$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: 7z9OaxGc01e4VYOvMk/DYnoEA6eyYS8eoQJ1Ig11mqE= Subject key identifier: B6:5C:47:8A:64:3E:EA:A4:9E:AD:12:F7:0F:59:1E:33:F0:3D:15:4A Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 2A Signing time: Wed 23 Jul 2025 08:06:19 +0000 Manifest this update: Wed 23 Jul 2025 08:06:19 +0000 Manifest next update: Wed 30 Jul 2025 08:06:19 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: JH80b0UlGg6X2SHvTtpwHINBM2NJdfOKhTJPSpUeUMA=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Jul 23 08:06:19 2025 GMT Not After : Jul 30 08:06:19 2025 GMT Subject: CN=688097fb-ed24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:3f:41:7e:c2:52:b8:52:7f:26:d3:61:8f: d1:cd:84:9b:f3:ad:02:13:89:0d:f9:15:f3:62:da: 73:7e:a2:97:29:2b:94:c7:83:ca:b0:ec:8d:c7:e5: b4:9f:90:4a:f4:0c:c7:62:b5:46:90:28:19:4e:d9: c3:a0:21:6b:2a:63:c4:03:d9:5d:a2:68:aa:f3:d5: fa:97:65:72:ac:c5:ac:b3:7a:a5:62:b1:9d:88:fe: c0:ba:3f:b9:4d:ef:cb:7c:ea:be:2d:e2:bf:be:6e: e7:2b:77:32:4e:43:16:50:88:8b:23:6b:c9:d1:da: 41:eb:b7:41:ff:78:a6:4e:1c:0e:01:78:5c:a7:5f: 1c:99:00:e5:06:39:55:dc:42:85:0a:8a:76:68:b0: f3:70:85:60:43:1f:58:35:f9:23:2f:4d:78:c3:7c: 9a:55:c3:bf:79:84:b9:2f:c7:f9:24:15:f5:4e:a2: 3e:14:d0:4a:07:8d:39:06:66:cd:2a:2f:2f:05:94: b8:34:6a:06:a8:bd:63:f8:36:b4:5c:8f:cd:63:07: c9:c9:c3:54:5c:9d:53:ba:e9:03:60:40:46:b0:05: 0f:b6:fb:32:99:ae:61:a6:f0:aa:3f:f6:39:c8:c0: f2:94:5a:c0:01:e6:8a:65:4c:47:02:86:e1:bf:46: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5C:47:8A:64:3E:EA:A4:9E:AD:12:F7:0F:59:1E:33:F0:3D:15:4A X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f8:65:f8:6c:56:12:8a:f2:d5:69:df:70:9e:66:24:5c:5b: ef:fc:f9:7b:70:7e:90:b0:6c:a9:61:3a:d1:be:fa:89:63:d2: df:57:b3:62:9c:af:00:b2:58:da:cb:d7:2b:48:8e:3c:31:a0: b8:f9:04:4f:f7:7e:f5:01:f0:f3:f6:0f:11:97:1a:c6:4b:a9: b2:22:27:7b:cd:5a:8d:14:b0:f8:c4:03:89:f3:46:be:51:5c: c9:f0:5c:9f:a5:03:d9:09:74:d3:86:c4:e1:3d:65:4f:d0:94: 71:6f:b9:f0:41:e8:92:41:1c:c5:e7:3e:f5:b2:7e:20:25:1f: 9b:a6:a0:72:a3:ea:c5:eb:68:33:e3:21:24:e3:0c:1b:93:23: 5a:bf:4e:f5:44:7c:a6:ad:f1:07:16:d4:c8:dd:27:23:74:c1: 3d:c8:98:ee:4c:0f:4e:3b:55:3e:3c:9d:cf:d8:7c:20:79:36: 69:e0:9f:d2:b0:cd:bb:1e:1b:42:e5:5c:aa:dc:57:61:bb:aa: 9a:4b:7f:20:f5:74:9f:60:ab:64:1a:44:ea:f1:b7:60:aa:ea: 64:38:8a:2e:59:4f:59:03:3b:53:2b:38:c5:9a:d3:34:99:a0: 1a:54:c2:81:40:3f:d8:56:b5:94:00:f8:5f:fa:df:0e:10:c7: ec:3a:03:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA3MjMwODA2MTlaFw0yNTA3MzAwODA2MTlaMBgxFjAUBgNV BAMTDTY4ODA5N2ZiLWVkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQsT9BfsJSuFJ/JtNhj9HNhJvzrQITiQ35FfNi2nN+opcpK5THg8qw7I3H5bSf kEr0DMditUaQKBlO2cOgIWsqY8QD2V2iaKrz1fqXZXKsxayzeqVisZ2I/sC6P7lN 78t86r4t4r++bucrdzJOQxZQiIsja8nR2kHrt0H/eKZOHA4BeFynXxyZAOUGOVXc QoUKinZosPNwhWBDH1g1+SMvTXjDfJpVw795hLkvx/kkFfVOoj4U0EoHjTkGZs0q Ly8FlLg0agaovWP4NrRcj81jB8nJw1RcnVO66QNgQEawBQ+2+zKZrmGm8Ko/9jnI wPKUWsAB5oplTEcChuG/RoBVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtlxHimQ+ 6qSerRL3D1keM/A9FUowHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFL4ZfhsVhKK8tVp33CeZiRcW+/8+XtwfpCwbKlhOtG++olj0t9Xs2Kc rwCyWNrL1ytIjjwxoLj5BE/3fvUB8PP2DxGXGsZLqbIiJ3vNWo0UsPjEA4nzRr5R XMnwXJ+lA9kJdNOGxOE9ZU/QlHFvufBB6JJBHMXnPvWyfiAlH5umoHKj6sXraDPj ISTjDBuTI1q/TvVEfKat8QcW1MjdJyN0wT3ImO5MD047VT48nc/YfCB5Nmngn9Kw zbseG0LlXKrcV2G7qppLfyD1dJ9gq2QaROrxt2Cq6mQ4ii5ZT1kDO1MrOMWa0zSZ oBpUwoFAP9hWtZQA+F/63w4Qx+w6AxM= -----END CERTIFICATE-----Generated at Wed Jul 23 18:08:40 2025 by rpki-client