$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: XQoyi9mOo4V5vsgC7RGyX8vM2RrYTxS9YEW+k/kYpxo= Subject key identifier: 84:BC:36:54:1D:57:8C:EA:D2:13:BE:61:54:1D:44:11:69:0E:24:C1 Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0B1F Signing time: Wed 02 Jul 2025 19:27:31 +0000 Manifest this update: Wed 02 Jul 2025 19:27:31 +0000 Manifest next update: Wed 09 Jul 2025 19:27:31 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: YiYfGhmM6pqzyl4zaK/oWc5ljZYjdqiMvHRSoHiIgzQ=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Jul 2 19:27:31 2025 GMT Not After : Jul 9 19:27:31 2025 GMT Subject: CN=68658823-e5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:af:28:dc:94:dc:a8:4d:4d:55:f9:51:3e: 52:b2:c5:b1:14:bc:ab:ce:bd:72:95:48:0a:36:44: 31:ca:5c:34:12:00:56:9e:97:1f:04:e2:64:46:5b: 3d:db:36:73:76:84:ea:1d:62:79:a5:18:fa:a2:53: 17:81:2c:db:7c:77:fa:e1:83:93:ea:50:0f:50:88: f3:09:d8:96:40:be:70:a0:27:ef:24:da:d7:95:2b: 4f:6f:69:05:e5:88:be:7a:fc:7a:04:c6:0f:6d:3b: 78:75:e7:99:d1:54:a9:ea:b5:35:62:92:9b:3e:57: 57:2d:3e:2c:e1:3f:89:bf:f4:ee:0e:f2:27:fa:ce: 1a:ea:87:38:fa:a4:e5:5a:be:93:ce:31:32:5d:a3: 3f:a9:d2:fd:9b:a1:aa:79:2d:6b:4a:f5:1b:83:7e: 87:04:88:8f:e2:f1:66:d9:62:10:85:27:30:b3:cf: b8:3a:22:52:8a:fe:ad:b7:8d:4d:bb:bc:41:32:a0: 50:4c:91:37:62:a2:f0:73:c2:73:5d:a5:07:25:30: b3:47:63:71:f1:6d:5e:b3:b2:79:87:2f:af:3e:98: 15:37:9b:be:6b:f5:94:82:3d:12:0f:d4:0d:c6:b4: aa:d1:7d:a1:fa:f3:24:b1:46:0f:63:05:ab:80:b0: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BC:36:54:1D:57:8C:EA:D2:13:BE:61:54:1D:44:11:69:0E:24:C1 X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:98:d7:d9:a9:3e:5b:05:2a:0c:e5:d8:11:1a:17:dd:8f:70: c9:e2:88:24:e3:85:ee:6a:52:fd:9c:6c:b4:43:e3:e4:db:c7: 38:7c:95:78:c8:1e:3e:f3:cb:35:19:0b:ed:73:bf:e9:5b:0e: c5:60:5a:f1:12:ea:60:5a:98:f5:a1:08:c7:37:f9:7a:cb:e8: c7:1c:e2:f4:30:d4:6d:c7:00:51:ea:45:34:30:b1:5f:27:20: a7:dd:9f:74:5a:d5:b2:a8:4f:4e:cd:29:47:c4:8c:3b:06:6f: 3f:6b:8f:13:97:49:84:6c:ca:2e:cf:61:e7:d0:9e:4d:b7:5d: b2:77:a6:9e:10:c6:cb:1e:2d:4c:45:6e:da:06:d9:61:c2:01: ea:da:91:90:40:46:3e:47:42:91:73:0e:be:15:c9:dd:bd:67: d5:c5:57:a0:14:dc:84:9e:b5:de:6f:05:08:d6:ee:cc:23:62: da:21:ac:56:37:6e:57:22:c7:54:3d:b6:2c:bf:e2:23:ad:c5: 9f:2d:84:d3:21:05:86:e5:62:ff:17:19:0f:d0:9d:8b:e7:c8: d9:63:f1:ff:35:1f:ce:23:0c:84:fe:d7:2d:4c:3a:9a:16:a9: 17:1e:b9:8d:8c:2c:1b:de:29:0c:6c:79:a2:74:a0:08:7c:43: 63:7a:cf:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUwNzAyMTkyNzMxWhcNMjUwNzA5MTkyNzMxWjAYMRYwFAYD VQQDEw02ODY1ODgyMy1lNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLWvKNyU3KhNTVX5UT5SssWxFLyrzr1ylUgKNkQxylw0EgBWnpcfBOJkRls9 2zZzdoTqHWJ5pRj6olMXgSzbfHf64YOT6lAPUIjzCdiWQL5woCfvJNrXlStPb2kF 5Yi+evx6BMYPbTt4deeZ0VSp6rU1YpKbPldXLT4s4T+Jv/TuDvIn+s4a6oc4+qTl Wr6TzjEyXaM/qdL9m6GqeS1rSvUbg36HBIiP4vFm2WIQhScws8+4OiJSiv6tt41N u7xBMqBQTJE3YqLwc8JzXaUHJTCzR2Nx8W1es7J5hy+vPpgVN5u+a/WUgj0SD9QN xrSq0X2h+vMksUYPYwWrgLDBvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS8NlQd V4zq0hO+YVQdRBFpDiTBMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDimNfZqT5bBSoM5dgRGhfdj3DJ4ogk44XualL9nGy0Q+Pk28c4fJV4 yB4+88s1GQvtc7/pWw7FYFrxEupgWpj1oQjHN/l6y+jHHOL0MNRtxwBR6kU0MLFf JyCn3Z90WtWyqE9OzSlHxIw7Bm8/a48Tl0mEbMouz2Hn0J5Nt12yd6aeEMbLHi1M RW7aBtlhwgHq2pGQQEY+R0KRcw6+FcndvWfVxVegFNyEnrXebwUI1u7MI2LaIaxW N25XIsdUPbYsv+IjrcWfLYTTIQWG5WL/FxkP0J2L58jZY/H/NR/OIwyE/tctTDqa FqkXHrmNjCwb3ikMbHmidKAIfENjes+I -----END CERTIFICATE-----Generated at Wed Jul 2 22:45:04 2025 by rpki-client