$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: 1BGEG1oEVx8ud+JhNzmDzDPkSNAOv7PPSz6yzqxSJ0E= Subject key identifier: BC:6B:BA:12:9E:70:E0:FB:51:5C:E4:4A:B7:D2:C4:83:03:31:3B:5D Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 43 Signing time: Tue 09 Sep 2025 07:34:42 +0000 Manifest this update: Tue 09 Sep 2025 07:34:41 +0000 Manifest next update: Tue 16 Sep 2025 07:34:41 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: LhK0uVcbugyGgaYeICHFdibFCoGmSuLXStUWj/ve61w=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Sep 9 07:34:41 2025 GMT Not After : Sep 16 07:34:41 2025 GMT Subject: CN=68bfd892-6e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:c7:4e:f8:ca:d7:92:a8:05:d1:99:0b:33: 7b:90:43:95:b1:46:2a:5d:05:66:47:71:ca:20:d2: dd:b7:9d:dc:38:27:fd:a0:2b:a7:ae:91:cf:9e:13: b6:70:d5:f4:2e:2d:68:b6:75:05:6b:38:47:64:27: 04:27:8a:69:9d:5b:e7:50:cd:a5:00:58:2a:6c:c4: 69:6d:b7:81:87:2c:63:ee:82:a9:1a:2f:00:f5:3d: 89:bf:e3:68:16:28:68:84:c8:d5:47:41:7b:82:a6: 74:c0:18:d6:33:74:b5:8b:36:e7:41:62:dc:92:83: b4:79:05:36:7b:3a:f7:b4:cc:f8:0d:6b:5f:62:44: e5:bb:95:cd:48:1e:ed:59:de:93:5d:76:29:de:83: 2d:19:bb:37:fe:cd:76:5c:d6:26:7f:41:c5:93:d5: d4:27:1e:bf:1f:dc:f4:a8:5d:ad:56:48:50:79:35: 59:32:91:71:77:50:62:59:8d:61:72:59:04:55:b1: f0:eb:7d:03:20:5d:b8:74:73:9b:22:b2:f2:1d:d0: 0c:e4:bf:14:2f:87:6e:d6:53:9c:99:8a:b4:e2:d8: 7d:61:ff:d2:53:80:7e:51:f5:d8:bb:50:c7:04:ca: fb:32:9b:21:b4:62:61:19:cb:e0:af:52:d3:1a:c9: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6B:BA:12:9E:70:E0:FB:51:5C:E4:4A:B7:D2:C4:83:03:31:3B:5D X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:b5:8f:a7:b4:fe:1c:45:74:18:f0:82:13:1e:8d:71:8a: f9:4a:1f:f4:5d:5b:57:26:cc:5a:7b:32:09:07:53:fc:40:62: 85:0e:56:8c:35:ec:76:83:0d:46:14:ff:62:e6:05:e0:2e:39: 1f:cc:f6:10:41:8f:e6:ea:cf:ab:d2:ab:60:6c:99:b6:97:a9: bb:26:3c:06:25:50:28:0b:59:27:7f:41:bf:fa:96:8b:35:b4: 6c:e5:46:7a:5d:71:3f:6b:c0:e2:c8:48:ec:be:fd:17:3c:fa: 41:89:23:b5:b7:7c:18:4a:35:08:5a:70:5a:8d:26:84:85:6b: c0:c8:84:17:bf:91:13:e0:40:74:15:14:a8:be:00:ef:76:0f: 95:5f:dc:e1:26:37:a5:12:6d:b9:18:fd:35:9a:a6:db:04:57: 57:24:fd:07:45:28:1e:33:fb:84:15:d8:57:42:7c:bf:d0:8a: 87:0c:3f:4c:2b:13:59:1f:e8:ec:62:68:67:6d:af:f5:ec:8d: f6:5d:58:5e:bc:65:28:fa:d9:72:42:f7:1b:b6:93:88:65:73: 92:fd:0e:ab:05:c6:34:22:4e:c0:2b:ed:0c:2d:ce:b7:2c:44: 2a:d1:d5:29:c4:aa:29:a2:32:c0:62:90:b6:6b:2e:e8:ce:77: 49:d5:bb:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA5MDkwNzM0NDFaFw0yNTA5MTYwNzM0NDFaMBgxFjAUBgNV BAMTDTY4YmZkODkyLTZlM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWeMdO+MrXkqgF0ZkLM3uQQ5WxRipdBWZHccog0t23ndw4J/2gK6eukc+eE7Zw 1fQuLWi2dQVrOEdkJwQnimmdW+dQzaUAWCpsxGltt4GHLGPugqkaLwD1PYm/42gW KGiEyNVHQXuCpnTAGNYzdLWLNudBYtySg7R5BTZ7Ove0zPgNa19iROW7lc1IHu1Z 3pNddinegy0Zuzf+zXZc1iZ/QcWT1dQnHr8f3PSoXa1WSFB5NVkykXF3UGJZjWFy WQRVsfDrfQMgXbh0c5sisvId0AzkvxQvh27WU5yZirTi2H1h/9JTgH5R9di7UMcE yvsymyG0YmEZy+CvUtMayb7TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvGu6Ep5w 4PtRXORKt9LEgwMxO10wHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPBtY+ntP4cRXQY8IITHo1xivlKH/RdW1cmzFp7MgkHU/xAYoUOVow1 7HaDDUYU/2LmBeAuOR/M9hBBj+bqz6vSq2BsmbaXqbsmPAYlUCgLWSd/Qb/6los1 tGzlRnpdcT9rwOLISOy+/Rc8+kGJI7W3fBhKNQhacFqNJoSFa8DIhBe/kRPgQHQV FKi+AO92D5Vf3OEmN6USbbkY/TWaptsEV1ck/QdFKB4z+4QV2FdCfL/QiocMP0wr E1kf6OxiaGdtr/XsjfZdWF68ZSj62XJC9xu2k4hlc5L9DqsFxjQiTsAr7Qwtzrcs RCrR1SnEqimiMsBikLZrLujOd0nVu38= -----END CERTIFICATE-----Generated at Tue Sep 9 17:12:23 2025 by rpki-client