$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: B57XBJTEPRFCrRikb+QlLjxAOMC/blnom5V2niRODJ4= Subject key identifier: B7:EB:E1:F4:78:A6:90:33:0E:64:04:ED:79:25:F9:7E:13:A3:AC:CE Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 146D Signing time: Sun 24 Aug 2025 18:07:27 +0000 Manifest this update: Sun 24 Aug 2025 18:07:26 +0000 Manifest next update: Sun 31 Aug 2025 18:07:26 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: JvWcKT4n+sdXJc10kgCN0i8PImdIWvQO1JuoLohXcQU=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: B2tDIxeYNCo5gTNbHXofF/quSOaekq5ljkbk6cQhp5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Aug 24 18:07:26 2025 GMT Not After : Aug 31 18:07:26 2025 GMT Subject: CN=68ab54df-bd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:e0:c7:87:52:7b:db:d7:8b:44:86:fc:e3: ed:d9:07:42:64:ff:2a:48:a8:46:35:5c:01:0d:9f: f5:a1:a2:fc:3d:32:1f:b1:7b:2f:c3:24:e7:01:3b: dc:d0:7b:90:4f:ab:c4:4d:d9:cc:71:d3:dd:01:71: 1b:bc:e4:9d:e9:76:4d:72:2d:ed:64:86:15:2b:b3: d2:84:65:da:f6:e2:dd:fa:87:c0:0d:af:dd:05:19: ef:91:87:74:44:75:ee:a6:92:6d:9d:8e:11:9b:ac: 09:8b:ac:dd:99:cb:79:33:d8:6b:8d:9e:81:2b:07: 9e:9f:c8:de:a6:e4:48:29:7b:2d:3e:17:a5:50:1d: f3:e5:23:6e:23:71:68:9c:63:40:6c:b2:3a:06:dc: 3a:aa:dd:04:f1:e1:32:36:02:78:95:5d:a0:d0:c0: 0a:eb:6b:4d:1e:d1:04:64:32:87:6a:bb:38:b5:f0: b6:90:ce:98:06:78:90:b4:d1:ce:fb:d2:18:de:ed: 30:86:bc:f5:a9:8d:54:94:66:2b:21:3a:dc:8b:c8: e2:64:cf:c1:7e:f1:8d:fc:93:2b:36:64:b9:20:f1: af:71:33:91:0a:2a:59:c6:82:a2:24:19:ec:03:cd: a5:00:a6:16:96:9f:db:be:31:2d:61:14:01:40:28: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EB:E1:F4:78:A6:90:33:0E:64:04:ED:79:25:F9:7E:13:A3:AC:CE X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b6:5e:4e:62:e7:28:9f:f1:87:24:05:a5:f8:e5:cb:c8:f8: 2b:cc:29:a3:f9:cf:ad:df:66:bc:73:2d:d9:d2:ea:00:0c:66: a4:3f:9f:e5:c1:6a:b9:87:a9:89:2e:84:ab:d4:b7:85:77:a1: 1c:9c:a9:c7:e6:8f:1b:1a:3b:ec:b1:b7:71:17:84:57:2b:7a: 27:c9:cf:30:4b:48:09:41:a8:ef:25:b5:4b:d8:7f:4d:d6:24: 7c:65:75:df:59:8f:5a:31:10:c9:31:85:d6:01:f4:cf:ba:70: 66:9f:e3:d2:c5:23:2c:c3:47:bc:3d:05:2c:e4:17:18:20:af: 9c:b8:68:8a:69:69:56:79:be:a6:8f:28:e2:5d:0d:e3:9e:d6: 58:52:56:ae:09:fe:59:5b:bc:f3:c5:cf:2f:04:76:53:b5:31: cc:2d:25:42:45:ef:03:a2:25:4b:90:46:c4:67:b3:9b:a2:98: c3:bb:78:9f:cf:cf:df:e7:fc:80:fa:e6:9e:b1:da:29:0a:6a: ee:32:a6:ee:13:fe:e7:2f:1e:1c:09:c3:d8:84:61:49:6e:49: 36:45:6d:bf:d2:ce:f9:6c:91:ee:07:2e:a7:e4:43:bd:a3:fd: 93:2f:51:b3:c4:63:6a:87:ec:a0:7f:bf:11:f7:c8:36:03:1e: 9b:62:c1:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjUwODI0MTgwNzI2WhcNMjUwODMxMTgwNzI2WjAYMRYwFAYD VQQDEw02OGFiNTRkZi1iZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYPgx4dSe9vXi0SG/OPt2QdCZP8qSKhGNVwBDZ/1oaL8PTIfsXsvwyTnATvc 0HuQT6vETdnMcdPdAXEbvOSd6XZNci3tZIYVK7PShGXa9uLd+ofADa/dBRnvkYd0 RHXuppJtnY4Rm6wJi6zdmct5M9hrjZ6BKween8jepuRIKXstPhelUB3z5SNuI3Fo nGNAbLI6Btw6qt0E8eEyNgJ4lV2g0MAK62tNHtEEZDKHars4tfC2kM6YBniQtNHO +9IY3u0whrz1qY1UlGYrITrci8jiZM/BfvGN/JMrNmS5IPGvcTORCipZxoKiJBns A82lAKYWlp/bvjEtYRQBQCiVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfr4fR4 ppAzDmQE7Xkl+X4To6zOMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVtl5OYucon/GHJAWl+OXLyPgrzCmj+c+t32a8cy3Z0uoADGakP5/l wWq5h6mJLoSr1LeFd6EcnKnH5o8bGjvssbdxF4RXK3onyc8wS0gJQajvJbVL2H9N 1iR8ZXXfWY9aMRDJMYXWAfTPunBmn+PSxSMsw0e8PQUs5BcYIK+cuGiKaWlWeb6m jyjiXQ3jntZYUlauCf5ZW7zzxc8vBHZTtTHMLSVCRe8DoiVLkEbEZ7ObopjDu3if z8/f5/yA+uaesdopCmruMqbuE/7nLx4cCcPYhGFJbkk2RW2/0s75bJHuBy6n5EO9 o/2TL1GzxGNqh+ygf78R98g2Ax6bYsHJ -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:17 2025 by rpki-client