$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: j2gx2Wbr90/ffp5tqOR2L1npDMl2J+G/naA3/XjP1Fc= Subject key identifier: 12:AD:30:88:7D:22:61:34:1B:22:0A:04:FC:B4:92:C8:FE:B8:42:B7 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0C9E Signing time: Sun 02 Nov 2025 18:16:11 +0000 Manifest this update: Sun 02 Nov 2025 18:16:10 +0000 Manifest next update: Sun 09 Nov 2025 18:16:10 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: b4mvl3ygfDnOuW8J5nAukIPu7vPjwwz/wUqwEYCuerU=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Nov 2 18:16:10 2025 GMT Not After : Nov 9 18:16:10 2025 GMT Subject: CN=69079fea-70e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:7a:5b:3b:ff:71:09:94:89:b3:e1:a4:b3: f0:2f:65:2f:b9:0a:71:f9:0b:58:eb:c9:65:7e:ea: 2a:61:8f:3f:58:52:3e:91:0e:f0:3d:03:b6:fa:e1: 32:f4:5c:84:5c:d3:75:a6:aa:ad:15:9e:96:53:1d: 76:8a:84:27:4f:8a:7b:94:2e:0c:da:1e:3d:4c:0a: c6:f9:c7:52:92:e5:47:0b:65:a0:37:91:78:3f:09: 19:0a:48:d9:6a:b4:7b:7c:e1:6f:37:4f:67:dd:01: 9b:4e:25:8a:74:5b:0d:2d:9e:81:42:69:9b:39:3c: f3:2d:ee:06:70:5a:66:c5:f4:d2:48:40:e5:c0:ea: 24:39:31:88:2f:c8:ee:08:93:9e:d0:eb:b2:b1:1f: 63:db:ea:0a:b0:1e:b7:64:67:9d:f9:5e:42:b8:f2: d9:e1:98:37:31:30:16:49:6c:c4:de:2e:29:45:43: 58:95:e7:18:a7:f0:77:58:04:5c:d6:6b:47:ec:fe: 28:63:b9:cb:a4:ac:3f:d9:dc:b2:db:fc:c1:4f:d2: 31:9b:5f:0c:1a:b8:5d:7e:55:39:8e:50:f5:49:40: d2:70:8d:e1:f9:4d:0e:04:ad:52:ee:6f:90:f2:02: 8b:d1:68:c7:a8:14:f0:10:4d:d2:f4:31:46:f2:18: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:30:88:7D:22:61:34:1B:22:0A:04:FC:B4:92:C8:FE:B8:42:B7 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:52:45:c9:f5:d6:03:d2:a5:42:9f:4c:2b:00:9b:bf:e3:a9: 1f:91:90:f7:82:5f:0b:33:04:4f:14:68:a8:d0:16:93:64:9a: af:08:df:50:29:12:f9:71:60:15:b4:55:49:73:25:3f:03:6e: c0:48:29:2a:ca:88:67:e4:d8:b0:94:b8:da:bf:c9:b7:aa:7a: 8a:db:ed:26:06:3d:dd:db:e8:44:ef:6d:03:fa:0c:89:0c:c0: 89:1e:25:28:cd:84:77:ef:c9:52:31:59:02:fe:8b:b7:ab:12: d7:9c:f6:56:c5:84:73:66:38:8c:1d:8d:03:ad:41:b0:0e:64: e7:e4:67:3b:8d:23:77:61:2c:6a:98:eb:4a:51:83:ae:e5:53: 9c:17:3f:63:1b:4b:5f:a4:1a:f2:58:b2:1d:69:c1:8c:9b:19: e0:6f:54:9d:47:18:96:ce:03:06:a1:bc:68:61:08:a0:f7:49: a9:a5:60:d5:39:5c:5a:cc:d1:7b:ab:70:be:73:f5:06:e9:3a: 11:f3:2e:3d:4b:ad:d1:80:a4:8d:ad:6d:42:10:84:a3:f1:49: 3f:4b:b5:12:9a:e1:f6:6f:51:8a:0d:04:a6:de:f5:44:62:34: 13:32:97:16:5a:45:ed:f5:f9:bf:2e:0a:57:1e:d1:a4:9c:b6: 37:3c:b5:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUxMTAyMTgxNjEwWhcNMjUxMTA5MTgxNjEwWjAYMRYwFAYD VQQDEw02OTA3OWZlYS03MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdZ6Wzv/cQmUibPhpLPwL2UvuQpx+QtY68llfuoqYY8/WFI+kQ7wPQO2+uEy 9FyEXNN1pqqtFZ6WUx12ioQnT4p7lC4M2h49TArG+cdSkuVHC2WgN5F4PwkZCkjZ arR7fOFvN09n3QGbTiWKdFsNLZ6BQmmbOTzzLe4GcFpmxfTSSEDlwOokOTGIL8ju CJOe0OuysR9j2+oKsB63ZGed+V5CuPLZ4Zg3MTAWSWzE3i4pRUNYlecYp/B3WARc 1mtH7P4oY7nLpKw/2dyy2/zBT9Ixm18MGrhdflU5jlD1SUDScI3h+U0OBK1S7m+Q 8gKL0WjHqBTwEE3S9DFG8hiMJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKtMIh9 ImE0GyIKBPy0ksj+uEK3MB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpUkXJ9dYD0qVCn0wrAJu/46kfkZD3gl8LMwRPFGio0BaTZJqvCN9Q KRL5cWAVtFVJcyU/A27ASCkqyohn5NiwlLjav8m3qnqK2+0mBj3d2+hE720D+gyJ DMCJHiUozYR378lSMVkC/ou3qxLXnPZWxYRzZjiMHY0DrUGwDmTn5Gc7jSN3YSxq mOtKUYOu5VOcFz9jG0tfpBryWLIdacGMmxngb1SdRxiWzgMGobxoYQig90mppWDV OVxazNF7q3C+c/UG6ToR8y49S63RgKSNrW1CEISj8Uk/S7USmuH2b1GKDQSm3vVE YjQTMpcWWkXt9fm/LgpXHtGknLY3PLXk -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:13 2025 by rpki-client