$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: iTwa3jtgkcfYSGF+2y32fZHIw2hP1ToJj2TDV4PWCI4= Subject key identifier: C9:7B:D4:58:47:BF:76:D9:C5:B5:5C:F3:51:B8:64:46:CD:E7:7D:53 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0593 Signing time: Sun 19 Oct 2025 00:52:17 +0000 Manifest this update: Sun 19 Oct 2025 00:52:16 +0000 Manifest next update: Sun 26 Oct 2025 00:52:16 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: 8ixUKJTq3s7eqzK0SVDW/zyolznF7IR8ttKklmuex7o=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Oct 19 00:52:16 2025 GMT Not After : Oct 26 00:52:16 2025 GMT Subject: CN=68f43640-1db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:62:ea:fb:d2:f1:87:75:b6:18:21:6f:9f: 42:c2:22:03:7c:4e:66:b2:4e:f9:69:ff:87:57:13: c2:07:02:fe:1f:f7:7b:5f:ac:80:05:a4:d5:81:3a: 1d:9a:1e:73:82:b2:ab:5c:e7:9a:f4:b0:26:0e:bb: 51:24:b3:56:b2:cb:0c:e3:c4:99:4b:04:08:9d:d2: 54:c2:d6:3e:91:c9:bd:63:24:9a:5d:ae:a0:2b:d2: 9a:9a:1b:38:0b:6e:91:ad:3e:25:76:b9:0c:14:8f: 4b:dc:7a:80:cf:0a:72:1c:30:aa:13:96:bc:91:4d: 49:ad:64:2a:a9:ca:63:e2:13:91:d2:8f:6b:ca:84: 68:a6:15:98:2d:de:b8:6c:b3:33:40:fb:cf:a3:31: 53:a0:1f:c1:c9:73:18:24:29:61:db:a6:d9:5c:06: 31:77:cf:d8:81:41:63:84:fb:a4:6d:7f:0e:b8:e3: cd:e1:6d:9b:83:83:a4:1b:a3:25:22:18:64:c4:6a: bf:c7:50:93:67:85:e4:10:36:85:c6:09:47:94:16: 47:99:66:a0:d3:3b:5b:68:13:73:d1:bd:4e:3a:7d: 8d:7a:85:8f:af:77:e8:67:32:24:a3:4b:7a:bd:45: d8:f2:df:12:9a:b0:7d:11:e4:e0:8b:a2:b9:ad:d2: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7B:D4:58:47:BF:76:D9:C5:B5:5C:F3:51:B8:64:46:CD:E7:7D:53 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d3:c0:99:5e:bc:2b:84:31:33:d3:74:92:db:b0:84:18:2b: c9:45:ca:9f:da:d1:7f:44:3d:1b:a4:8e:a1:00:d1:6f:23:b1: b8:14:ce:65:2d:04:1a:f9:9b:6b:44:39:29:1a:89:04:11:b8: 00:42:76:65:be:f3:d4:6e:4a:a7:89:ba:f9:36:27:a1:31:8b: 62:d4:0d:13:3e:c8:87:fd:97:34:7d:85:42:63:e4:b2:50:78: 55:93:5e:9a:0f:90:17:cc:2c:36:45:d7:59:44:6a:41:c7:4a: 4e:6f:67:f8:e6:83:e6:4a:5b:d8:3e:2f:50:44:b3:3b:59:81: 5b:49:eb:a0:3a:a5:75:c9:00:7a:8f:26:8b:51:17:9f:20:5d: e3:ca:8b:91:ae:20:72:6d:20:a1:c8:7b:9b:f6:82:ac:04:8f: b7:ea:79:ee:3b:14:4c:07:1f:2d:04:c1:29:11:31:ff:d9:c8: 92:6e:98:68:c2:f6:84:01:72:41:30:1f:62:bc:da:89:0e:82: 59:0f:8d:d6:d9:49:93:d1:7f:c9:75:06:0a:2d:6a:0c:8a:8f: b3:96:36:a0:4d:df:3c:d9:f2:54:fa:93:af:b7:1b:b9:31:8b: a8:9b:15:5b:9a:f3:01:68:c9:a9:6e:c5:24:f5:35:64:b6:0c: 97:e3:0f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUxMDE5MDA1MjE2WhcNMjUxMDI2MDA1MjE2WjAYMRYwFAYD VQQDEw02OGY0MzY0MC0xZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxti6vvS8Yd1thghb59CwiIDfE5msk75af+HVxPCBwL+H/d7X6yABaTVgTod mh5zgrKrXOea9LAmDrtRJLNWsssM48SZSwQIndJUwtY+kcm9YySaXa6gK9Kamhs4 C26RrT4ldrkMFI9L3HqAzwpyHDCqE5a8kU1JrWQqqcpj4hOR0o9ryoRophWYLd64 bLMzQPvPozFToB/ByXMYJClh26bZXAYxd8/YgUFjhPukbX8OuOPN4W2bg4OkG6Ml IhhkxGq/x1CTZ4XkEDaFxglHlBZHmWag0ztbaBNz0b1OOn2NeoWPr3foZzIko0t6 vUXY8t8SmrB9EeTgi6K5rdLbywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl71FhH v3bZxbVc81G4ZEbN531TMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq08CZXrwrhDEz03SS27CEGCvJRcqf2tF/RD0bpI6hANFvI7G4FM5l LQQa+ZtrRDkpGokEEbgAQnZlvvPUbkqnibr5NiehMYti1A0TPsiH/Zc0fYVCY+Sy UHhVk16aD5AXzCw2RddZRGpBx0pOb2f45oPmSlvYPi9QRLM7WYFbSeugOqV1yQB6 jyaLURefIF3jyouRriBybSChyHub9oKsBI+36nnuOxRMBx8tBMEpETH/2ciSbpho wvaEAXJBMB9ivNqJDoJZD43W2UmT0X/JdQYKLWoMio+zljagTd882fJU+pOvtxu5 MYuomxVbmvMBaMmpbsUk9TVktgyX4w/O -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:00 2025 by rpki-client