$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: 5LL6GJy1d0yVRdSKc/xYlBrJub8tqY0LnCVF2j90uoo= Subject key identifier: 30:40:43:A8:02:4B:71:BA:87:34:F9:FE:A7:44:BD:08:4E:8E:24:4D Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0564 Signing time: Fri 18 Jul 2025 23:40:43 +0000 Manifest this update: Fri 18 Jul 2025 23:40:43 +0000 Manifest next update: Fri 25 Jul 2025 23:40:43 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: 0OXZ/Nlc1eyMiwTO0WFGaXyv6al/IjRQcB7SIINasdk=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Jul 18 23:40:43 2025 GMT Not After : Jul 25 23:40:43 2025 GMT Subject: CN=687adb7b-e686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:45:46:9c:1c:40:39:3d:cb:a7:86:2c:d8: bc:30:ad:e6:26:e0:9e:33:a4:1f:60:19:be:5e:c8: 70:b6:79:56:6a:85:9e:3b:e0:42:96:25:a9:3e:e9: e1:1a:cb:17:df:8b:fd:67:40:f9:42:5d:c5:41:e6: 5f:c2:28:d9:bc:22:69:73:38:5a:a4:42:cc:ec:fb: c7:4d:28:e2:77:28:73:a7:e9:90:97:c4:90:74:bb: e2:8f:ff:36:3a:ac:fd:bc:b0:7f:d7:4d:58:b4:ac: c2:84:59:16:fd:75:ba:ae:0d:fb:63:e3:43:ca:3f: e9:da:2e:11:65:02:01:8f:16:17:a4:28:f1:5a:fa: f8:45:f0:e4:aa:24:6c:68:52:28:3c:60:88:58:cb: 94:f6:43:f2:3b:de:6c:ce:7c:35:b3:5b:8b:2c:40: 70:30:e7:e0:9a:f8:85:4f:af:c4:22:44:50:66:c8: d4:5c:23:b9:45:25:60:b8:9b:73:2d:1b:77:ee:09: 2b:9e:6f:b3:3f:b9:79:7f:98:bd:29:5e:e7:60:f5: fa:95:76:af:7d:00:b3:62:bc:05:6f:37:8d:27:00: 1f:3e:eb:b2:ac:b8:7b:5b:fd:e1:ee:02:9b:e8:ab: 5c:57:d7:53:2c:7a:7c:29:cb:44:c4:84:08:25:bf: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:40:43:A8:02:4B:71:BA:87:34:F9:FE:A7:44:BD:08:4E:8E:24:4D X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ce:7d:bf:94:6f:89:49:a4:5f:44:63:8b:64:14:aa:ff:3e: 9f:4c:88:c3:c3:88:a7:d0:e6:02:b8:7e:1c:60:fe:11:c1:4c: 3a:46:5e:99:3e:c9:d8:02:f7:2a:57:ce:a1:dc:1a:71:81:60: 44:47:6e:4d:1d:85:06:ef:12:cc:e9:de:aa:1b:55:c2:48:5d: f7:cd:01:ee:73:5c:5f:f5:8a:a9:a7:25:1a:a5:0f:be:b7:eb: 2f:a4:a6:fa:97:5a:dd:ee:3e:d2:80:f0:77:cf:d5:55:ea:d5: c6:00:f3:c9:45:d2:b8:5e:4f:10:c2:f5:52:57:1c:ca:55:6d: 96:41:28:f5:ca:8c:2b:c3:46:e0:6c:37:0c:d2:42:c1:72:bd: c2:2c:c8:75:6a:a6:b5:06:47:b6:6b:02:f9:8c:4c:c8:51:05: c3:08:8c:44:ba:b7:93:c5:c7:8b:ed:7c:c2:71:56:57:32:56: 08:1b:2b:0f:51:6e:02:72:9b:c0:e8:c8:ba:56:99:21:5c:95: df:48:60:ae:0f:8c:d3:aa:90:17:b0:31:6c:1f:b5:a1:48:9e: ca:b9:ea:e1:2f:70:c0:54:ea:30:77:9f:84:13:15:90:c4:dd: ed:ed:a1:78:e7:48:7a:8f:7d:28:3b:20:92:7d:68:34:c1:b8: 97:0a:25:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUwNzE4MjM0MDQzWhcNMjUwNzI1MjM0MDQzWjAYMRYwFAYD VQQDEw02ODdhZGI3Yi1lNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn1FRpwcQDk9y6eGLNi8MK3mJuCeM6QfYBm+XshwtnlWaoWeO+BCliWpPunh GssX34v9Z0D5Ql3FQeZfwijZvCJpczhapELM7PvHTSjidyhzp+mQl8SQdLvij/82 Oqz9vLB/101YtKzChFkW/XW6rg37Y+NDyj/p2i4RZQIBjxYXpCjxWvr4RfDkqiRs aFIoPGCIWMuU9kPyO95sznw1s1uLLEBwMOfgmviFT6/EIkRQZsjUXCO5RSVguJtz LRt37gkrnm+zP7l5f5i9KV7nYPX6lXavfQCzYrwFbzeNJwAfPuuyrLh7W/3h7gKb 6KtcV9dTLHp8KctExIQIJb8Q4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBAQ6gC S3G6hzT5/qdEvQhOjiRNMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAczn2/lG+JSaRfRGOLZBSq/z6fTIjDw4in0OYCuH4cYP4RwUw6Rl6Z PsnYAvcqV86h3BpxgWBER25NHYUG7xLM6d6qG1XCSF33zQHuc1xf9YqppyUapQ++ t+svpKb6l1rd7j7SgPB3z9VV6tXGAPPJRdK4Xk8QwvVSVxzKVW2WQSj1yowrw0bg bDcM0kLBcr3CLMh1aqa1Bke2awL5jEzIUQXDCIxEureTxceL7XzCcVZXMlYIGysP UW4CcpvA6Mi6VpkhXJXfSGCuD4zTqpAXsDFsH7WhSJ7KuerhL3DAVOowd5+EExWQ xN3t7aF450h6j30oOyCSfWg0wbiXCiV6 -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:06 2025 by rpki-client