$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: f9aQ+bMc09LTuif8Qeqg8Dije8sq+IC/JuJjginrWRk= Subject key identifier: 5E:FD:F9:60:2A:E5:1C:4F:4D:20:73:BA:E3:D0:B1:70:E6:A3:E8:DC Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 14B7 Signing time: Tue 04 Nov 2025 18:12:54 +0000 Manifest this update: Tue 04 Nov 2025 18:12:54 +0000 Manifest next update: Tue 11 Nov 2025 18:12:53 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: BM/Tz16YyNjlJyQQw4jeVNsgtXBQf5X8+bBvN/NcUa8=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: B2tDIxeYNCo5gTNbHXofF/quSOaekq5ljkbk6cQhp5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Nov 4 18:12:54 2025 GMT Not After : Nov 11 18:12:53 2025 GMT Subject: CN=690a4226-51dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:7d:3e:26:ac:3f:22:af:44:7e:af:4f:c0: 90:a6:7e:a3:47:14:02:e6:08:37:3e:b4:ed:36:e6: 5b:18:c9:c9:58:63:bb:12:e1:1a:df:51:e1:a2:ee: b7:98:16:ae:c8:f4:e6:db:f2:53:98:e6:3f:b2:e9: c0:e5:a4:90:75:5e:ab:96:c3:24:6d:4e:65:57:76: 58:5a:40:a5:54:be:fa:22:56:71:15:ff:8b:7e:b4: af:36:99:a4:d9:b8:35:a7:11:2c:ba:f9:74:1f:9b: 26:1c:b5:b2:a3:37:68:3e:46:7b:6d:e8:41:60:5a: cf:bb:fc:f3:54:25:cc:c2:41:56:d7:a2:ec:2a:06: cc:b1:e6:3c:f3:db:2f:0b:1a:b2:cc:3d:56:f9:fb: ea:2a:fe:6a:dc:e9:59:5d:03:8f:9a:fe:19:38:44: b3:df:e7:9f:fa:b5:a2:d4:ed:98:f0:a0:cd:e3:8b: 8c:b9:69:6d:26:39:21:13:9b:66:9c:83:16:7e:d5: c4:19:c6:48:b5:70:1b:fb:30:ae:64:6d:6b:03:10: b9:05:1f:14:f9:35:8e:06:fb:e7:a3:03:e8:50:8d: 52:4a:90:8a:9a:b8:e6:17:19:74:13:e6:ad:52:69: 9b:21:fb:af:62:56:00:c3:25:cc:f6:19:12:6f:52: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:F9:60:2A:E5:1C:4F:4D:20:73:BA:E3:D0:B1:70:E6:A3:E8:DC X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9a:86:09:6c:d3:19:a1:9b:c1:18:96:42:5a:b2:4d:29:e2: 2e:30:ae:56:bc:3a:cb:2f:23:c5:c7:29:50:06:b5:bf:3c:ab: d5:c1:04:bf:86:1b:83:53:3b:90:79:fe:0a:51:c1:78:14:fe: 64:78:47:22:37:9e:2b:9a:b5:2f:79:ae:37:96:66:f5:a3:bf: 11:b4:8d:22:3e:88:30:59:e9:d0:f7:82:32:32:8e:ea:8a:a0: b1:12:81:38:1d:d5:fd:59:f9:bb:9d:50:80:b0:a7:9d:2e:94: 61:a1:4d:ea:27:27:09:fa:48:df:b5:d1:2b:46:2c:30:ad:c3: d9:17:e7:9a:a3:57:a8:46:ba:f0:f0:a2:1e:d4:2d:c1:fc:a5: 28:dd:7f:a8:12:67:bb:f7:d7:22:31:e8:19:78:b5:ce:29:1f: 6d:07:07:36:66:84:23:d6:1e:41:40:d7:32:ae:8b:93:bd:33: 41:28:ee:6f:f5:5d:fd:92:36:e1:25:58:44:c2:36:4a:f5:69: 9f:65:91:0d:90:6a:f6:d7:6a:fa:8e:73:26:88:2a:5c:ce:7d: 72:ab:ec:ee:0e:37:b7:71:4d:15:5d:ca:2e:c3:7f:a2:6d:b0: 4e:5d:4a:1a:d9:88:d8:d1:95:b1:46:70:77:57:a4:43:da:54: e8:e7:ff:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjUxMTA0MTgxMjU0WhcNMjUxMTExMTgxMjUzWjAYMRYwFAYD VQQDEw02OTBhNDIyNi01MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+d9PiasPyKvRH6vT8CQpn6jRxQC5gg3PrTtNuZbGMnJWGO7EuEa31Hhou63 mBauyPTm2/JTmOY/sunA5aSQdV6rlsMkbU5lV3ZYWkClVL76IlZxFf+LfrSvNpmk 2bg1pxEsuvl0H5smHLWyozdoPkZ7behBYFrPu/zzVCXMwkFW16LsKgbMseY889sv CxqyzD1W+fvqKv5q3OlZXQOPmv4ZOESz3+ef+rWi1O2Y8KDN44uMuWltJjkhE5tm nIMWftXEGcZItXAb+zCuZG1rAxC5BR8U+TWOBvvnowPoUI1SSpCKmrjmFxl0E+at UmmbIfuvYlYAwyXM9hkSb1Kb3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF79+WAq 5RxPTSBzuuPQsXDmo+jcMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6moYJbNMZoZvBGJZCWrJNKeIuMK5WvDrLLyPFxylQBrW/PKvVwQS/ hhuDUzuQef4KUcF4FP5keEciN54rmrUvea43lmb1o78RtI0iPogwWenQ94IyMo7q iqCxEoE4HdX9Wfm7nVCAsKedLpRhoU3qJycJ+kjftdErRiwwrcPZF+eao1eoRrrw 8KIe1C3B/KUo3X+oEme799ciMegZeLXOKR9tBwc2ZoQj1h5BQNcyrouTvTNBKO5v 9V39kjbhJVhEwjZK9WmfZZENkGr212r6jnMmiCpczn1yq+zuDje3cU0VXcouw3+i bbBOXUoa2YjY0ZWxRnB3V6RD2lTo5/9u -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:38 2025 by rpki-client