$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: /M0pJGYvKP8hgfAs0L5qqUQ+f+ig3QROLfOwAzaCt1w= Subject key identifier: EC:CB:D0:D7:79:6C:B9:3E:00:32:E7:BA:80:16:E9:31:EF:97:E4:FE Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: D5 Signing time: Mon 27 Oct 2025 08:02:04 +0000 Manifest this update: Mon 27 Oct 2025 08:02:03 +0000 Manifest next update: Mon 03 Nov 2025 08:02:03 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: i7JHixvweFeyJ83tbLYLDVxuJvY0QLLgPWvK4lL5180=) 2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=) 3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: Oct 27 08:02:03 2025 GMT Not After : Nov 3 08:02:03 2025 GMT Subject: CN=68ff26fb-3af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:ed:0e:20:40:b9:ec:6f:f3:65:c2:fc:a8: 89:bc:a0:d3:3f:df:c8:d8:c8:98:9c:41:05:4c:a4: 1c:c1:34:4e:97:a0:40:65:db:04:aa:d5:1b:cb:8b: 95:79:59:17:7d:53:78:cb:9c:c6:00:65:8f:bf:d9: 35:5e:6e:b8:10:66:51:41:f8:9a:f2:96:e4:a5:5e: 88:00:b6:05:dd:da:96:bf:d6:1f:2b:f0:41:6c:97: 34:7a:6b:8a:4e:e8:67:38:52:f4:d9:b1:96:bd:b2: 3c:2d:d3:b1:3c:0c:57:6c:82:86:90:11:c3:c3:e8: 82:d2:32:80:89:d0:fb:f4:75:81:ac:84:20:33:ba: f8:f3:2b:6c:d8:4e:e5:ef:a4:6a:b3:9c:de:fc:28: d5:0b:24:68:4b:b3:4a:05:be:e9:d0:a0:ce:00:ce: f0:79:e8:cf:b6:5f:95:1c:87:2b:2e:67:01:bd:aa: c5:81:1c:7d:fd:2f:83:5a:d5:9e:5a:05:04:79:60: 45:03:9b:3f:7f:8e:83:d2:e6:bb:3b:45:fc:c9:31: 5b:64:46:26:80:ec:04:33:d1:e0:26:23:09:d1:64: 6f:cc:05:2e:d3:c3:34:07:d5:98:7a:70:25:a3:c8: 94:21:58:f8:b5:e6:7b:e9:75:4a:04:29:cd:87:f8: 39:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CB:D0:D7:79:6C:B9:3E:00:32:E7:BA:80:16:E9:31:EF:97:E4:FE X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b8:11:61:f8:61:b8:14:62:38:43:94:68:7b:eb:a0:a8:bd: d4:42:9f:3f:d1:b5:e7:bd:21:85:42:3f:ad:d7:16:c0:ca:f1: ab:03:a4:21:4d:31:6a:46:04:ef:40:7a:69:83:43:8a:22:1e: c1:5d:8c:a8:79:e2:76:ea:c1:ab:cb:d2:20:fa:1b:6a:43:18: ef:e5:8c:0f:2b:fe:17:e1:3a:40:13:7d:30:61:c0:d8:61:3a: 53:64:4c:8f:39:4a:e9:c2:d7:51:9b:38:cb:da:d2:f4:d9:41: a3:7a:f9:ff:7b:2f:2d:81:f9:72:80:b0:ec:76:60:25:74:08: dc:ab:a2:a0:57:14:83:67:eb:5a:b2:5e:a5:77:d0:6b:b5:ba: 3f:ea:14:7f:8b:74:a7:dc:0e:f6:3e:17:c0:5d:95:f4:8a:64: ea:d9:0c:75:24:a0:f9:f6:d1:87:81:90:53:8a:e0:ca:90:47: ee:ca:11:e3:06:36:b2:6a:77:b6:7b:b1:0b:25:9f:13:b9:8b: ae:12:42:a0:e2:aa:44:6e:23:06:29:7d:13:68:bf:42:3d:10: 40:20:dc:3f:e1:fd:04:8b:a4:d1:23:5f:1b:a7:89:0b:cc:c9: ec:94:f1:d5:49:a2:9d:01:49:06:c3:08:cb:28:75:df:c4:1a: 2e:ee:eb:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjUxMDI3MDgwMjAzWhcNMjUxMTAzMDgwMjAzWjAYMRYwFAYD VQQDEw02OGZmMjZmYi0zYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIXtDiBAuexv82XC/KiJvKDTP9/I2MiYnEEFTKQcwTROl6BAZdsEqtUby4uV eVkXfVN4y5zGAGWPv9k1Xm64EGZRQfia8pbkpV6IALYF3dqWv9YfK/BBbJc0emuK TuhnOFL02bGWvbI8LdOxPAxXbIKGkBHDw+iC0jKAidD79HWBrIQgM7r48yts2E7l 76Rqs5ze/CjVCyRoS7NKBb7p0KDOAM7weejPtl+VHIcrLmcBvarFgRx9/S+DWtWe WgUEeWBFA5s/f46D0ua7O0X8yTFbZEYmgOwEM9HgJiMJ0WRvzAUu08M0B9WYenAl o8iUIVj4teZ76XVKBCnNh/g5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzL0Nd5 bLk+ADLnuoAW6THvl+T+MB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAuBFh+GG4FGI4Q5Roe+ugqL3UQp8/0bXnvSGFQj+t1xbAyvGrA6Qh TTFqRgTvQHppg0OKIh7BXYyoeeJ26sGry9Ig+htqQxjv5YwPK/4X4TpAE30wYcDY YTpTZEyPOUrpwtdRmzjL2tL02UGjevn/ey8tgflygLDsdmAldAjcq6KgVxSDZ+ta sl6ld9Brtbo/6hR/i3Sn3A72PhfAXZX0imTq2Qx1JKD59tGHgZBTiuDKkEfuyhHj Bjayane2e7ELJZ8TuYuuEkKg4qpEbiMGKX0TaL9CPRBAINw/4f0Ei6TRI18bp4kL zMnslPHVSaKdAUkGwwjLKHXfxBou7uvI -----END CERTIFICATE-----Generated at Wed Oct 29 06:08:02 2025 by rpki-client