$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: qXv/Hhwsonduvtmes1LXsiMbbhr8M42aS9CIDCUfQac= Subject key identifier: 5C:D6:4E:49:CC:BF:DE:C8:2E:92:BD:7C:0A:B8:2A:C2:A1:2F:FD:C4 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 33 Signing time: Sat 09 Aug 2025 08:08:36 +0000 Manifest this update: Sat 09 Aug 2025 08:08:36 +0000 Manifest next update: Sat 16 Aug 2025 08:08:36 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: tVji6efYHfMud9Sg1EZZz4BWOW4COyc5xFafTsSgPYQ=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Aug 9 08:08:36 2025 GMT Not After : Aug 16 08:08:36 2025 GMT Subject: CN=68970204-1044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:81:0e:b8:ae:d9:06:a9:0a:28:07:34:0a: e8:94:02:2c:83:f0:47:c4:55:47:3b:f4:83:a4:d3: ea:7a:32:59:95:34:a2:d8:f4:8b:66:56:aa:53:98: 43:22:e2:69:f4:ea:65:a8:71:58:dc:d8:1c:4b:e8: 23:e2:d6:e7:d7:85:aa:23:25:36:87:15:a1:c3:1d: 24:d2:77:31:ee:fd:ec:0c:2d:04:4d:fd:2d:b2:dc: 46:68:72:9c:4e:c1:5d:78:a3:9e:7d:a8:a2:91:8d: f1:fd:1e:3e:1e:00:8e:f1:9c:81:a6:3a:f9:9b:d8: 6e:2e:f4:46:cf:d2:49:6e:00:1a:76:70:0f:e1:50: 57:38:f2:3c:ef:91:71:fb:03:2c:6b:4f:52:a2:7b: 49:e3:ce:e9:38:12:33:d1:11:f8:c3:39:42:8a:e2: dd:91:5d:52:9b:79:22:03:1e:40:73:23:c7:32:81: d0:68:80:23:41:b4:3f:db:15:79:d9:0b:ae:2f:23: 16:e6:f2:a0:d9:4b:ba:d6:58:40:d6:37:0c:ca:f5: 0d:e1:6e:ce:92:81:9a:c9:23:f5:90:dd:b0:06:5c: b7:7b:57:fe:10:6f:3c:47:d8:98:4e:af:f7:11:d1: 6f:c3:15:7d:5d:f5:92:dd:80:86:0a:54:f8:39:f0: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D6:4E:49:CC:BF:DE:C8:2E:92:BD:7C:0A:B8:2A:C2:A1:2F:FD:C4 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bc:aa:6c:83:71:4c:54:2b:6c:20:f9:ed:68:cd:69:22:83: db:d1:00:8d:53:10:fc:ce:cc:98:f5:f4:b6:e3:27:f1:01:61: 13:5c:e3:d1:77:a9:2e:56:8e:5b:95:70:6b:1a:f3:d9:bf:d8: d8:33:7a:be:1c:59:8a:f4:ac:fc:bb:9a:c3:8b:e2:cc:e4:44: 8d:3c:35:7b:57:c0:4a:08:00:43:37:82:14:e1:fe:ca:46:da: 26:18:be:16:04:49:ac:af:aa:7f:f0:e7:28:a0:c0:ca:37:28: fe:57:55:16:37:34:f8:56:88:c5:e4:cd:5e:8f:1b:03:f2:c9: 0f:39:29:01:5d:e7:d0:c0:8f:73:61:e2:ad:4a:78:e3:51:2c: 42:0a:b6:9f:de:4e:fa:b2:7b:77:4e:8b:81:52:ab:a6:32:41: 05:57:f3:7b:a4:e6:77:02:4a:18:f3:3b:c0:e3:58:d2:41:6b: 1a:be:1b:62:c2:6e:76:37:ed:c4:df:e1:4e:d2:ca:14:b4:42: bd:ed:6b:e1:e4:71:f4:29:bb:e5:71:cd:8a:0c:06:cb:f6:a4: 9d:25:15:97:1e:6f:0e:8a:f5:6f:03:08:c6:04:c6:22:dd:ed: 43:04:d3:a4:78:7e:e4:26:4f:d8:46:80:f4:1b:5b:12:b9:9e: 45:7b:2c:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA4MDkwODA4MzZaFw0yNTA4MTYwODA4MzZaMBgxFjAUBgNV BAMTDTY4OTcwMjA0LTEwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCDYEOuK7ZBqkKKAc0CuiUAiyD8EfEVUc79IOk0+p6MlmVNKLY9ItmVqpTmEMi 4mn06mWocVjc2BxL6CPi1ufXhaojJTaHFaHDHSTSdzHu/ewMLQRN/S2y3EZocpxO wV14o559qKKRjfH9Hj4eAI7xnIGmOvmb2G4u9EbP0kluABp2cA/hUFc48jzvkXH7 AyxrT1Kie0njzuk4EjPREfjDOUKK4t2RXVKbeSIDHkBzI8cygdBogCNBtD/bFXnZ C64vIxbm8qDZS7rWWEDWNwzK9Q3hbs6SgZrJI/WQ3bAGXLd7V/4QbzxH2JhOr/cR 0W/DFX1d9ZLdgIYKVPg58IlZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXNZOScy/ 3sgukr18CrgqwqEv/cQwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGy8qmyDcUxUK2wg+e1ozWkig9vRAI1TEPzOzJj19LbjJ/EBYRNc49F3 qS5WjluVcGsa89m/2Ngzer4cWYr0rPy7msOL4szkRI08NXtXwEoIAEM3ghTh/spG 2iYYvhYESayvqn/w5yigwMo3KP5XVRY3NPhWiMXkzV6PGwPyyQ85KQFd59DAj3Nh 4q1KeONRLEIKtp/eTvqye3dOi4FSq6YyQQVX83uk5ncCShjzO8DjWNJBaxq+G2LC bnY37cTf4U7SyhS0Qr3ta+HkcfQpu+VxzYoMBsv2pJ0lFZcebw6K9W8DCMYExiLd 7UME06R4fuQmT9hGgPQbWxK5nkV7LDg= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:46 2025 by rpki-client