$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: BwN58FRsse2vRbKZOrqvTIKyaZul6qO+eVUpsdwxlLQ= Subject key identifier: 34:96:94:B8:C4:37:22:18:84:A4:B0:25:A0:18:B1:64:2B:22:C5:84 Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 0213 Signing time: Mon 03 Nov 2025 02:12:25 +0000 Manifest this update: Mon 03 Nov 2025 02:12:25 +0000 Manifest next update: Mon 10 Nov 2025 02:12:25 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: BOms00qPlUru2jj9I+Lduaqj7L0U0CPDMF6P1GmWQsk=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Nov 3 02:12:25 2025 GMT Not After : Nov 10 02:12:25 2025 GMT Subject: CN=69080f89-ed69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:2c:15:c2:ff:70:9f:db:fe:e7:90:d3:34: 8f:cb:09:da:0b:49:59:a6:17:9a:cb:08:f8:12:0a: f0:1c:b6:03:c5:be:de:cd:93:ac:3c:df:e1:1c:c3: 23:4b:58:c4:7f:25:b9:a5:a3:1b:1a:6a:d4:9d:71: bd:bc:ed:ba:69:56:78:13:45:7a:de:fb:ff:91:65: c5:63:35:f5:9d:38:55:fa:9d:3c:3a:79:4e:85:6c: 07:2d:76:2d:e9:78:ec:34:61:a3:21:87:19:17:e9: 1e:6b:4b:c6:6f:9d:cc:6c:88:c5:64:93:9a:b5:f0: c3:5e:06:b4:bf:ea:00:41:ab:5c:ed:0b:98:b1:54: 8b:f2:8c:dc:91:f7:18:24:0f:51:b4:19:2d:75:7d: a1:f5:93:1d:5c:b9:bd:dc:ae:df:52:95:a3:ae:93: b9:e4:c6:02:3b:f0:de:13:68:4a:ca:f4:d2:b2:78: 87:c6:c4:66:e9:cc:6e:03:87:09:0a:d2:50:56:94: e2:65:c1:9a:75:76:1e:c3:6c:43:f8:ac:ce:61:60: ec:01:00:c0:c5:6c:00:60:f5:d5:d6:64:32:18:9c: cd:d4:c2:63:ff:08:00:a7:e5:96:ce:ba:06:f3:72: c0:00:d0:00:ed:c3:27:85:9d:63:4f:3a:b4:0b:6f: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:96:94:B8:C4:37:22:18:84:A4:B0:25:A0:18:B1:64:2B:22:C5:84 X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d5:21:7d:37:2b:6d:61:15:1a:04:ef:53:73:c1:0a:12:0e: 1f:13:cd:5f:10:d4:d5:33:ee:c0:9d:5e:39:0a:58:57:20:7e: cd:55:56:53:56:08:1f:df:70:22:07:ee:28:90:d2:a1:6c:61: cb:3b:5e:a3:1d:35:e9:bd:0a:21:2e:ac:10:34:31:33:a3:2e: 6c:57:16:16:37:1e:66:79:50:25:4f:97:66:34:68:2e:b8:e2: a3:74:62:73:cc:cf:ae:36:8e:84:7a:11:70:cc:a4:9f:2e:89: b2:a5:e8:b2:6d:2b:89:11:64:32:a5:88:cf:b9:9a:b7:ac:da: 5d:02:32:73:22:3d:0c:4b:42:f6:3f:9e:47:03:a9:5b:22:c1: 8c:3c:7c:28:63:f0:7b:9a:c8:34:b2:26:b4:65:3d:ac:23:2c: 9b:5a:b5:92:b6:30:e1:80:16:b4:f0:a1:9d:3c:a6:70:c0:39: 68:24:78:b4:73:6f:c7:de:78:59:3c:f5:a1:4a:84:70:fc:c6: f8:34:41:0e:dd:9c:57:5c:c7:90:cc:21:1c:56:bf:13:1e:86: 59:b2:68:2a:78:4b:3f:c2:64:5f:a8:e4:ff:64:3c:db:5f:9b: 24:ca:56:4a:08:60:25:f3:18:71:37:ad:7a:24:f7:24:d7:52: 73:c0:dd:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjUxMTAzMDIxMjI1WhcNMjUxMTEwMDIxMjI1WjAYMRYwFAYD VQQDEw02OTA4MGY4OS1lZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aUsFcL/cJ/b/ueQ0zSPywnaC0lZpheaywj4EgrwHLYDxb7ezZOsPN/hHMMj S1jEfyW5paMbGmrUnXG9vO26aVZ4E0V63vv/kWXFYzX1nThV+p08OnlOhWwHLXYt 6XjsNGGjIYcZF+kea0vGb53MbIjFZJOatfDDXga0v+oAQatc7QuYsVSL8ozckfcY JA9RtBktdX2h9ZMdXLm93K7fUpWjrpO55MYCO/DeE2hKyvTSsniHxsRm6cxuA4cJ CtJQVpTiZcGadXYew2xD+KzOYWDsAQDAxWwAYPXV1mQyGJzN1MJj/wgAp+WWzroG 83LAANAA7cMnhZ1jTzq0C2/Q+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSWlLjE NyIYhKSwJaAYsWQrIsWEMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM1SF9NyttYRUaBO9Tc8EKEg4fE81fENTVM+7AnV45ClhXIH7NVVZT Vggf33AiB+4okNKhbGHLO16jHTXpvQohLqwQNDEzoy5sVxYWNx5meVAlT5dmNGgu uOKjdGJzzM+uNo6EehFwzKSfLomypeiybSuJEWQypYjPuZq3rNpdAjJzIj0MS0L2 P55HA6lbIsGMPHwoY/B7msg0sia0ZT2sIyybWrWStjDhgBa08KGdPKZwwDloJHi0 c2/H3nhZPPWhSoRw/Mb4NEEO3ZxXXMeQzCEcVr8THoZZsmgqeEs/wmRfqOT/ZDzb X5skylZKCGAl8xhxN616JPck11JzwN0B -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:16 2025 by rpki-client