$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: bwkAh/k+KX8A/4eyK85EG3TqW83B5P2loEEmCukJIQs= Subject key identifier: 3C:B5:C3:B1:1C:96:44:D7:6D:31:C1:B3:F0:2C:DB:8E:97:CF:AC:C7 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 021B Signing time: Sat 11 Oct 2025 04:50:01 +0000 Manifest this update: Sat 11 Oct 2025 04:50:00 +0000 Manifest next update: Sat 18 Oct 2025 04:50:00 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: aL9eRyJRK/5fSw2v6w+qnhRBVhiMyn1XMCaX2wFIyr8=) 2: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (hash: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Oct 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Oct 11 04:50:00 2025 GMT Not After : Oct 18 04:50:00 2025 GMT Subject: CN=68e9e1f8-c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:41:e3:38:d2:1d:1e:89:7f:8f:9c:5a:2f: d3:56:4b:2c:22:d3:4d:2d:d4:40:d0:42:03:3a:d7: b2:03:f3:77:21:48:be:69:95:c8:d6:a3:cf:47:4c: 23:f1:5c:fe:69:80:64:e8:86:23:a4:44:2e:1e:66: 20:d7:d5:73:9b:64:0e:8f:81:ef:cc:30:5d:bf:39: 5b:f9:0f:c0:74:01:03:be:85:f8:a2:b4:c3:ff:6b: d8:2d:9f:47:87:bd:6a:42:39:1f:60:ff:2d:55:ad: 2b:57:43:ac:0a:2c:ff:46:f4:d1:68:84:2e:68:4a: 1a:1c:53:9a:87:8e:da:25:5a:48:26:d3:cc:fa:3b: b1:02:28:dd:f7:e9:f3:e9:57:77:d9:17:e6:91:20: e9:da:65:d0:41:0f:17:6f:c7:54:52:09:f8:bb:d8: 64:12:19:c9:9e:40:3d:c6:00:98:62:21:d5:b4:e3: fc:97:dd:63:ff:2f:7a:02:61:70:7d:4d:aa:17:c7: bc:40:a7:35:63:0c:41:40:e9:80:04:9a:25:ca:40: 58:60:3e:62:e3:04:01:c4:3d:c1:24:57:f7:78:72: 82:ac:2a:f7:f8:c7:ae:d3:28:33:bf:c4:bd:65:37: 01:57:a6:80:17:1d:04:80:74:c3:98:9a:dd:46:e1: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:C3:B1:1C:96:44:D7:6D:31:C1:B3:F0:2C:DB:8E:97:CF:AC:C7 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a0:20:9d:d4:24:d6:4e:db:49:e3:05:6c:36:0a:26:37:b8: 03:92:26:90:69:3c:a0:7f:07:02:a7:d1:9c:da:6b:6d:8c:6c: bd:08:82:f1:df:8e:47:08:05:84:93:cd:4b:86:1e:ce:ed:65: 04:46:58:cc:c9:3f:dd:6e:91:26:44:06:5f:1d:fe:41:83:85: cb:d9:f0:cd:8f:96:70:95:10:73:c7:4e:ec:9a:f4:9e:c7:9e: 66:27:ad:d4:96:38:ae:f5:6a:ab:98:87:65:a0:21:3e:a9:44: cd:b4:5a:1d:6f:2f:31:f3:96:7a:72:15:df:cb:49:d3:87:26: 90:25:f9:4f:70:31:55:39:0e:ba:09:9b:df:e3:c5:cc:d8:fb: c3:e4:fa:5c:fa:2f:4b:a6:a3:80:2f:40:00:30:fc:82:3f:5f: 89:73:ab:65:83:e9:2f:1e:a9:60:18:32:4f:ad:d7:d2:2d:75: 26:80:10:62:ed:c6:93:cd:89:87:74:9b:80:dd:b9:63:7d:83: ca:1b:5c:3b:ad:a6:54:94:05:93:79:71:64:a8:b4:0a:df:7f: d7:5c:27:ad:78:99:bb:12:1c:eb:83:d2:1b:33:c3:e6:84:1c: 3e:35:b9:11:63:e5:df:b3:a6:eb:7f:8a:50:b3:f0:ed:48:87: 56:4c:23:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUxMDExMDQ1MDAwWhcNMjUxMDE4MDQ1MDAwWjAYMRYwFAYD VQQDEw02OGU5ZTFmOC1jOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qtB4zjSHR6Jf4+cWi/TVkssItNNLdRA0EIDOteyA/N3IUi+aZXI1qPPR0wj 8Vz+aYBk6IYjpEQuHmYg19Vzm2QOj4HvzDBdvzlb+Q/AdAEDvoX4orTD/2vYLZ9H h71qQjkfYP8tVa0rV0OsCiz/RvTRaIQuaEoaHFOah47aJVpIJtPM+juxAijd9+nz 6Vd32RfmkSDp2mXQQQ8Xb8dUUgn4u9hkEhnJnkA9xgCYYiHVtOP8l91j/y96AmFw fU2qF8e8QKc1YwxBQOmABJolykBYYD5i4wQBxD3BJFf3eHKCrCr3+Meu0ygzv8S9 ZTcBV6aAFx0EgHTDmJrdRuENCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy1w7Ec lkTXbTHBs/As246Xz6zHMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPoCCd1CTWTttJ4wVsNgomN7gDkiaQaTygfwcCp9Gc2mttjGy9CILx 345HCAWEk81Lhh7O7WUERljMyT/dbpEmRAZfHf5Bg4XL2fDNj5ZwlRBzx07smvSe x55mJ63Uljiu9WqrmIdloCE+qUTNtFodby8x85Z6chXfy0nThyaQJflPcDFVOQ66 CZvf48XM2PvD5Ppc+i9LpqOAL0AAMPyCP1+Jc6tlg+kvHqlgGDJPrdfSLXUmgBBi 7caTzYmHdJuA3bljfYPKG1w7raZUlAWTeXFkqLQK33/XXCeteJm7Ehzrg9IbM8Pm hBw+NbkRY+Xfs6brf4pQs/DtSIdWTCOK -----END CERTIFICATE-----Generated at Sat Oct 11 09:25:47 2025 by rpki-client