$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: 5uHp1JzBeZz829Pea+jiZdEjVC3Nhi+x/QidME29PFE= Subject key identifier: 40:0C:3F:58:59:58:A0:7A:AF:AC:D7:3E:15:E2:A7:4B:3E:5E:39:6C Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0B56 Signing time: Sat 18 Oct 2025 20:01:15 +0000 Manifest this update: Sat 18 Oct 2025 20:01:14 +0000 Manifest next update: Sat 25 Oct 2025 20:01:14 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: fPuOB2TLl03SKUwsd1jow2eqPlB064r8TJu221WXVmk=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Oct 18 20:01:14 2025 GMT Not After : Oct 25 20:01:14 2025 GMT Subject: CN=68f3f20a-9164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:74:51:b8:b3:7d:ee:50:cd:fc:04:f8:b8: 05:41:e2:02:19:4e:7f:8f:55:b6:7c:cb:ac:cd:ca: ec:52:90:cf:7c:55:f1:70:7b:11:92:b1:ba:a7:e7: d1:20:23:4a:47:40:f0:3e:b2:4a:d6:2c:b6:25:26: 13:80:95:27:1f:27:fd:4b:2f:6c:e3:2a:e2:3f:28: a7:b5:23:ff:03:50:fa:3c:bf:1f:b2:f3:67:e9:bd: 41:42:23:31:b8:ae:02:9d:6f:b9:4e:05:e6:7a:0a: 72:13:2d:dd:24:1b:8c:1c:a0:9f:3d:6d:af:b6:5d: 17:5a:86:e5:a2:0a:a5:c2:15:a6:1a:57:f1:04:c6: 06:e6:b3:63:8e:0d:55:f8:9c:7a:05:ab:c8:f7:4c: ef:b0:47:56:81:d5:c4:09:d8:e1:6e:c5:bc:e9:16: 7b:a7:4a:46:12:bf:e0:1c:a1:ec:36:75:16:e8:31: 6c:5e:a8:8c:8e:f3:96:f7:68:2b:b1:aa:10:dc:4e: c0:bd:86:04:e5:eb:8d:f7:99:ed:63:81:98:4d:8b: 56:26:09:c5:db:a8:78:bd:49:2f:6f:98:76:c6:23: d6:c9:55:90:84:c2:74:1b:da:5d:9f:33:a3:f5:02: e5:d2:3f:c4:de:f6:a4:f0:68:2c:5e:99:3d:ad:a2: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0C:3F:58:59:58:A0:7A:AF:AC:D7:3E:15:E2:A7:4B:3E:5E:39:6C X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a8:65:d5:69:5b:e2:55:63:84:3c:cc:06:c4:7f:1f:1f:83: 22:a7:a7:f9:67:30:45:94:23:30:f6:0b:09:b9:ad:d1:b1:12: cf:29:6a:07:ff:4e:8f:0d:75:f8:46:b8:de:f2:74:17:f7:0d: f6:08:d3:95:3c:36:8e:78:cf:ed:23:2d:ea:29:be:60:70:da: 70:1b:84:dd:ce:5a:e0:85:a6:99:ff:bc:3c:a4:80:14:c3:71: c7:cd:52:62:5d:11:e5:2c:76:dc:fd:9a:d2:c0:b4:91:7f:f2: 21:92:b1:85:60:61:e0:61:92:c3:87:bc:65:45:1b:33:49:aa: ee:26:ca:06:56:9d:b5:97:84:b4:1a:ca:9b:73:d9:c8:41:a6: 1d:db:1a:97:b7:09:96:20:0c:10:26:ac:1a:ca:f8:e0:2e:54: 92:f3:2d:5f:94:d8:91:6a:8d:c6:d7:47:99:4b:05:27:d0:c0: 33:49:36:2f:9c:bc:b0:b0:a7:21:4d:e3:ab:58:0c:01:1f:cf: e1:fd:0d:f0:85:4c:68:e5:39:1c:45:a9:98:78:7b:b5:7d:28: 36:03:7c:68:81:8b:93:24:b3:32:b2:52:72:6d:88:59:74:de: 26:f3:01:2c:96:a6:9e:85:21:65:a9:1d:e7:04:19:7a:85:9b: a0:f3:50:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUxMDE4MjAwMTE0WhcNMjUxMDI1MjAwMTE0WjAYMRYwFAYD VQQDEw02OGYzZjIwYS05MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2x0Ubizfe5QzfwE+LgFQeICGU5/j1W2fMuszcrsUpDPfFXxcHsRkrG6p+fR ICNKR0DwPrJK1iy2JSYTgJUnHyf9Sy9s4yriPyintSP/A1D6PL8fsvNn6b1BQiMx uK4CnW+5TgXmegpyEy3dJBuMHKCfPW2vtl0XWoblogqlwhWmGlfxBMYG5rNjjg1V +Jx6BavI90zvsEdWgdXECdjhbsW86RZ7p0pGEr/gHKHsNnUW6DFsXqiMjvOW92gr saoQ3E7AvYYE5euN95ntY4GYTYtWJgnF26h4vUkvb5h2xiPWyVWQhMJ0G9pdnzOj 9QLl0j/E3vak8GgsXpk9raJbNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAMP1hZ WKB6r6zXPhXip0s+XjlsMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOqGXVaVviVWOEPMwGxH8fH4Mip6f5ZzBFlCMw9gsJua3RsRLPKWoH /06PDXX4Rrje8nQX9w32CNOVPDaOeM/tIy3qKb5gcNpwG4TdzlrghaaZ/7w8pIAU w3HHzVJiXRHlLHbc/ZrSwLSRf/IhkrGFYGHgYZLDh7xlRRszSaruJsoGVp21l4S0 Gsqbc9nIQaYd2xqXtwmWIAwQJqwayvjgLlSS8y1flNiRao3G10eZSwUn0MAzSTYv nLywsKchTeOrWAwBH8/h/Q3whUxo5TkcRamYeHu1fSg2A3xogYuTJLMyslJybYhZ dN4m8wEslqaehSFlqR3nBBl6hZug81C3 -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:20 2025 by rpki-client