$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: FK8RwsOsy9tQyHwEbFZvvMicY6tC/1UE9ujedIay8eY= Subject key identifier: 60:79:45:A0:C6:80:6D:0E:BF:8A:39:2D:41:B7:1B:A5:AF:3C:6C:1D Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 60 Signing time: Mon 03 Nov 2025 07:05:46 +0000 Manifest this update: Mon 03 Nov 2025 07:05:46 +0000 Manifest next update: Mon 10 Nov 2025 07:05:46 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: IV1FbQoc+gXU9xu6+226uKccI2+n5s+u1EM9xJaa3Qw=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: pomJDchvt2RN7hAYLHjLN2Mga9nkvGsLFywiYuDOK+8=) 4: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Nov 3 07:05:46 2025 GMT Not After : Nov 10 07:05:46 2025 GMT Subject: CN=6908544a-37a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:81:ca:c8:ee:03:c7:d5:2a:d5:bd:e7:a3:55: 8c:7a:99:01:a7:00:c2:e9:cc:10:3c:74:60:d0:b0: d5:90:7d:57:01:8b:be:8e:ab:db:ae:13:15:b0:ca: e8:1d:bd:19:77:68:54:be:71:f7:0c:35:e0:aa:22: 29:5b:b9:34:99:04:b0:e5:f4:aa:cd:b3:b1:ac:fb: 88:05:ad:96:a6:57:1a:7e:2a:89:bb:2b:f2:cb:f6: 8a:55:a7:d4:97:63:03:bb:3f:f8:d6:92:16:cc:29: 07:f9:67:53:c7:5b:2a:46:01:ec:95:98:54:66:3c: c1:d3:a2:c3:e0:cf:0a:16:f9:4f:de:43:c6:10:00: ed:66:63:db:26:45:23:b1:86:f3:36:6d:36:b2:8b: ca:85:06:3b:32:a5:07:02:81:6e:6c:b8:09:ee:2d: 16:49:89:f1:2c:a1:f7:8e:30:70:ee:70:5c:f0:4c: 34:40:9b:6c:88:09:31:ed:e7:ab:ce:b6:d7:cf:a8: 98:34:f2:ce:77:c2:b3:15:98:31:10:ca:17:da:33: e1:7e:e6:e2:2a:c7:b0:6d:61:35:ed:02:db:0b:cd: ba:07:cd:0b:a2:1b:9d:e4:c5:03:f0:ec:15:4a:27: ee:a5:3a:4b:6a:7a:6f:2b:2b:8a:bd:7e:8b:92:4a: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:45:A0:C6:80:6D:0E:BF:8A:39:2D:41:B7:1B:A5:AF:3C:6C:1D X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:94:00:17:dc:34:46:93:00:c9:b7:8b:8e:58:ab:d7:f9:70: 5f:96:ff:e0:05:94:09:28:7d:1e:e3:d1:ff:7c:7c:44:f7:77: 0a:c0:f0:7f:14:cd:48:2a:9a:30:e9:a1:b1:05:f8:30:c3:3a: a4:45:9b:f0:35:42:4e:12:d1:50:92:df:f0:dc:a1:34:bd:36: 4c:01:a5:d8:3d:67:07:62:0e:d6:d5:c2:0e:fc:b5:06:f3:2f: 87:5c:e7:71:77:35:17:4e:85:e6:d1:dd:f5:a1:4d:32:e7:8e: 19:87:45:be:87:f8:d1:35:5f:ea:89:fd:a3:eb:19:71:3c:e7: 52:4f:44:40:14:01:b1:4f:30:a3:c0:63:ea:0d:e5:8a:a9:63: 08:12:98:c4:35:1d:90:4c:ab:b6:78:a9:f5:f0:2f:e5:1b:60: fe:dd:1b:1d:63:ee:11:81:5c:e5:62:2a:b5:72:1d:8b:c9:58: 31:59:af:99:40:54:10:68:a9:95:65:a3:11:02:2b:e0:57:3f: 37:42:cb:80:d1:ab:67:08:77:2d:01:2b:dc:10:ec:80:aa:e1: 47:66:64:3e:42:d0:a5:b6:50:49:ea:9b:a0:ba:6f:aa:b6:b0: 85:bd:23:57:0a:50:77:81:ff:de:38:dc:de:7b:20:4e:50:60: 78:d6:61:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTExMDMwNzA1NDZaFw0yNTExMTAwNzA1NDZaMBgxFjAUBgNV BAMTDTY5MDg1NDRhLTM3YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDngcrI7gPH1SrVveejVYx6mQGnAMLpzBA8dGDQsNWQfVcBi76Oq9uuExWwyugd vRl3aFS+cfcMNeCqIilbuTSZBLDl9KrNs7Gs+4gFrZamVxp+Kom7K/LL9opVp9SX YwO7P/jWkhbMKQf5Z1PHWypGAeyVmFRmPMHTosPgzwoW+U/eQ8YQAO1mY9smRSOx hvM2bTayi8qFBjsypQcCgW5suAnuLRZJifEsofeOMHDucFzwTDRAm2yICTHt56vO ttfPqJg08s53wrMVmDEQyhfaM+F+5uIqx7BtYTXtAtsLzboHzQuiG53kxQPw7BVK J+6lOktqem8rK4q9fouSSsh9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYHlFoMaA bQ6/ijktQbcbpa88bB0wHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiUABfcNEaTAMm3i45Yq9f5cF+W/+AFlAkofR7j0f98fET3dwrA8H8U zUgqmjDpobEF+DDDOqRFm/A1Qk4S0VCS3/DcoTS9NkwBpdg9ZwdiDtbVwg78tQbz L4dc53F3NRdOhebR3fWhTTLnjhmHRb6H+NE1X+qJ/aPrGXE851JPREAUAbFPMKPA Y+oN5YqpYwgSmMQ1HZBMq7Z4qfXwL+UbYP7dGx1j7hGBXOViKrVyHYvJWDFZr5lA VBBoqZVloxECK+BXPzdCy4DRq2cIdy0BK9wQ7ICq4UdmZD5C0KW2UEnqm6C6b6q2 sIW9I1cKUHeB/9443N57IE5QYHjWYdM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:09 2025 by rpki-client