$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: bLDra7rtFGDmw7469ppGPE6DamlPS/RCXkO4FyiPQ1M= Subject key identifier: 37:78:E2:38:22:92:4D:CD:DA:C2:EE:17:24:65:81:9D:BE:E4:40:D8 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0594 Signing time: Thu 23 Oct 2025 00:16:18 +0000 Manifest this update: Thu 23 Oct 2025 00:16:18 +0000 Manifest next update: Thu 30 Oct 2025 00:16:18 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: joUoo246ZyYY/ULIh6ufD5+xtsbgmr+21ir4c6fdjD0=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Oct 23 00:16:18 2025 GMT Not After : Oct 30 00:16:18 2025 GMT Subject: CN=68f973d2-1fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:95:0a:28:88:c4:49:11:c1:4b:83:5c:6a: bc:1a:9c:8b:d7:9d:3a:a2:de:c1:7b:0b:ee:d5:e8: 5a:2c:3f:8c:2d:49:e4:a1:7c:82:54:18:5a:d1:95: 4e:b7:92:26:a7:c3:dc:34:7d:ad:16:e0:8b:cf:36: 3b:88:4c:3f:91:70:60:31:ba:2d:e8:bc:bc:f9:a2: 93:3f:06:fe:b5:d1:27:ea:e2:56:48:53:0c:b5:60: 1e:af:60:7c:97:0d:97:0c:97:45:ed:e9:27:e7:fe: 07:a8:ac:f1:fb:c2:a9:70:f9:b0:10:ae:40:f8:26: e1:7a:7e:f2:f0:4a:fc:93:8e:27:41:31:25:a1:95: a8:49:b8:5c:8e:49:a6:80:5b:26:b1:70:13:31:ab: c3:6b:64:79:00:bd:51:e4:09:88:e3:4d:f8:23:51: 14:48:c6:57:d2:9e:fe:71:97:6e:ff:1f:48:e5:74: a4:ae:94:c9:8c:f9:ff:f2:38:a5:41:f6:89:97:ab: 28:3a:0c:e8:f4:f4:50:74:a9:3b:4c:6e:39:a8:05: a1:40:89:d2:37:c7:13:e4:65:c2:cb:82:9b:45:54: a5:4e:b9:4b:b8:5c:19:bc:88:cf:2e:12:9d:89:d0: 63:31:2f:e4:99:4a:d3:bd:b9:78:30:75:b3:8f:69: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:E2:38:22:92:4D:CD:DA:C2:EE:17:24:65:81:9D:BE:E4:40:D8 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:61:f3:cd:35:23:25:f8:70:8b:b3:e2:70:40:8e:b5:a3:c9: a2:f3:bd:e0:e2:73:34:8e:a9:ac:03:0c:ba:3f:35:c0:ba:bf: 98:18:92:4a:e9:d4:40:e1:59:fe:ab:2d:57:ce:73:99:12:9e: df:10:55:09:9d:26:22:fe:30:3e:0a:ce:22:b5:b8:2a:dc:0f: 2c:21:f0:19:b8:46:29:f4:01:5e:37:67:a4:e4:26:2c:4b:79: 8c:e3:e7:79:76:b2:4f:46:2d:48:19:41:0d:34:56:07:01:2c: fe:80:58:0b:21:df:04:30:e8:54:fb:f3:17:89:e3:c8:a3:0b: b3:d4:a7:ba:17:11:45:15:66:a5:5a:b6:a3:72:24:a8:32:ec: 9e:2b:31:bf:cc:7c:57:16:3d:ca:4f:a4:93:96:36:b4:ec:af: d4:6e:12:8b:5e:23:db:c9:f5:94:71:29:6e:6a:98:e0:51:28: a5:eb:cc:83:54:ff:1c:2e:27:c5:09:9b:f1:81:3d:0b:4b:89: bb:01:95:f7:38:37:2b:3a:88:ff:4f:53:b5:7f:29:f3:55:c3: e6:07:30:0d:35:f4:b9:7f:c6:25:1f:11:07:1a:c3:a0:15:5f: 16:b2:67:16:cd:46:fd:76:c6:8e:b3:46:d4:3e:0f:67:74:6a: f2:b5:8b:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUxMDIzMDAxNjE4WhcNMjUxMDMwMDAxNjE4WjAYMRYwFAYD VQQDEw02OGY5NzNkMi0xZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Q2VCiiIxEkRwUuDXGq8GpyL1506ot7Bewvu1ehaLD+MLUnkoXyCVBha0ZVO t5Imp8PcNH2tFuCLzzY7iEw/kXBgMbot6Ly8+aKTPwb+tdEn6uJWSFMMtWAer2B8 lw2XDJdF7ekn5/4HqKzx+8KpcPmwEK5A+Cbhen7y8Er8k44nQTEloZWoSbhcjkmm gFsmsXATMavDa2R5AL1R5AmI4034I1EUSMZX0p7+cZdu/x9I5XSkrpTJjPn/8jil QfaJl6soOgzo9PRQdKk7TG45qAWhQInSN8cT5GXCy4KbRVSlTrlLuFwZvIjPLhKd idBjMS/kmUrTvbl4MHWzj2m0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd44jgi kk3N2sLuFyRlgZ2+5EDYMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoYfPNNSMl+HCLs+JwQI61o8mi873g4nM0jqmsAwy6PzXAur+YGJJK 6dRA4Vn+qy1XznOZEp7fEFUJnSYi/jA+Cs4itbgq3A8sIfAZuEYp9AFeN2ek5CYs S3mM4+d5drJPRi1IGUENNFYHASz+gFgLId8EMOhU+/MXiePIowuz1Ke6FxFFFWal WrajciSoMuyeKzG/zHxXFj3KT6STlja07K/UbhKLXiPbyfWUcSluapjgUSil68yD VP8cLifFCZvxgT0LS4m7AZX3ODcrOoj/T1O1fynzVcPmBzANNfS5f8YlHxEHGsOg FV8WsmcWzUb9dsaOs0bUPg9ndGrytYtl -----END CERTIFICATE-----Generated at Thu Oct 23 05:59:51 2025 by rpki-client