$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: t++S1Xk5wzRAgMn0NzvJWlYOHrn9CHOEzLskr1K8Td0= Subject key identifier: 26:7B:3A:4F:21:93:99:F4:83:D0:44:FB:11:0D:6B:EC:A1:4A:FE:85 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0576 Signing time: Fri 22 Aug 2025 23:28:08 +0000 Manifest this update: Fri 22 Aug 2025 23:28:07 +0000 Manifest next update: Fri 29 Aug 2025 23:28:07 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: 84iHfKGGoYnripRgoDIdj0EPfgR9uMh0JSB2JeagDlU=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Aug 22 23:28:07 2025 GMT Not After : Aug 29 23:28:07 2025 GMT Subject: CN=68a8fd07-cc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:fb:a6:9e:99:90:8c:11:b1:6b:94:be:b2: dc:ad:bc:90:9e:be:dc:2d:9b:e9:2d:ae:ec:4a:12: 6b:e3:fa:cb:4a:a0:df:b0:3e:f0:7a:6d:3c:0f:8b: a7:83:a0:4b:71:0c:4b:69:72:78:ae:98:85:80:c5: 0d:9e:ea:f5:57:f2:7c:ed:f5:18:a1:7a:e5:99:59: 7d:b0:a3:3b:8e:41:1f:97:20:bf:45:98:cb:f7:dc: bd:2d:67:48:32:b4:4c:2e:81:08:ee:77:0e:d5:66: b4:ea:14:d9:1d:74:b3:50:d8:ac:cb:74:3d:f2:cd: 6f:cb:c9:69:2a:13:28:be:52:15:87:d8:93:6a:5e: 17:5a:75:1d:93:d2:4c:b9:4a:03:c8:c2:6d:26:15: 3b:79:ad:38:e1:e2:79:9b:9b:bb:40:65:ba:fa:74: c4:e8:b5:14:88:ff:bc:b0:41:1d:ef:82:d6:9e:14: 70:4b:67:ac:5e:ee:a4:9c:dc:19:bb:2d:24:12:91: 2e:54:a2:17:8b:84:7f:a3:7f:c2:08:d9:f8:2a:03: 67:2a:c1:c8:df:a3:84:08:91:82:c9:12:f7:a2:28: 19:d0:59:47:aa:6d:c6:dc:a7:e3:5f:65:13:04:cb: b9:80:7e:d2:8f:20:90:19:8c:69:9d:a8:53:b1:75: de:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7B:3A:4F:21:93:99:F4:83:D0:44:FB:11:0D:6B:EC:A1:4A:FE:85 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8f:00:4d:02:7c:95:28:54:f6:d5:07:44:0a:5a:7a:0e:b7: a6:d7:bd:5f:c1:46:d3:c3:56:90:7d:fc:63:4d:9a:49:9d:ad: 87:cd:dd:6b:0a:82:a1:b4:d3:e8:48:d1:2c:b9:92:f3:fc:1a: e7:3b:4e:27:12:f1:61:44:4e:4b:db:8a:bf:64:75:3d:55:a4: 08:48:f5:87:03:8e:0a:3d:ed:9c:c4:b2:58:58:bc:40:94:aa: 66:6c:03:38:2d:22:49:d8:7b:0c:64:52:a8:da:d8:35:e8:59: 05:ce:ca:7d:88:6f:31:7c:ae:bc:00:f4:82:1f:58:46:aa:25: 8c:35:66:de:8a:4d:ab:45:1e:58:47:9f:1d:4b:2f:0f:d1:39: ae:78:64:d6:48:2b:4f:8e:37:9f:41:be:a2:fd:d8:87:83:7e: 67:ac:b4:7f:06:9e:30:8e:f1:10:ea:28:ac:65:90:42:e6:66: d8:15:b7:51:83:56:f7:b5:06:a3:da:ff:31:c9:d8:a5:3c:a5: fa:fc:12:4b:0a:3c:c7:a6:86:4e:82:5f:45:ab:95:90:dd:51: 6e:a3:a6:fa:ce:61:52:ff:12:41:ec:6c:0d:54:8a:ba:60:05: 03:1c:15:f2:42:cb:ee:ef:57:3d:fb:b0:3d:de:fa:64:28:58: dc:c4:88:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUwODIyMjMyODA3WhcNMjUwODI5MjMyODA3WjAYMRYwFAYD VQQDEw02OGE4ZmQwNy1jYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXf7pp6ZkIwRsWuUvrLcrbyQnr7cLZvpLa7sShJr4/rLSqDfsD7wem08D4un g6BLcQxLaXJ4rpiFgMUNnur1V/J87fUYoXrlmVl9sKM7jkEflyC/RZjL99y9LWdI MrRMLoEI7ncO1Wa06hTZHXSzUNisy3Q98s1vy8lpKhMovlIVh9iTal4XWnUdk9JM uUoDyMJtJhU7ea044eJ5m5u7QGW6+nTE6LUUiP+8sEEd74LWnhRwS2esXu6knNwZ uy0kEpEuVKIXi4R/o3/CCNn4KgNnKsHI36OECJGCyRL3oigZ0FlHqm3G3KfjX2UT BMu5gH7SjyCQGYxpnahTsXXeWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ7Ok8h k5n0g9BE+xENa+yhSv6FMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcjwBNAnyVKFT21QdEClp6Drem171fwUbTw1aQffxjTZpJna2Hzd1r CoKhtNPoSNEsuZLz/BrnO04nEvFhRE5L24q/ZHU9VaQISPWHA44KPe2cxLJYWLxA lKpmbAM4LSJJ2HsMZFKo2tg16FkFzsp9iG8xfK68APSCH1hGqiWMNWbeik2rRR5Y R58dSy8P0TmueGTWSCtPjjefQb6i/diHg35nrLR/Bp4wjvEQ6iisZZBC5mbYFbdR g1b3tQaj2v8xydilPKX6/BJLCjzHpoZOgl9Fq5WQ3VFuo6b6zmFS/xJB7GwNVIq6 YAUDHBXyQsvu71c9+7A93vpkKFjcxIgO -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:39 2025 by rpki-client