$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: uCQ6n66UJG4RxF8AjW09RsXF/BlAx6TGer3v6X8ON9k= Subject key identifier: A5:35:EC:02:90:9A:B9:35:B7:0F:F4:74:A7:9D:A2:10:22:54:C4:7B Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0C5F Signing time: Wed 02 Jul 2025 18:34:26 +0000 Manifest this update: Wed 02 Jul 2025 18:34:25 +0000 Manifest next update: Wed 09 Jul 2025 18:34:25 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: 8PGbY6DeM0aycf6znlzvUw0Y6e4XBIPyG8+kO7z81vA=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Jul 2 18:34:25 2025 GMT Not After : Jul 9 18:34:25 2025 GMT Subject: CN=68657bb1-b80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:ca:c8:d5:6e:ae:78:ec:15:0f:eb:ed:ed: 14:06:17:ac:3b:c7:20:ee:ec:5f:f1:f3:34:6c:34: 10:3b:d9:08:e6:98:7f:29:30:6b:bf:17:50:18:d3: 9a:2d:82:c6:6f:7b:d7:14:96:92:d5:97:c3:f1:0b: de:6e:61:b9:f8:56:4c:69:68:a7:74:4c:8f:be:f3: d5:60:59:b5:2d:d7:77:18:c5:8f:32:c9:67:64:09: 31:ac:4e:70:7c:8d:a2:04:06:58:b9:34:4a:90:13: e8:66:67:b6:4b:d3:12:0c:f0:db:f3:82:5f:b4:31: 6e:dd:13:6d:53:c8:f5:a8:64:0b:b1:45:a5:19:e3: fa:50:5a:7a:dc:a3:ae:16:80:e8:0d:ea:64:97:fd: 5c:9e:d4:af:26:d4:9e:18:a3:68:a1:bc:63:84:ca: b7:7c:e8:7a:e0:d5:32:3d:f9:4a:48:85:12:e9:87: 51:be:40:c8:6e:82:15:c1:e4:ce:13:d5:f7:3e:74: 17:09:1f:30:b4:dd:98:2b:8b:69:d9:05:77:ba:27: 8b:19:e9:a3:54:35:f9:f0:00:a8:d1:5b:9a:2c:1f: 87:58:33:f3:f0:05:47:1f:d4:8b:3e:d5:07:59:1d: a9:02:d4:86:33:1a:a0:9b:60:2b:41:2e:1f:c8:6f: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:EC:02:90:9A:B9:35:B7:0F:F4:74:A7:9D:A2:10:22:54:C4:7B X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:88:58:44:1c:a9:08:4c:37:80:34:8a:77:79:4c:69:8f:c8: 64:d0:d8:82:ab:ad:31:ee:d7:b2:a0:ed:4e:d8:c0:e4:11:0c: dc:d5:65:ef:df:36:b8:77:ee:8f:47:cb:25:89:e4:83:71:8d: dd:53:50:36:ad:10:94:3d:86:d2:b0:b3:09:c4:eb:c6:45:1e: d6:ed:22:4b:b8:68:76:87:1e:ce:e5:0d:92:87:21:1d:b1:67: 62:63:56:91:29:82:38:75:a9:b0:c2:1d:bf:7b:00:5a:a4:36: 84:fa:68:83:64:97:63:9e:dc:3f:73:34:e5:71:6e:1b:9b:7c: cd:b0:c6:df:f7:ff:3c:19:8c:b5:69:85:a7:a7:1b:16:62:ae: 92:ad:8e:a4:c9:31:5b:3d:16:4b:14:2d:e4:60:2c:0a:0a:73: 3d:5a:3e:1d:46:0e:27:d4:c0:8e:a9:6f:79:07:f6:bb:31:63: bb:8c:04:16:52:be:d5:64:4c:28:b6:1d:dd:f4:4d:6b:2e:07: f3:86:ae:6b:5f:7c:a2:f4:21:56:9b:8f:eb:b7:c6:8e:e6:98: 1c:4c:a7:84:11:b4:08:48:2b:c8:c5:36:a7:6e:aa:55:65:a8: ee:58:ec:3d:11:e6:ed:d5:2c:ef:e0:16:47:3c:9a:d8:18:28: 86:3e:24:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUwNzAyMTgzNDI1WhcNMjUwNzA5MTgzNDI1WjAYMRYwFAYD VQQDEw02ODY1N2JiMS1iODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYfKyNVurnjsFQ/r7e0UBhesO8cg7uxf8fM0bDQQO9kI5ph/KTBrvxdQGNOa LYLGb3vXFJaS1ZfD8QvebmG5+FZMaWindEyPvvPVYFm1Ldd3GMWPMslnZAkxrE5w fI2iBAZYuTRKkBPoZme2S9MSDPDb84JftDFu3RNtU8j1qGQLsUWlGeP6UFp63KOu FoDoDepkl/1cntSvJtSeGKNoobxjhMq3fOh64NUyPflKSIUS6YdRvkDIboIVweTO E9X3PnQXCR8wtN2YK4tp2QV3uieLGemjVDX58ACo0VuaLB+HWDPz8AVHH9SLPtUH WR2pAtSGMxqgm2ArQS4fyG+a3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU17AKQ mrk1tw/0dKedohAiVMR7MB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAviFhEHKkITDeANIp3eUxpj8hk0NiCq60x7teyoO1O2MDkEQzc1WXv 3za4d+6PR8slieSDcY3dU1A2rRCUPYbSsLMJxOvGRR7W7SJLuGh2hx7O5Q2ShyEd sWdiY1aRKYI4damwwh2/ewBapDaE+miDZJdjntw/czTlcW4bm3zNsMbf9/88GYy1 aYWnpxsWYq6SrY6kyTFbPRZLFC3kYCwKCnM9Wj4dRg4n1MCOqW95B/a7MWO7jAQW Ur7VZEwoth3d9E1rLgfzhq5rX3yi9CFWm4/rt8aO5pgcTKeEEbQISCvIxTanbqpV ZajuWOw9Eebt1Szv4BZHPJrYGCiGPiTS -----END CERTIFICATE-----Generated at Thu Jul 3 09:05:30 2025 by rpki-client