$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: pqGWOILpApHPLkBkpAn2epNbe5w+spwgN/Zesb8+2Mo= Subject key identifier: 7C:4C:0B:2C:15:FB:96:F5:D2:F4:31:FC:AD:8B:5B:9A:24:9B:07:31 Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 1430 Signing time: Mon 30 Jun 2025 18:22:53 +0000 Manifest this update: Mon 30 Jun 2025 18:22:52 +0000 Manifest next update: Mon 07 Jul 2025 18:22:52 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: +aNPQyGVDzkCoDq+Jr0drAsPgLesObrVPQEZ6Zkci9s=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: noVdM6ngikXxZBW4pTHIBoQSLKize1jndamJhpeixzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Jun 30 18:22:52 2025 GMT Not After : Jul 7 18:22:52 2025 GMT Subject: CN=6862d5fc-0f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:c4:1c:4a:1b:99:2e:17:15:4c:32:dd:2d: f5:c1:09:d9:a4:bd:7e:e4:14:b0:2e:49:b5:00:2b: 54:37:81:a2:f4:ef:4a:12:d8:c6:e6:b0:76:17:97: 90:09:b4:9a:89:b6:03:d1:19:f9:45:08:1d:8f:ef: a4:f8:3a:85:00:61:a5:9f:77:33:89:63:da:c7:34: e2:39:52:54:78:47:f2:fd:38:75:cf:ba:07:54:d2: 96:2b:e8:cb:9a:f9:80:68:53:54:07:21:1f:97:48: d8:2e:82:f8:34:68:fe:a7:d5:44:cb:24:dc:8f:c7: 36:f1:b6:ab:36:dd:37:22:ea:e1:2d:e2:e7:e0:5b: cc:ba:13:8f:a8:f1:d2:74:cd:c0:a5:b0:24:91:3a: 7f:a3:10:d6:a4:b1:6d:3a:4c:0c:81:29:e6:a1:6a: 26:df:40:56:83:8a:45:3a:88:8c:98:2a:a8:1e:57: 47:61:80:82:b3:18:de:91:32:26:c7:2f:5f:45:11: 92:ec:9a:2f:6a:39:d1:ed:93:14:2e:fb:89:7a:71: ab:ba:ff:d4:d6:e8:3f:b5:f2:da:41:3b:d0:87:66: 63:e3:4f:a6:56:a4:16:2a:ca:6e:a3:55:9f:4b:ee: f0:50:78:8f:41:8f:67:05:46:eb:5b:67:32:70:78: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:0B:2C:15:FB:96:F5:D2:F4:31:FC:AD:8B:5B:9A:24:9B:07:31 X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:54:ff:9e:2e:91:4d:50:1a:f9:9c:68:1b:09:7d:d5:bd:66: 4a:46:ea:31:22:96:4e:ad:1a:db:d6:fe:87:33:e9:13:bc:62: 40:33:b9:bd:c2:72:a0:cb:99:2d:08:1a:1c:a3:a5:06:21:4b: be:cb:38:d9:c7:73:c7:af:b1:95:eb:d9:64:05:3a:54:30:d0: 4a:a5:2c:0a:8e:82:0c:36:e0:0c:57:53:9e:ac:20:be:37:fe: 09:19:0b:3d:43:e2:de:45:d8:5f:2b:1b:5c:4f:98:0b:a1:f3: df:d0:67:af:f7:24:7d:9b:58:98:40:87:f2:78:fe:03:6d:83: c0:6d:10:ed:d0:98:8a:fa:03:19:c6:f4:76:d6:d2:f1:fa:ee: ed:5f:c9:5f:7c:d4:cf:d5:9e:7d:49:70:55:62:5f:e3:a7:f6: ab:f9:88:9a:53:11:4f:4e:a4:f7:e5:b9:cd:e0:b1:ab:c5:a5: 7d:92:77:1e:95:12:4f:d2:5a:fe:29:0e:d6:47:72:c5:f0:94: 01:e0:58:82:c3:9e:33:62:70:55:b7:fb:92:68:04:36:05:ab: e4:f3:e6:cc:ec:05:46:5e:a2:7b:ac:08:d8:ec:f2:bc:cd:9f: 2b:9b:9d:da:9e:fa:08:40:7f:c9:0f:0b:0f:69:15:79:20:2e: 66:d1:3f:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjUwNjMwMTgyMjUyWhcNMjUwNzA3MTgyMjUyWjAYMRYwFAYD VQQDEw02ODYyZDVmYy0wZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8PEHEobmS4XFUwy3S31wQnZpL1+5BSwLkm1ACtUN4Gi9O9KEtjG5rB2F5eQ CbSaibYD0Rn5RQgdj++k+DqFAGGln3cziWPaxzTiOVJUeEfy/Th1z7oHVNKWK+jL mvmAaFNUByEfl0jYLoL4NGj+p9VEyyTcj8c28barNt03IurhLeLn4FvMuhOPqPHS dM3ApbAkkTp/oxDWpLFtOkwMgSnmoWom30BWg4pFOoiMmCqoHldHYYCCsxjekTIm xy9fRRGS7JovajnR7ZMULvuJenGruv/U1ug/tfLaQTvQh2Zj40+mVqQWKspuo1Wf S+7wUHiPQY9nBUbrW2cycHggowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxMCywV +5b10vQx/K2LW5okmwcxMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPVP+eLpFNUBr5nGgbCX3VvWZKRuoxIpZOrRrb1v6HM+kTvGJAM7m9 wnKgy5ktCBoco6UGIUu+yzjZx3PHr7GV69lkBTpUMNBKpSwKjoIMNuAMV1OerCC+ N/4JGQs9Q+LeRdhfKxtcT5gLofPf0Gev9yR9m1iYQIfyeP4DbYPAbRDt0JiK+gMZ xvR21tLx+u7tX8lffNTP1Z59SXBVYl/jp/ar+YiaUxFPTqT35bnN4LGrxaV9knce lRJP0lr+KQ7WR3LF8JQB4FiCw54zYnBVt/uSaAQ2Bavk8+bM7AVGXqJ7rAjY7PK8 zZ8rm53anvoIQH/JDwsPaRV5IC5m0T9N -----END CERTIFICATE-----Generated at Wed Jul 2 01:56:46 2025 by rpki-client