$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: qV1b/n7cYDf2cH/cSzESAIZ/mrcsVDlY5z7FBkOMKfc= Subject key identifier: A7:EE:C8:70:B8:C1:FE:76:3D:89:4E:AE:C1:83:9B:8E:9E:99:83:93 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0C74 Signing time: Tue 12 Aug 2025 18:30:23 +0000 Manifest this update: Tue 12 Aug 2025 18:30:23 +0000 Manifest next update: Tue 19 Aug 2025 18:30:23 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: YAnNSVkr56/rlgK5ckZUw1XCJU34z4k3CyuA9xYwyMM=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Aug 12 18:30:23 2025 GMT Not After : Aug 19 18:30:23 2025 GMT Subject: CN=689b883f-c9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:b0:1f:6f:3e:81:22:0a:a5:e2:1d:39:2f: 23:52:82:75:db:e7:9b:62:0e:1d:08:a4:24:2c:2e: 86:8c:29:e5:51:5b:6b:17:e9:21:10:82:9b:38:00: 94:f5:ca:32:96:ab:13:49:08:69:21:74:b1:c6:9a: b6:40:c4:13:b2:c6:4a:b7:1f:10:10:08:8b:0f:36: 5a:65:07:72:e4:14:db:15:a8:85:9a:18:cb:95:a6: dd:89:24:b8:85:31:c3:a0:f8:2e:8a:74:3e:0f:5b: ed:1b:de:d9:33:ee:0b:71:68:bc:16:60:f5:13:5d: 80:2f:a3:1e:6b:83:29:f3:33:67:f0:73:16:b8:c5: 9e:d3:2c:fc:7c:4a:bc:6c:f2:77:06:62:2e:4c:6e: a0:d0:87:f4:41:9a:dd:bf:da:23:69:f9:7d:7d:b9: eb:5d:09:9e:a0:fe:46:d4:a4:83:52:b2:c0:f4:82: 19:59:80:ad:2a:7c:4c:02:82:eb:9c:46:07:4f:70: 89:1f:a8:9a:e3:06:b8:7a:76:2a:05:7b:1f:42:d0: b9:c5:b4:e9:06:d7:b3:40:ae:78:69:78:48:19:d9: 4d:d0:15:4a:6c:92:27:e9:06:54:f2:03:c7:0a:2c: 8a:0d:fb:a0:d6:2e:73:0b:5e:63:04:cc:16:7c:8e: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EE:C8:70:B8:C1:FE:76:3D:89:4E:AE:C1:83:9B:8E:9E:99:83:93 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:1b:6d:a5:b9:79:9b:e2:ed:a1:ce:65:16:0e:5a:0e:9f: 6b:6f:d8:0d:27:62:2a:28:9d:63:07:ec:0d:6a:a6:ff:1f:8f: 9c:89:e1:c5:29:a5:4e:96:12:dc:37:48:8d:e7:ed:4e:59:1b: 2b:13:47:8b:7b:40:73:56:c4:d4:55:a3:4e:cd:d1:39:c0:fd: b7:6e:86:41:ac:16:7f:5a:69:e3:16:f2:1f:31:60:73:04:fe: 18:34:4e:b1:19:e5:52:67:54:4a:3a:67:41:3a:2e:36:51:3d: cb:69:d6:60:ee:97:b1:55:e6:69:9c:fe:36:bb:a3:1c:9b:26: 83:9b:28:65:2f:40:05:a9:9b:6e:f1:4d:f4:0e:3f:79:a7:06: a3:d0:50:6d:1d:6a:d8:2f:09:7e:99:7c:03:6f:aa:20:de:15: ea:4e:ca:d1:af:f8:d7:11:fc:5b:62:da:88:81:cb:7f:25:4b: 9e:f7:17:f8:9c:67:fc:6a:df:1b:4c:fe:9e:a8:7d:9e:03:e4: f7:af:28:b0:30:10:c5:d4:04:73:97:6f:04:7e:ec:f2:fe:36: 59:b8:bc:00:10:f3:da:9a:aa:0b:7c:3e:81:da:60:b0:aa:e1: 28:38:78:4a:84:45:09:c1:76:c7:36:4b:65:d8:8e:49:3d:94: 29:9e:0a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUwODEyMTgzMDIzWhcNMjUwODE5MTgzMDIzWjAYMRYwFAYD VQQDEw02ODliODgzZi1jOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7uwH28+gSIKpeIdOS8jUoJ12+ebYg4dCKQkLC6GjCnlUVtrF+khEIKbOACU 9coylqsTSQhpIXSxxpq2QMQTssZKtx8QEAiLDzZaZQdy5BTbFaiFmhjLlabdiSS4 hTHDoPguinQ+D1vtG97ZM+4LcWi8FmD1E12AL6Mea4Mp8zNn8HMWuMWe0yz8fEq8 bPJ3BmIuTG6g0If0QZrdv9ojafl9fbnrXQmeoP5G1KSDUrLA9IIZWYCtKnxMAoLr nEYHT3CJH6ia4wa4enYqBXsfQtC5xbTpBtezQK54aXhIGdlN0BVKbJIn6QZU8gPH CiyKDfug1i5zC15jBMwWfI6ZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfuyHC4 wf52PYlOrsGDm46emYOTMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQpRttpbl5m+Ltoc5lFg5aDp9rb9gNJ2IqKJ1jB+wNaqb/H4+cieHF KaVOlhLcN0iN5+1OWRsrE0eLe0BzVsTUVaNOzdE5wP23boZBrBZ/WmnjFvIfMWBz BP4YNE6xGeVSZ1RKOmdBOi42UT3LadZg7pexVeZpnP42u6McmyaDmyhlL0AFqZtu 8U30Dj95pwaj0FBtHWrYLwl+mXwDb6og3hXqTsrRr/jXEfxbYtqIgct/JUue9xf4 nGf8at8bTP6eqH2eA+T3ryiwMBDF1ARzl28Efuzy/jZZuLwAEPPamqoLfD6B2mCw quEoOHhKhEUJwXbHNktl2I5JPZQpngo3 -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:31 2025 by rpki-client