$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: OqgGRWEsx7qnMT00UPpAzMGI4B1GLepH9PcbCRJSryo= Subject key identifier: 8F:DF:A8:CF:54:91:2D:16:A9:F2:2E:17:98:70:0A:B5:EA:CD:72:DD Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 057E Signing time: Sat 06 Sep 2025 23:35:22 +0000 Manifest this update: Sat 06 Sep 2025 23:35:22 +0000 Manifest next update: Sat 13 Sep 2025 23:35:22 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: jcH8zOMte94K7vM8NZPR0fZoTCZWpdw6eRn2BLG5roA=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Sep 6 23:35:22 2025 GMT Not After : Sep 13 23:35:22 2025 GMT Subject: CN=68bcc53a-69a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:82:9c:02:e0:a7:5a:18:87:29:9d:0a:11: d3:26:de:fa:66:3b:57:ec:75:ca:bf:a0:0b:ff:e1: f7:46:61:0c:08:a2:c3:96:ca:3e:cf:f0:c5:e0:57: 71:80:87:89:68:19:ff:95:05:8f:f1:bb:6d:de:c4: 1d:b4:11:50:00:d9:a0:c7:ed:4c:93:6b:51:2c:15: d2:a0:be:17:6b:25:dd:31:84:9e:df:cf:0f:1a:96: d8:5a:9e:88:a3:c1:03:d6:b5:f4:5f:a9:bb:1b:e5: 40:29:70:14:22:6a:19:ce:80:8e:f4:2c:b2:1c:a1: 59:f6:7e:46:02:c0:be:e6:f4:3e:d6:fd:02:6b:ce: 2e:61:a7:8d:56:00:0a:c9:5b:bc:a6:74:07:71:d4: 33:f2:09:3d:4f:d8:27:8a:a9:b6:62:2a:b5:6f:dc: 8c:34:a6:b4:c4:a2:5b:93:a1:19:ae:64:46:09:bb: d3:96:e5:6d:ec:d8:54:8b:8e:ee:9e:6a:6e:57:5f: ff:47:13:f6:1f:66:cf:c5:f3:60:ae:e7:db:e5:64: 09:2d:f5:30:be:6f:0e:0a:a4:95:0e:7f:06:5a:fc: 23:fb:5f:4d:9c:fa:9b:2b:9e:9b:02:c3:fd:cb:76: 50:a3:37:42:80:96:a0:ff:4d:c2:c4:e0:fc:b3:03: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:A8:CF:54:91:2D:16:A9:F2:2E:17:98:70:0A:B5:EA:CD:72:DD X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:91:a6:34:09:c6:b3:38:60:27:59:3a:28:88:2a:b9:34:3a: f8:79:0e:97:5e:e2:11:78:19:3d:5d:8b:e4:01:eb:e3:1a:cc: e0:d5:88:7c:27:15:2b:e2:76:d5:29:ce:23:f2:74:93:b3:89: 84:96:e3:d5:41:a1:2c:d0:91:c2:07:0c:bf:80:4b:dd:b3:7d: b6:fa:cf:e7:d0:2c:0b:f6:13:30:9c:d4:7f:f3:9b:30:0d:c6: 3c:9c:d6:de:7f:45:67:18:b3:48:52:5b:be:83:9b:c0:6a:b5: 91:cd:33:7d:33:48:5d:31:ce:12:0c:50:f6:0c:c2:c5:a6:1a: 56:08:66:df:64:97:9d:05:79:4b:f7:a3:9e:d9:1b:13:9a:c1: 94:1f:4a:5d:91:cc:74:dd:91:af:6e:b1:7f:e5:a2:35:4f:d2: 96:af:a6:96:fc:bd:f5:df:48:3f:6a:66:7e:1b:37:2b:31:01: 72:99:0e:ee:be:c3:6e:aa:85:38:48:ad:c4:6f:88:9e:79:6f: 87:f2:d9:b9:e7:19:ae:c5:1f:d2:6a:24:a9:36:5e:43:21:1d: 3c:b3:09:95:00:0a:7c:e2:8b:7c:d0:05:07:e7:e6:78:18:13: b4:97:f1:4f:9a:42:c0:df:cb:75:f9:35:13:2e:c7:ac:d7:64: 1e:13:50:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUwOTA2MjMzNTIyWhcNMjUwOTEzMjMzNTIyWjAYMRYwFAYD VQQDEw02OGJjYzUzYS02OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNqCnALgp1oYhymdChHTJt76ZjtX7HXKv6AL/+H3RmEMCKLDlso+z/DF4Fdx gIeJaBn/lQWP8btt3sQdtBFQANmgx+1Mk2tRLBXSoL4XayXdMYSe388PGpbYWp6I o8ED1rX0X6m7G+VAKXAUImoZzoCO9CyyHKFZ9n5GAsC+5vQ+1v0Ca84uYaeNVgAK yVu8pnQHcdQz8gk9T9gniqm2Yiq1b9yMNKa0xKJbk6EZrmRGCbvTluVt7NhUi47u nmpuV1//RxP2H2bPxfNgrufb5WQJLfUwvm8OCqSVDn8GWvwj+19NnPqbK56bAsP9 y3ZQozdCgJag/03CxOD8swPGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/fqM9U kS0WqfIuF5hwCrXqzXLdMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACkaY0CcazOGAnWTooiCq5NDr4eQ6XXuIReBk9XYvkAevjGszg1Yh8 JxUr4nbVKc4j8nSTs4mEluPVQaEs0JHCBwy/gEvds322+s/n0CwL9hMwnNR/85sw DcY8nNbef0VnGLNIUlu+g5vAarWRzTN9M0hdMc4SDFD2DMLFphpWCGbfZJedBXlL 96Oe2RsTmsGUH0pdkcx03ZGvbrF/5aI1T9KWr6aW/L3130g/amZ+GzcrMQFymQ7u vsNuqoU4SK3Eb4ieeW+H8tm55xmuxR/SaiSpNl5DIR08swmVAAp84ot80AUH5+Z4 GBO0l/FPmkLA38t1+TUTLses12QeE1Ae -----END CERTIFICATE-----Generated at Mon Sep 8 03:35:35 2025 by rpki-client