$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: UDH3MiitKpsna7qTGKV5Sg9x+krgj8Nj1cB/Ir3W+Gw= Subject key identifier: AA:24:1E:C1:0B:CD:C3:D6:C4:15:3B:4C:F5:5A:A0:77:D9:16:95:9A Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 01F7 Signing time: Sun 07 Sep 2025 02:49:16 +0000 Manifest this update: Sun 07 Sep 2025 02:49:16 +0000 Manifest next update: Sun 14 Sep 2025 02:49:16 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: zhTjDQhBTEHY4TdwaQ0i9Jz+e13E5Q0AFE7jnSSDPGA=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Sep 7 02:49:16 2025 GMT Not After : Sep 14 02:49:16 2025 GMT Subject: CN=68bcf2ac-e438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:80:7c:3c:83:d0:12:7e:0e:26:fd:be:8e: 39:d4:f5:03:76:7e:20:80:8b:c9:1d:b7:48:ea:7c: 68:50:36:b9:36:9e:c7:84:04:75:02:ef:a2:3f:94: c0:53:9d:b1:1d:07:b5:fb:b8:3a:bc:8c:55:cc:cb: db:1b:2c:c6:71:ae:95:4e:a7:a5:9b:91:c1:db:aa: ce:e3:3f:37:50:08:49:ca:99:40:e9:14:96:1d:45: 90:31:63:97:31:b1:d2:59:ea:1c:62:9b:da:4d:43: f2:73:2e:26:09:d2:92:e8:26:75:9f:2e:39:5f:0c: 97:bc:46:9d:65:14:4c:27:a4:6b:79:1a:ee:d8:eb: 27:c2:50:a2:ca:98:78:10:a0:89:d1:d6:25:78:c5: 7c:f0:4d:bc:28:b6:ac:9e:f6:14:f9:00:e4:9d:a1: 9a:15:f5:f2:d4:d9:5c:a1:e7:c3:b8:4f:c2:3b:15: 92:3f:a9:79:8f:f7:b3:55:81:4f:ae:d0:6d:27:61: 29:a6:e7:99:87:cc:59:ef:ea:db:ef:9f:f2:9b:f2: 68:5f:09:f7:40:4b:14:7a:60:7e:80:f2:a9:0a:72: 71:a5:4f:1f:ca:97:b3:49:1a:1d:2c:6e:91:4c:8b: 53:1b:2d:39:15:c0:39:c3:68:24:5a:a1:0b:e3:e8: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:1E:C1:0B:CD:C3:D6:C4:15:3B:4C:F5:5A:A0:77:D9:16:95:9A X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d1:f4:37:b1:fa:2f:5f:61:fe:0c:7f:76:e0:7e:b1:06:40: 31:bb:0a:97:ee:2a:dc:17:c0:5f:3c:b0:19:d9:23:11:8c:ae: bb:9a:cf:72:8f:db:71:91:86:be:45:24:76:60:be:a1:9b:3f: f5:95:40:1d:79:7a:f8:a0:a1:23:cd:8e:2e:88:e7:d6:4a:6c: 92:e0:4c:79:9a:e8:fb:b0:22:7b:89:fc:2f:50:9b:da:52:46: 06:1e:d7:46:77:c3:86:3e:63:38:d1:a7:c7:37:ad:02:f9:26: 16:6f:27:20:aa:c1:2c:02:fb:e0:a8:c4:1d:da:26:9f:11:9c: 70:de:80:7f:3e:0a:64:89:6d:12:35:1c:54:cb:df:7c:0d:20: 65:00:2f:56:8c:63:89:56:fb:ae:b1:ab:5e:07:28:24:e4:7b: 73:78:bf:6f:44:56:20:db:f4:a1:a2:fb:2f:b7:e3:c7:79:c4: 42:f3:4a:25:f4:8c:2e:7c:8a:b5:97:d5:5f:d5:a2:4e:2d:16: c9:82:86:87:bf:35:83:3c:cc:ca:52:92:1e:58:29:1d:db:75: 63:71:f0:6e:55:55:8a:45:1e:70:de:89:c8:33:e6:2e:a1:34: 98:03:e9:6a:00:4c:9c:6e:6e:a3:55:bb:26:16:40:82:c0:a5: 48:2a:43:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjUwOTA3MDI0OTE2WhcNMjUwOTE0MDI0OTE2WjAYMRYwFAYD VQQDEw02OGJjZjJhYy1lNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VCAfDyD0BJ+Dib9vo451PUDdn4ggIvJHbdI6nxoUDa5Np7HhAR1Au+iP5TA U52xHQe1+7g6vIxVzMvbGyzGca6VTqelm5HB26rO4z83UAhJyplA6RSWHUWQMWOX MbHSWeocYpvaTUPycy4mCdKS6CZ1ny45XwyXvEadZRRMJ6RreRru2OsnwlCiyph4 EKCJ0dYleMV88E28KLasnvYU+QDknaGaFfXy1NlcoefDuE/COxWSP6l5j/ezVYFP rtBtJ2EppueZh8xZ7+rb75/ym/JoXwn3QEsUemB+gPKpCnJxpU8fypezSRodLG6R TItTGy05FcA5w2gkWqEL4+gkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKokHsEL zcPWxBU7TPVaoHfZFpWaMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0fQ3sfovX2H+DH924H6xBkAxuwqX7ircF8BfPLAZ2SMRjK67ms9y j9txkYa+RSR2YL6hmz/1lUAdeXr4oKEjzY4uiOfWSmyS4Ex5muj7sCJ7ifwvUJva UkYGHtdGd8OGPmM40afHN60C+SYWbycgqsEsAvvgqMQd2iafEZxw3oB/PgpkiW0S NRxUy998DSBlAC9WjGOJVvuusateBygk5HtzeL9vRFYg2/Shovsvt+PHecRC80ol 9IwufIq1l9Vf1aJOLRbJgoaHvzWDPMzKUpIeWCkd23VjcfBuVVWKRR5w3onIM+Yu oTSYA+lqAEycbm6jVbsmFkCCwKVIKkM1 -----END CERTIFICATE-----Generated at Mon Sep 8 10:27:59 2025 by rpki-client