$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: 2aZmrWw3MFKbPnXVVCrKaeAZiqj6gBZLiKANcbSxbrs= Subject key identifier: 7A:51:61:19:1A:94:DC:53:5F:A9:A8:D7:C8:64:32:E0:9B:C9:EF:5C Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0B27 Signing time: Fri 18 Jul 2025 19:26:08 +0000 Manifest this update: Fri 18 Jul 2025 19:26:07 +0000 Manifest next update: Fri 25 Jul 2025 19:26:07 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: nPDtUv+Cf/yxQkDjULLrolpUyACYPZx8luu4nqKcJZI=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Jul 18 19:26:07 2025 GMT Not After : Jul 25 19:26:07 2025 GMT Subject: CN=687a9fcf-f436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:9b:2c:d6:00:3d:37:45:f6:9f:57:83:54: 0b:0b:00:4e:dc:8e:f9:ef:d6:1c:d1:cb:6f:09:8d: 84:ac:1d:b3:7c:4f:94:ba:0e:1d:80:d5:c0:40:c5: 01:3d:d5:be:0a:24:06:75:37:cd:43:dc:be:72:d9: ac:e9:ae:bc:7c:0e:d2:40:a8:80:b1:ef:08:b2:77: ad:4e:10:b1:16:75:b8:0c:0a:48:1d:4a:c3:a5:92: e6:85:e3:be:65:9f:3e:f9:44:e3:28:1b:9a:dd:13: f4:e5:70:b7:d2:d8:52:e0:e0:16:d2:40:c6:3d:40: 40:c1:7a:7c:73:08:d8:4a:ab:66:9a:e6:dc:ee:55: b3:40:d5:84:66:9d:a2:d7:e7:d1:b1:f8:c7:9b:df: 6c:46:fa:5a:0a:fd:a7:85:b3:4c:1d:55:ae:15:51: 5d:25:1b:93:c5:e0:e4:65:fe:6f:6a:cb:d7:f1:70: 8a:0e:d1:4b:7a:d6:8f:21:bc:f3:55:9f:66:5b:70: 41:ca:83:e3:5a:e7:dc:4d:2b:20:2b:42:45:6d:82: 68:12:9d:fc:43:c1:39:06:59:04:24:ad:bd:38:c4: 71:7c:c5:54:19:f8:5d:5e:2d:90:f7:c1:ff:46:38: 33:71:9d:b5:59:22:c9:d1:84:42:c2:e0:7b:26:15: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:51:61:19:1A:94:DC:53:5F:A9:A8:D7:C8:64:32:E0:9B:C9:EF:5C X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8e:5f:34:2d:5e:54:28:06:5b:ed:2c:de:22:7e:22:15:d9: 87:63:c3:e9:0d:98:8b:4a:6e:d0:63:2d:48:af:dc:18:d7:5c: 08:b6:6c:80:c9:15:c4:c8:80:02:ef:aa:48:e2:28:32:5e:54: ee:4c:d2:f4:be:ee:85:65:cd:3d:ee:67:c8:6b:79:77:20:64: b2:dc:dd:2c:57:1a:97:ae:06:19:05:27:cb:e0:fc:b0:59:05: a1:b0:70:aa:60:a1:ad:40:0f:78:58:4e:16:3d:4b:51:a7:00: b4:d8:26:c3:be:de:3a:05:42:2b:48:a2:17:c9:d7:57:01:04: 4e:99:b8:45:6b:a0:0e:09:16:56:57:78:c6:4f:06:4c:ed:8f: c4:77:f1:69:9f:bd:d5:4f:05:b9:d9:44:f2:81:81:89:86:26: eb:3e:3d:bf:d7:bb:10:05:fa:55:f0:2d:f7:f4:a9:b5:a5:50: 63:b0:ea:53:5f:3d:de:8e:11:63:cc:e6:85:28:2e:65:75:6d: 50:d0:be:78:ee:e8:a2:ab:25:f5:d5:92:ce:48:ec:f1:cf:c5: 39:95:3e:ec:78:9c:83:52:9b:df:68:8f:1f:45:8a:42:5d:40: 7f:e6:dc:8d:74:4c:fa:2e:38:56:af:72:84:12:07:37:6a:b0: 42:1a:29:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUwNzE4MTkyNjA3WhcNMjUwNzI1MTkyNjA3WjAYMRYwFAYD VQQDEw02ODdhOWZjZi1mNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UubLNYAPTdF9p9Xg1QLCwBO3I7579Yc0ctvCY2ErB2zfE+Uug4dgNXAQMUB PdW+CiQGdTfNQ9y+ctms6a68fA7SQKiAse8IsnetThCxFnW4DApIHUrDpZLmheO+ ZZ8++UTjKBua3RP05XC30thS4OAW0kDGPUBAwXp8cwjYSqtmmubc7lWzQNWEZp2i 1+fRsfjHm99sRvpaCv2nhbNMHVWuFVFdJRuTxeDkZf5vasvX8XCKDtFLetaPIbzz VZ9mW3BByoPjWufcTSsgK0JFbYJoEp38Q8E5BlkEJK29OMRxfMVUGfhdXi2Q98H/ RjgzcZ21WSLJ0YRCwuB7JhXwxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpRYRka lNxTX6mo18hkMuCbye9cMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgjl80LV5UKAZb7SzeIn4iFdmHY8PpDZiLSm7QYy1Ir9wY11wItmyA yRXEyIAC76pI4igyXlTuTNL0vu6FZc097mfIa3l3IGSy3N0sVxqXrgYZBSfL4Pyw WQWhsHCqYKGtQA94WE4WPUtRpwC02CbDvt46BUIrSKIXyddXAQROmbhFa6AOCRZW V3jGTwZM7Y/Ed/Fpn73VTwW52UTygYGJhibrPj2/17sQBfpV8C339Km1pVBjsOpT Xz3ejhFjzOaFKC5ldW1Q0L547uiiqyX11ZLOSOzxz8U5lT7seJyDUpvfaI8fRYpC XUB/5tyNdEz6LjhWr3KEEgc3arBCGik8 -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:51 2025 by rpki-client