$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: P5lKIcsN3fiTaTxPiOWTWI6p15ykiMoYP7EJHIKxZGc= Subject key identifier: EE:7C:39:60:69:5C:71:10:36:22:A6:74:99:10:8B:F8:8A:FA:FF:FA Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0C96 Signing time: Sat 18 Oct 2025 19:00:51 +0000 Manifest this update: Sat 18 Oct 2025 19:00:51 +0000 Manifest next update: Sat 25 Oct 2025 19:00:51 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: t4V3LbHCzmKGQ1xr7i/gEy8dnasSAZHxQoAHUV0kN4k=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Oct 18 19:00:51 2025 GMT Not After : Oct 25 19:00:51 2025 GMT Subject: CN=68f3e3e3-edb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:23:4a:37:e3:0e:d1:91:87:31:5f:da:00: 19:e8:35:3e:fc:81:44:48:ff:f3:ed:da:12:e9:b5: 52:ee:53:1f:a2:09:9d:44:16:89:b7:7c:4f:9b:f9: dd:a1:e4:9c:c8:ee:22:3c:ca:65:e0:24:cf:6a:3a: f6:3c:b6:e8:f1:ce:82:b0:33:db:22:8d:ca:22:d8: fb:c3:1f:a8:48:3d:1f:29:49:a5:db:8d:52:a0:51: 8f:fa:c2:85:7a:ad:a9:b0:88:34:b2:d9:df:39:85: 2d:73:f5:1c:53:7d:17:4c:f7:65:e4:3c:89:05:61: e5:5a:89:1b:3f:39:ee:12:bd:59:f0:c9:94:de:e5: 9c:42:8c:eb:a4:49:80:88:4e:7a:13:d5:a6:00:7e: 5e:78:64:4b:a2:89:c3:7a:b5:d1:47:7d:1e:3d:99: af:ca:39:eb:a4:55:f0:ca:e2:24:11:3d:e2:e2:5b: 44:93:4a:29:1f:18:8b:26:94:82:04:39:fe:d7:b3: a1:48:07:51:87:32:52:c2:31:ca:93:c5:a2:11:35: 79:60:40:b1:dc:43:86:ba:e9:ce:09:c7:45:b9:76: eb:91:ba:34:28:58:56:7e:1e:78:d0:96:5f:db:b2: d9:43:e2:26:26:6b:50:9b:b3:e7:e3:ea:7c:ad:45: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7C:39:60:69:5C:71:10:36:22:A6:74:99:10:8B:F8:8A:FA:FF:FA X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a2:5a:89:15:ce:06:59:a5:d8:de:10:a9:51:b6:b6:01:ee: 4e:ee:08:f3:25:03:64:ec:b8:c9:76:ed:3e:7e:39:16:07:78: 22:76:f7:e4:b3:11:ff:73:a0:68:dd:47:9f:da:4a:2c:3f:ea: c6:96:b5:50:18:4e:43:5a:e5:10:49:cd:2d:fb:f5:5e:06:9c: 6d:d9:09:fe:e8:d8:d9:34:81:e7:3b:e6:7e:28:7d:ad:0a:79: a2:1b:63:d0:8c:11:d5:ae:81:04:3c:e9:c1:04:d4:03:04:79: b1:0a:2a:08:27:fb:ce:70:c8:c1:e3:62:e0:b7:8a:ae:99:75: fd:5d:7a:e3:63:b0:74:24:7a:94:5e:19:36:3a:55:ce:f0:a3: ad:d5:1b:31:ee:dd:6b:e8:1b:94:e8:f8:d8:29:3e:a4:f1:d1: 33:90:e3:3d:36:05:c7:f9:17:6d:12:04:ea:31:18:0b:88:3c: cf:33:7d:0f:2c:b4:e8:14:2f:1f:a2:9a:f2:84:9d:2d:37:bd: d3:23:34:f8:a7:d4:3f:4f:0c:27:37:64:fa:1d:ac:47:8d:2e: 52:d6:62:c8:dd:fd:13:ed:5a:e4:40:3e:e8:2e:30:f5:fd:62: 58:65:24:6c:ba:29:59:62:1d:e8:48:53:04:28:de:68:57:10: e6:95:97:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUxMDE4MTkwMDUxWhcNMjUxMDI1MTkwMDUxWjAYMRYwFAYD VQQDEw02OGYzZTNlMy1lZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3REjSjfjDtGRhzFf2gAZ6DU+/IFESP/z7doS6bVS7lMfogmdRBaJt3xPm/nd oeScyO4iPMpl4CTPajr2PLbo8c6CsDPbIo3KItj7wx+oSD0fKUml241SoFGP+sKF eq2psIg0stnfOYUtc/UcU30XTPdl5DyJBWHlWokbPznuEr1Z8MmU3uWcQozrpEmA iE56E9WmAH5eeGRLoonDerXRR30ePZmvyjnrpFXwyuIkET3i4ltEk0opHxiLJpSC BDn+17OhSAdRhzJSwjHKk8WiETV5YECx3EOGuunOCcdFuXbrkbo0KFhWfh540JZf 27LZQ+ImJmtQm7Pn4+p8rUVTbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO58OWBp XHEQNiKmdJkQi/iK+v/6MB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+olqJFc4GWaXY3hCpUba2Ae5O7gjzJQNk7LjJdu0+fjkWB3gidvfk sxH/c6Bo3Uef2kosP+rGlrVQGE5DWuUQSc0t+/VeBpxt2Qn+6NjZNIHnO+Z+KH2t CnmiG2PQjBHVroEEPOnBBNQDBHmxCioIJ/vOcMjB42Lgt4qumXX9XXrjY7B0JHqU Xhk2OlXO8KOt1Rsx7t1r6BuU6PjYKT6k8dEzkOM9NgXH+RdtEgTqMRgLiDzPM30P LLToFC8fopryhJ0tN73TIzT4p9Q/TwwnN2T6HaxHjS5S1mLI3f0T7VrkQD7oLjD1 /WJYZSRsuilZYh3oSFMEKN5oVxDmlZci -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:11 2025 by rpki-client