Aug 10 19:13:07 2025 GMT Not After : Aug 17 19:13:07 2025 GMT Subject: CN=6898ef43-5d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:c5:d4:c3:2a:79:1c:10:da:a9:87:32:91: 20:ec:8d:72:cf:d7:a1:ce:67:85:96:46:41:5c:c4: 6a:2b:ca:ef:ba:68:c4:5f:87:dd:61:d6:1c:73:31: 18:28:98:ac:22:12:73:3d:18:e4:fd:49:0d:28:4f: b5:15:ab:c6:b7:93:43:1c:23:b8:7c:18:9e:b1:7d: 90:eb:80:a3:e9:d8:c2:a8:93:cc:5d:5d:ab:fc:c2: 59:44:27:8b:e6:c8:fd:15:99:83:34:79:d8:1d:6e: 27:ef:b2:1c:67:1e:ad:16:0d:e5:15:ac:a7:f3:25: 73:c9:5d:74:d9:68:fd:c9:b0:aa:18:59:7f:82:ed: 4a:cb:94:35:83:7b:6c:8b:83:0c:65:2c:73:7a:93: 35:df:52:46:76:3e:e8:cd:6d:ff:4a:d5:64:02:34: d0:a5:c1:e6:60:16:8d:ee:0d:83:80:31:2c:c6:7c: 7d:b2:27:c7:64:3c:91:06:31:ed:bb:58:46:cb:98: ac:fa:b6:7a:9a:89:c3:72:e1:9e:df:15:1b:72:12: b5:d5:91:2b:97:b1:3a:e3:9d:59:45:c8:19:d6:2d: b6:47:fc:3f:a3:ab:e4:8d:d9:86:1e:4a:d5:7d:01: e5:32:27:88:43:30:4e:1a:1b:9c:04:6e:bb:5e:35: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A8:B3:F7:7B:22:99:EA:3A:A4:76:7E:64:FC:C3:7F:A2:5F:5B:6F X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0e:61:a2:20:0d:3a:8c:c2:de:e1:ef:1b:ee:c4:df:58:cb: 9a:a6:8f:97:1f:a2:64:72:69:1f:f7:bd:68:69:e6:8a:f6:48: 8f:21:a5:7c:ae:89:2b:fd:7a:75:7f:95:29:b2:ff:6b:14:2b: 21:10:7f:a4:e4:4f:87:bd:42:a0:fa:9e:f0:0d:42:e3:ac:b9: 4f:21:60:9b:9b:34:88:89:c7:2e:1c:31:2e:71:13:c9:6b:1c: 08:01:81:4e:2b:88:cd:c9:c8:58:af:4a:92:df:fd:9c:3b:93: 52:a3:96:51:07:12:54:1f:70:b5:78:8c:1d:93:77:c6:48:3f: 72:09:30:99:76:7d:34:70:7b:d6:96:33:61:03:7e:2a:9b:fd: 20:0a:51:40:a2:4e:24:df:71:dc:c0:a2:23:7f:97:9c:40:46: f7:c6:f5:41:b1:3b:d9:7f:77:83:f6:69:87:ca:7e:25:a6:08: 01:f8:8c:65:89:47:a0:1d:07:01:ad:b3:b3:50:95:ca:5b:a5: ef:7f:03:87:e2:9c:cd:51:59:29:74:e2:36:d1:ec:3e:48:de: ec:6d:4f:b0:37:8a:84:b2:8b:ef:7b:40:b2:f3:87:57:d2:00: 54:12:e6:3d:c9:ce:e1:97:e0:db:47:1f:92:d9:cc:99:2e:e0: e6:82:19:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUwODEwMTkxMzA3WhcNMjUwODE3MTkxMzA3WjAYMRYwFAYD VQQDEw02ODk4ZWY0My01ZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj/F1MMqeRwQ2qmHMpEg7I1yz9ehzmeFlkZBXMRqK8rvumjEX4fdYdYcczEY KJisIhJzPRjk/UkNKE+1FavGt5NDHCO4fBiesX2Q64Cj6djCqJPMXV2r/MJZRCeL 5sj9FZmDNHnYHW4n77IcZx6tFg3lFayn8yVzyV102Wj9ybCqGFl/gu1Ky5Q1g3ts i4MMZSxzepM131JGdj7ozW3/StVkAjTQpcHmYBaN7g2DgDEsxnx9sifHZDyRBjHt u1hGy5is+rZ6monDcuGe3xUbchK11ZErl7E6451ZRcgZ1i22R/w/o6vkjdmGHkrV fQHlMieIQzBOGhucBG67XjXdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSos/d7 IpnqOqR2fmT8w3+iX1tvMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIDmGiIA06jMLe4e8b7sTfWMuapo+XH6Jkcmkf971oaeaK9kiPIaV8 rokr/Xp1f5Upsv9rFCshEH+k5E+HvUKg+p7wDULjrLlPIWCbmzSIiccuHDEucRPJ axwIAYFOK4jNychYr0qS3/2cO5NSo5ZRBxJUH3C1eIwdk3fGSD9yCTCZdn00cHvW ljNhA34qm/0gClFAok4k33HcwKIjf5ecQEb3xvVBsTvZf3eD9mmHyn4lpggB+Ixl iUegHQcBrbOzUJXKW6XvfwOH4pzNUVkpdOI20ew+SN7sbU+wN4qEsovve0Cy84dX 0gBUEuY9yc7hl+DbRx+S2cyZLuDmghk+ -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:56 2025 by rpki-client