$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: l2wrEmDrPSC36ziI4lTs5aB2mFrW/d43KhvjKz14WB4= Subject key identifier: A8:22:3E:1B:FD:98:31:B9:D8:48:02:4D:4D:02:92:34:5E:96:8F:87 Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: 9A Signing time: Tue 01 Jul 2025 07:15:40 +0000 Manifest this update: Tue 01 Jul 2025 07:15:39 +0000 Manifest next update: Tue 08 Jul 2025 07:15:39 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: HPn86rJQHTU4oxIW79O5gBJX1ni9WB6rJKyq7UoA4r0=) 2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=) 3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: Jul 1 07:15:39 2025 GMT Not After : Jul 8 07:15:39 2025 GMT Subject: CN=68638b1c-d552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:14:f0:ec:82:12:33:7f:a1:d0:73:44:df: dd:0b:7e:c1:12:f7:88:7b:fe:ac:91:c9:57:ee:4d: bd:22:8d:ad:62:00:13:9e:c2:03:af:3f:92:71:23: e7:2b:f2:79:ca:5c:51:09:1b:67:4d:4a:1e:6e:3d: 02:b4:62:ac:5d:40:b3:72:6d:cd:17:bf:23:82:fd: 1e:24:0b:b5:10:04:f1:93:09:6b:71:9a:fa:48:33: 69:ab:17:59:d6:56:30:18:a2:ee:85:b4:c1:83:00: 3d:12:00:12:94:db:e7:0b:09:50:14:8a:80:f3:c6: 8d:8e:cf:51:65:4c:41:19:84:2e:e1:75:db:64:a9: 48:a3:f0:c7:0f:ed:d8:3f:bc:e4:c8:06:51:dd:f8: 82:40:3c:0f:0c:94:73:80:8d:b9:81:05:ef:21:cc: 2c:4e:c8:6f:0b:f9:0b:e3:e8:b6:c4:a6:b2:ef:6b: a0:f3:fc:88:bf:fb:45:19:66:36:b9:b0:c1:6c:fe: 2f:25:51:07:7a:21:82:21:51:a8:22:09:83:e7:a7: 8d:ac:13:f3:bf:16:0b:5b:ee:9e:93:d0:c3:00:31: a7:f4:0e:0a:17:16:9d:62:c1:30:c8:49:4b:e1:9b: 58:07:fc:52:6e:ac:b2:71:d7:eb:79:0a:8e:6c:86: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:22:3E:1B:FD:98:31:B9:D8:48:02:4D:4D:02:92:34:5E:96:8F:87 X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:98:cf:30:7c:4b:8e:33:5e:87:98:74:bb:8b:90:84:fe: 14:bf:13:bc:1d:8c:35:db:83:1e:f7:63:f0:cc:26:12:0b:8b: ba:28:fd:23:57:e2:34:2e:63:e8:b5:8b:98:33:07:03:14:53: c9:05:e5:69:3d:da:d4:2a:58:ca:9e:87:ab:12:cd:fe:ee:5a: c6:06:58:ac:7a:f2:b6:11:22:2f:59:57:c3:1a:27:05:1c:7a: 24:22:2a:6c:66:c5:0f:ff:d5:87:16:c0:75:dd:93:4f:a1:00: 27:41:c5:5e:88:5a:8c:53:c1:66:4b:cc:55:90:8e:3d:e9:79: 51:23:5d:d8:49:fd:7f:80:b7:64:39:d0:96:f6:16:31:80:11: 63:56:f8:e6:0e:a5:ee:11:19:f1:50:10:ce:02:11:44:55:23: 27:40:dc:6e:80:ff:d2:05:a2:8c:a5:64:a1:db:0d:75:26:30: 7f:bf:b6:30:40:8d:5a:e2:7f:58:2e:43:22:34:60:f5:f5:e0: 38:72:2f:2a:dd:2d:9b:bf:a7:53:89:76:34:3b:92:b9:1c:52: 11:f1:99:8e:1b:60:1d:10:f5:c3:a1:36:ee:c5:e0:a4:64:1a: f4:de:32:8e:36:67:9d:20:82:bd:91:08:4b:86:85:8e:d5:09: fd:fb:60:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjUwNzAxMDcxNTM5WhcNMjUwNzA4MDcxNTM5WjAYMRYwFAYD VQQDEw02ODYzOGIxYy1kNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EcU8OyCEjN/odBzRN/dC37BEveIe/6skclX7k29Io2tYgATnsIDrz+ScSPn K/J5ylxRCRtnTUoebj0CtGKsXUCzcm3NF78jgv0eJAu1EATxkwlrcZr6SDNpqxdZ 1lYwGKLuhbTBgwA9EgASlNvnCwlQFIqA88aNjs9RZUxBGYQu4XXbZKlIo/DHD+3Y P7zkyAZR3fiCQDwPDJRzgI25gQXvIcwsTshvC/kL4+i2xKay72ug8/yIv/tFGWY2 ubDBbP4vJVEHeiGCIVGoIgmD56eNrBPzvxYLW+6ek9DDADGn9A4KFxadYsEwyElL 4ZtYB/xSbqyycdfreQqObIbM0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgiPhv9 mDG52EgCTU0CkjRelo+HMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMvJjPMHxLjjNeh5h0u4uQhP4UvxO8HYw124Me92PwzCYSC4u6KP0j V+I0LmPotYuYMwcDFFPJBeVpPdrUKljKnoerEs3+7lrGBlisevK2ESIvWVfDGicF HHokIipsZsUP/9WHFsB13ZNPoQAnQcVeiFqMU8FmS8xVkI496XlRI13YSf1/gLdk OdCW9hYxgBFjVvjmDqXuERnxUBDOAhFEVSMnQNxugP/SBaKMpWSh2w11JjB/v7Yw QI1a4n9YLkMiNGD19eA4ci8q3S2bv6dTiXY0O5K5HFIR8ZmOG2AdEPXDoTbuxeCk ZBr03jKONmedIIK9kQhLhoWO1Qn9+2Ai -----END CERTIFICATE-----Generated at Tue Jul 1 21:07:12 2025 by rpki-client