$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: VrPSF1/5RUPhpGhB8gSU3UzLFyBd/Sb0CHPJ7ifucHg= Subject key identifier: A1:3E:3E:DB:B0:E5:DE:DA:D3:C2:19:79:DB:8D:60:83:28:4A:F6:47 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1DB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D98 Signing time: Wed 20 Aug 2025 16:11:36 +0000 Manifest this update: Wed 20 Aug 2025 16:11:36 +0000 Manifest next update: Wed 27 Aug 2025 16:11:36 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: +MHvlD6l8S2tM/0NyOh8XrdM0Z1pl+E/Fiwg5qJB3C0=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7600 (0x1db0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Aug 20 16:11:36 2025 GMT Not After : Aug 27 16:11:36 2025 GMT Subject: CN=68a5f3b8-9e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:5b:18:0d:c2:c6:df:fe:2f:a3:08:17:2b: 4d:32:48:11:5f:f6:5f:a5:c3:31:43:2e:d9:be:53: da:5c:57:28:1d:b9:b1:13:68:b2:c2:6a:9f:6d:51: 54:25:cd:e0:c2:01:c4:be:6c:a5:86:a1:4d:39:f9: 2b:2a:9d:b5:0d:35:77:ed:94:60:6a:c4:f7:ba:e6: 14:f1:cc:48:69:90:69:1d:c4:b0:b5:43:9c:af:3f: df:16:42:a1:0f:ca:6f:a6:ac:fb:d5:73:e6:f2:d4: c5:a7:35:b2:80:3a:5f:6c:87:3d:e6:b9:57:63:7d: 73:d8:db:06:e8:c4:1f:79:55:bc:83:a5:67:c3:54: 74:64:cb:06:48:4b:26:b4:67:0a:15:13:f9:92:8a: bf:2b:bd:4b:7d:e8:58:31:1f:6d:7b:e2:81:f9:9d: 81:f0:85:82:ce:14:9a:23:75:2e:bf:4a:45:be:d6: de:8f:47:99:3a:c3:9b:2d:d8:5e:1b:80:10:59:af: c0:31:80:72:49:cc:c6:38:d4:4c:18:01:31:49:53: dc:67:07:aa:d9:b4:0d:e1:b3:9d:ac:ed:38:7f:6f: e0:13:fb:03:b4:cc:45:44:cc:d8:3d:69:d0:5f:2f: 86:8b:63:5f:4a:ff:a9:c4:6d:7e:99:e8:c3:ad:b8: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3E:3E:DB:B0:E5:DE:DA:D3:C2:19:79:DB:8D:60:83:28:4A:F6:47 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:2c:50:f3:a2:48:12:f5:0d:4d:24:58:fc:06:b8:c8:bf:73: 03:5b:20:43:1d:61:d9:2d:b4:b8:58:fe:45:86:97:00:a3:32: dc:4d:d2:28:09:52:a8:e6:6d:83:c0:c6:65:2d:01:91:91:84: 50:06:8b:cd:a2:2a:f4:f3:88:ff:81:a3:b3:69:e8:87:d0:c2: a2:14:11:8e:6a:d6:62:b8:e9:4b:22:89:63:4a:3b:a0:46:99: 57:39:c5:04:a4:1f:3e:82:dd:75:0d:ce:b0:85:7b:eb:e3:f4: 2e:67:09:9e:86:08:87:6d:11:d6:8e:c8:1b:16:9b:47:09:a1: 9e:76:4b:a3:d3:58:18:f4:47:98:31:e5:0a:9f:6e:e8:e7:a9: 84:da:e7:6f:8b:ad:68:d1:2e:d9:57:8a:ec:78:66:5d:ae:e1: 6c:af:31:1e:69:c3:26:3a:dd:5b:a5:90:cf:6d:97:25:29:88: 65:95:4f:b3:5d:38:c1:0c:f6:52:a4:bd:53:c7:39:5c:c5:ba: ea:8d:72:03:ce:df:67:cc:9e:8e:e2:9d:ec:b8:e8:ed:65:ca: ce:f0:9a:a2:bb:f6:45:88:38:34:25:c7:18:75:09:0f:a1:ed: 1b:dd:14:06:d1:d4:05:41:de:0e:22:0a:d3:16:f4:f9:7a:c9: bf:11:d9:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwODIwMTYxMTM2WhcNMjUwODI3MTYxMTM2WjAYMRYwFAYD VQQDEw02OGE1ZjNiOC05ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxJbGA3Cxt/+L6MIFytNMkgRX/ZfpcMxQy7ZvlPaXFcoHbmxE2iywmqfbVFU Jc3gwgHEvmylhqFNOfkrKp21DTV37ZRgasT3uuYU8cxIaZBpHcSwtUOcrz/fFkKh D8pvpqz71XPm8tTFpzWygDpfbIc95rlXY31z2NsG6MQfeVW8g6Vnw1R0ZMsGSEsm tGcKFRP5koq/K71LfehYMR9te+KB+Z2B8IWCzhSaI3Uuv0pFvtbej0eZOsObLdhe G4AQWa/AMYBySczGONRMGAExSVPcZweq2bQN4bOdrO04f2/gE/sDtMxFRMzYPWnQ Xy+Gi2NfSv+pxG1+mejDrbjhtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKE+Ptuw 5d7a08IZeduNYIMoSvZHMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWLFDzokgS9Q1NJFj8BrjIv3MDWyBDHWHZLbS4WP5FhpcAozLcTdIo CVKo5m2DwMZlLQGRkYRQBovNoir084j/gaOzaeiH0MKiFBGOatZiuOlLIoljSjug RplXOcUEpB8+gt11Dc6whXvr4/QuZwmehgiHbRHWjsgbFptHCaGedkuj01gY9EeY MeUKn27o56mE2udvi61o0S7ZV4rseGZdruFsrzEeacMmOt1bpZDPbZclKYhllU+z XTjBDPZSpL1TxzlcxbrqjXIDzt9nzJ6O4p3suOjtZcrO8Jqiu/ZFiDg0JccYdQkP oe0b3RQG0dQFQd4OIgrTFvT5esm/EdlB -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:08 2025 by rpki-client