$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: UOUJdgkLBXfFx2GQOQ/7Ly3X4jW7LIDL+LNq4UPqNTg= Subject key identifier: B5:50:65:CB:C7:57:D6:8D:99:8D:A2:B0:61:2F:4D:51:8A:56:BE:76 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 16 Signing time: Fri 13 Jun 2025 06:52:40 +0000 Manifest this update: Fri 13 Jun 2025 06:52:39 +0000 Manifest next update: Fri 20 Jun 2025 06:52:39 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: tRjekd7/iCW0R2lz7fH2gRSnDTcCqBhZI2uJdd43hCs=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Jun 13 06:52:39 2025 GMT Not After : Jun 20 06:52:39 2025 GMT Subject: CN=684bcab8-4d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:b4:58:7f:ec:8a:c4:41:90:91:7b:ad:4f: 1e:0e:e6:a4:2a:4c:b8:25:d9:2b:b4:23:37:5b:da: 73:f1:18:83:ca:cf:71:ea:ce:af:b6:c3:f2:52:55: 96:37:82:81:de:1e:5a:d4:e4:c8:59:95:40:9e:83: 85:40:54:06:c4:de:f3:76:2f:ab:ed:6f:da:dc:07: cc:8c:bc:c7:5a:48:f8:24:92:75:38:88:1a:56:ba: 69:68:6b:78:ea:d1:c1:30:54:e3:42:bd:c8:aa:86: d0:f7:71:cb:be:a5:5c:0a:5e:a0:bd:11:fb:64:9f: 3d:a5:ad:8c:29:59:2b:ae:d7:21:6d:46:7f:7c:f2: 17:64:25:ad:da:c2:36:af:9b:c4:fd:8b:a4:7d:b8: e2:7c:84:3d:90:f1:94:3c:49:b0:71:79:f3:3b:c9: 09:d8:36:7f:84:bd:98:89:5d:5a:94:8a:9b:a2:87: 51:42:e7:9a:b1:7b:d8:1c:2f:73:a1:8c:93:b1:f0: 0f:bb:f3:02:83:80:3b:00:98:9c:a6:ec:92:c8:b0: 09:0e:b5:83:fb:e4:17:ee:1b:67:eb:97:a3:f0:99: 19:e2:0f:10:65:01:1a:28:fc:12:cd:5f:53:0d:10: e4:d1:eb:01:52:43:57:d8:8f:e6:da:52:44:cc:0d: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:65:CB:C7:57:D6:8D:99:8D:A2:B0:61:2F:4D:51:8A:56:BE:76 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:84:63:c7:a3:5e:3d:1f:60:c5:5e:21:32:0b:ff:25:96:8f: 04:8d:9d:2b:06:b9:23:94:40:43:bb:43:91:55:75:2a:0a:87: 67:b4:54:36:5b:b8:25:73:fb:6e:39:a7:90:c4:c7:9d:96:48: 63:08:c8:ce:2e:7c:21:09:45:ac:c2:76:90:02:49:e3:6c:74: 0d:8f:49:25:ef:f3:c2:37:27:1b:8a:ac:b3:9e:63:9d:1c:58: 16:3c:28:9e:e5:2b:a2:8d:7f:e9:69:5e:8b:22:53:7a:1f:c5: d3:a2:c8:ba:1e:fe:4c:73:7b:3d:0b:bf:27:ea:d8:d0:79:a2: c5:86:82:3f:d7:57:6d:39:d6:c1:48:ee:e4:4b:d9:27:d8:28: b9:87:e2:3b:2f:ac:2f:78:bd:7d:09:ff:24:9e:8b:4b:d2:4c: 3c:35:d3:01:9e:97:7d:73:70:29:44:3a:59:d2:81:49:9c:30: 25:2b:f2:fe:f0:a7:20:9d:d1:9f:ae:04:ce:61:93:40:af:93: fc:4d:56:de:a3:de:8a:61:f3:2f:92:45:2d:77:d9:88:77:b6: 92:c0:c6:f1:4d:05:4d:ee:a6:f7:96:89:48:aa:08:e9:30:84: a0:0d:3c:50:d0:82:3b:a7:d9:3f:c3:43:9b:2f:52:09:71:4a: 9c:a7:9c:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA2MTMwNjUyMzlaFw0yNTA2MjAwNjUyMzlaMBgxFjAUBgNV BAMTDTY4NGJjYWI4LTRkNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi7bRYf+yKxEGQkXutTx4O5qQqTLgl2Su0Izdb2nPxGIPKz3Hqzq+2w/JSVZY3 goHeHlrU5MhZlUCeg4VAVAbE3vN2L6vtb9rcB8yMvMdaSPgkknU4iBpWumloa3jq 0cEwVONCvciqhtD3ccu+pVwKXqC9Eftknz2lrYwpWSuu1yFtRn988hdkJa3awjav m8T9i6R9uOJ8hD2Q8ZQ8SbBxefM7yQnYNn+EvZiJXVqUipuih1FC55qxe9gcL3Oh jJOx8A+78wKDgDsAmJym7JLIsAkOtYP75BfuG2frl6PwmRniDxBlARoo/BLNX1MN EOTR6wFSQ1fYj+baUkTMDQzlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtVBly8dX 1o2ZjaKwYS9NUYpWvnYwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiEY8ejXj0fYMVeITIL/yWWjwSNnSsGuSOUQEO7Q5FVdSoKh2e0VDZb uCVz+245p5DEx52WSGMIyM4ufCEJRazCdpACSeNsdA2PSSXv88I3JxuKrLOeY50c WBY8KJ7lK6KNf+lpXosiU3ofxdOiyLoe/kxzez0Lvyfq2NB5osWGgj/XV2051sFI 7uRL2SfYKLmH4jsvrC94vX0J/ySei0vSTDw10wGel31zcClEOlnSgUmcMCUr8v7w pyCd0Z+uBM5hk0Cvk/xNVt6j3oph8y+SRS132Yh3tpLAxvFNBU3upveWiUiqCOkw hKANPFDQgjun2T/DQ5svUglxSpynnKM= -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:47 2025 by rpki-client