$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: XHywfQecoLXQsapyjDCgs7Y3zImRf1gXkSOphTBXabk= Subject key identifier: 46:51:70:15:99:C4:AA:B7:02:A1:57:49:05:03:0D:97:24:5D:B8:D1 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0C9F Signing time: Tue 04 Nov 2025 18:21:50 +0000 Manifest this update: Tue 04 Nov 2025 18:21:49 +0000 Manifest next update: Tue 11 Nov 2025 18:21:49 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: wpbJGSJi5BX/84QR9HgrOUBc6dPwNgm2KJdI1h6wpLg=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Nov 4 18:21:49 2025 GMT Not After : Nov 11 18:21:49 2025 GMT Subject: CN=690a443e-4698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:36:61:22:85:3a:6c:40:37:62:12:c2:b0: 3c:77:82:a0:6e:64:cf:33:ec:47:c4:33:de:9a:a8: cb:37:39:f7:84:e0:d2:c8:c7:9c:c7:df:30:e2:2a: af:c0:c2:c5:da:ec:8e:ee:cf:77:33:8d:0a:53:ae: 2c:0d:01:cb:bf:2c:73:74:1b:2f:fe:6f:4a:3e:4e: 28:fc:72:ab:25:95:cf:ac:0f:99:ef:5b:05:84:65: 20:4b:ed:75:84:df:5b:96:50:cc:2f:5c:02:5f:54: c7:bc:28:98:cf:30:b3:a0:98:59:9e:22:76:c1:d8: 94:5b:d1:8c:8d:8a:8d:95:02:9d:2f:31:e3:2c:e3: 4f:43:5f:f3:b4:3b:09:01:a6:7f:4b:8b:b3:39:dc: 35:8a:2b:1e:ca:a6:d9:31:34:7e:b9:f8:32:04:68: a2:7a:9f:e2:50:f1:77:72:18:d0:50:2c:37:1e:ae: 30:b9:f9:2a:23:2c:bd:de:50:98:6a:56:3d:6a:d4: 18:aa:70:d3:ad:ba:93:93:0e:95:77:a8:63:91:44: f3:dc:d1:4d:3c:14:21:75:40:eb:11:f1:25:d2:07: 71:71:79:f6:1a:86:72:76:b9:65:82:4c:38:81:e4: 45:89:99:22:bd:3c:fc:00:e6:44:26:06:6d:26:db: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:51:70:15:99:C4:AA:B7:02:A1:57:49:05:03:0D:97:24:5D:B8:D1 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:16:87:76:64:72:87:9c:16:7b:90:2a:b7:57:6a:b1:9c:93: 28:d5:9f:b9:29:bd:65:2d:94:e1:2d:6c:94:36:61:b4:97:cd: 30:85:ce:c3:83:e3:65:87:4e:09:26:59:8b:33:12:08:2b:f7: 15:aa:ba:dc:f9:ab:0e:a9:e7:61:19:e1:bd:d1:25:08:b8:b8: 55:77:58:d7:2b:a1:07:db:dc:46:9f:b7:5c:7f:16:69:d4:3f: b5:2b:b5:ae:0a:4b:b0:93:f4:ce:bd:1d:a5:79:54:6b:d1:54: fd:fa:ce:59:ff:75:56:0e:f0:5b:6c:23:0e:f5:60:c2:8f:17: 4e:fc:ca:41:29:c2:c8:13:5e:2b:d8:53:31:0a:e6:6b:0e:df: be:ec:4c:3c:67:94:16:30:8c:0e:9e:cf:b6:8d:00:09:d0:b9: 81:3e:ed:58:ed:b6:2a:62:c8:a4:93:8d:ca:56:b0:b0:04:cc: 25:51:1f:3a:b4:89:33:bc:42:d4:79:66:38:73:07:ef:e6:02: 50:73:40:f5:f8:41:47:84:2c:1e:93:97:13:01:08:d2:17:8b: 86:0c:74:9e:e5:91:97:d6:a6:21:0f:34:2d:6a:d4:9a:68:e8: 42:a8:2f:fb:97:13:45:fc:b7:db:d7:c1:da:5e:03:44:f5:0d: bf:5f:b2:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUxMTA0MTgyMTQ5WhcNMjUxMTExMTgyMTQ5WjAYMRYwFAYD VQQDEw02OTBhNDQzZS00Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk82YSKFOmxAN2ISwrA8d4KgbmTPM+xHxDPemqjLNzn3hODSyMecx98w4iqv wMLF2uyO7s93M40KU64sDQHLvyxzdBsv/m9KPk4o/HKrJZXPrA+Z71sFhGUgS+11 hN9bllDML1wCX1THvCiYzzCzoJhZniJ2wdiUW9GMjYqNlQKdLzHjLONPQ1/ztDsJ AaZ/S4uzOdw1iiseyqbZMTR+ufgyBGiiep/iUPF3chjQUCw3Hq4wufkqIyy93lCY alY9atQYqnDTrbqTkw6Vd6hjkUTz3NFNPBQhdUDrEfEl0gdxcXn2GoZydrllgkw4 geRFiZkivTz8AOZEJgZtJtuLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZRcBWZ xKq3AqFXSQUDDZckXbjRMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYFod2ZHKHnBZ7kCq3V2qxnJMo1Z+5Kb1lLZThLWyUNmG0l80whc7D g+Nlh04JJlmLMxIIK/cVqrrc+asOqedhGeG90SUIuLhVd1jXK6EH29xGn7dcfxZp 1D+1K7WuCkuwk/TOvR2leVRr0VT9+s5Z/3VWDvBbbCMO9WDCjxdO/MpBKcLIE14r 2FMxCuZrDt++7Ew8Z5QWMIwOns+2jQAJ0LmBPu1Y7bYqYsikk43KVrCwBMwlUR86 tIkzvELUeWY4cwfv5gJQc0D1+EFHhCwek5cTAQjSF4uGDHSe5ZGX1qYhDzQtatSa aOhCqC/7lxNF/Lfb18HaXgNE9Q2/X7Jf -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:01 2025 by rpki-client