$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: d2K5x2k7Eyu6XwYNyo+LLvCVSenQdTPBQ7Zz5MxqAUs= Subject key identifier: 71:14:A0:1D:E2:96:92:FB:66:63:41:B1:6C:8E:1C:A9:BC:BD:33:E2 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1DB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D99 Signing time: Fri 22 Aug 2025 16:11:17 +0000 Manifest this update: Fri 22 Aug 2025 16:11:17 +0000 Manifest next update: Fri 29 Aug 2025 16:11:17 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: ZdVshVWsztccYuMbrpjKweUGs+jLhyTubbGAH2jINoE=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7601 (0x1db1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Aug 22 16:11:17 2025 GMT Not After : Aug 29 16:11:17 2025 GMT Subject: CN=68a896a5-2fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:7c:36:05:0d:09:9e:42:38:58:82:02:d2: e0:30:88:68:1a:68:1d:e9:71:00:4a:f3:29:1b:25: fb:7e:6b:0f:f5:13:2b:ff:34:3b:33:4b:70:f1:c9: 34:40:84:df:6c:4b:c7:b2:05:9d:6d:8c:29:1e:1f: c2:42:58:64:97:15:61:1d:c2:b5:5a:40:00:f0:55: 6f:1e:a9:7b:ca:7c:e9:ca:e6:ba:13:38:1f:36:fd: 6f:48:4d:7f:93:86:92:e3:49:ea:a4:67:1e:67:a7: c3:2d:84:ce:bf:88:5b:de:a0:d8:06:66:a5:fa:7a: 8f:ae:40:68:78:52:83:44:46:81:e1:d0:33:d8:be: d1:9b:24:51:96:ba:59:4c:5e:59:fe:7a:b4:d0:e9: 7e:94:37:83:53:e4:ae:d3:de:96:e7:32:6e:cf:9a: c0:41:a5:f5:18:e8:c0:12:9a:86:e6:3e:d3:90:8c: c0:2a:79:c8:03:08:93:4d:eb:5a:48:9c:b3:4b:d0: f9:b0:ab:5d:2f:43:97:1d:4b:37:ab:2d:a3:b8:df: d3:b0:f3:1e:09:18:2a:f7:76:d2:36:ae:86:bc:df: 3f:d0:2f:9a:f6:d0:e0:5f:a1:f8:b7:a8:d8:84:64: 9a:b0:50:b2:73:60:84:39:5c:4b:f8:35:83:36:ee: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:14:A0:1D:E2:96:92:FB:66:63:41:B1:6C:8E:1C:A9:BC:BD:33:E2 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:53:84:76:5d:8a:f7:64:ed:6f:62:b8:db:38:11:39:5c:8c: 60:72:ce:86:d5:68:24:0b:a8:58:5a:cd:70:34:1e:55:e8:5a: 0f:d2:9d:b7:e0:ad:2c:e0:8c:91:e3:74:ca:0e:66:0d:c2:bd: f3:20:e6:87:23:77:b8:f9:03:f4:82:f5:f7:8b:cf:f0:8f:3f: 2f:40:bb:05:c8:b2:23:1b:0c:2a:5a:b2:00:6d:bb:5a:7d:f1: 14:bd:b3:68:b3:25:bf:5c:ca:15:79:5f:45:58:54:d6:01:4d: 31:7f:5a:fe:c2:9e:db:6b:1a:85:8e:d3:97:9a:2d:12:ee:4d: 09:ff:e8:63:ac:19:c6:b9:75:41:7f:1f:9c:c4:23:f5:b8:dd: 38:7f:3b:6d:3b:cd:ee:08:4c:e5:4e:64:57:a9:60:ed:3f:1f: 0d:57:10:90:25:e2:7f:b0:6a:c5:83:b4:5c:c7:29:cf:94:6c: 63:cb:9f:ea:a0:55:66:f3:f0:41:e8:ac:b3:c4:e0:3a:90:ae: af:78:64:d9:2d:a6:7a:32:55:90:58:5a:93:95:ca:37:13:bb: 02:35:7b:db:38:13:f9:d4:9a:9a:11:5a:64:ca:ec:5d:e4:dc: c5:ff:81:cf:db:95:22:0c:a0:ed:6c:45:2f:e1:da:95:3f:22: 61:63:74:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwODIyMTYxMTE3WhcNMjUwODI5MTYxMTE3WjAYMRYwFAYD VQQDEw02OGE4OTZhNS0yZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Rl8NgUNCZ5COFiCAtLgMIhoGmgd6XEASvMpGyX7fmsP9RMr/zQ7M0tw8ck0 QITfbEvHsgWdbYwpHh/CQlhklxVhHcK1WkAA8FVvHql7ynzpyua6EzgfNv1vSE1/ k4aS40nqpGceZ6fDLYTOv4hb3qDYBmal+nqPrkBoeFKDREaB4dAz2L7RmyRRlrpZ TF5Z/nq00Ol+lDeDU+Su096W5zJuz5rAQaX1GOjAEpqG5j7TkIzAKnnIAwiTTeta SJyzS9D5sKtdL0OXHUs3qy2juN/TsPMeCRgq93bSNq6GvN8/0C+a9tDgX6H4t6jY hGSasFCyc2CEOVxL+DWDNu4n6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEUoB3i lpL7ZmNBsWyOHKm8vTPiMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcU4R2XYr3ZO1vYrjbOBE5XIxgcs6G1WgkC6hYWs1wNB5V6FoP0p23 4K0s4IyR43TKDmYNwr3zIOaHI3e4+QP0gvX3i8/wjz8vQLsFyLIjGwwqWrIAbbta ffEUvbNosyW/XMoVeV9FWFTWAU0xf1r+wp7baxqFjtOXmi0S7k0J/+hjrBnGuXVB fx+cxCP1uN04fzttO83uCEzlTmRXqWDtPx8NVxCQJeJ/sGrFg7RcxynPlGxjy5/q oFVm8/BB6KyzxOA6kK6veGTZLaZ6MlWQWFqTlco3E7sCNXvbOBP51JqaEVpkyuxd 5NzF/4HP25UiDKDtbEUv4dqVPyJhY3Rl -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:18 2025 by rpki-client