$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: FwKykSnbOZAf1HxMxMy89MXldEZITosoez57tgLivg4= Subject key identifier: 70:FA:60:6D:31:AC:95:72:96:BE:02:28:94:EB:04:F6:A9:E4:AF:55 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 57 Signing time: Sun 19 Oct 2025 10:34:38 +0000 Manifest this update: Sun 19 Oct 2025 10:34:38 +0000 Manifest next update: Sun 26 Oct 2025 10:34:38 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: 8pJyokd2D/YsBCicIZ8h3Ao38RTDeH/RS3h1G1Wktw0=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Oct 19 10:34:38 2025 GMT Not After : Oct 26 10:34:38 2025 GMT Subject: CN=68f4bebe-691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:7e:a3:9f:eb:fb:06:60:40:ae:e6:d3:10: e3:40:9e:52:b1:2c:36:47:e7:7f:01:15:38:cc:e4: d2:8e:bf:85:9c:13:11:1f:dc:97:a1:c6:cd:7a:2e: ec:c0:89:f8:a7:08:c5:93:49:95:3b:7f:8a:6e:0d: b0:e6:08:3c:f8:b9:92:33:56:5b:37:d1:3f:af:61: a5:57:34:74:7b:98:bd:d1:b8:6c:d2:df:d9:3e:b4: 53:97:0c:a3:5c:11:6c:66:e9:ed:dc:0b:4a:83:71: ef:04:d9:c1:90:2d:6e:85:53:59:0f:46:9c:e4:99: 22:8e:8a:32:88:93:18:35:80:58:52:1c:fc:06:a3: ff:1d:9e:58:a7:73:2f:51:9d:d8:6e:4b:b7:ca:aa: b9:e1:b7:99:04:52:e7:61:39:28:71:fe:dc:9a:65: 91:1c:5a:e2:94:66:79:c8:64:74:a6:03:82:81:74: c4:33:c0:b2:9d:7e:dc:0b:b6:29:70:95:e1:f6:c6: 80:d6:82:ed:6c:f2:03:02:f2:e5:50:71:1d:66:6c: 58:bc:2d:4f:41:11:e5:cc:57:da:d0:87:87:34:e4: 0f:47:97:de:95:07:22:67:a5:3e:d3:78:35:1c:79: 59:df:b6:23:d9:89:13:76:23:49:59:4b:d5:72:74: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FA:60:6D:31:AC:95:72:96:BE:02:28:94:EB:04:F6:A9:E4:AF:55 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ff:06:47:97:92:6d:3f:35:0c:8c:b3:c7:db:bc:82:59:70: bb:40:71:4f:8b:03:4d:d4:88:4c:31:97:5a:46:1c:37:22:ea: 84:eb:c2:84:19:98:62:b9:2e:63:dc:74:3e:4e:05:a4:c6:58: e5:98:c4:a4:91:56:64:43:4c:85:5f:88:23:71:31:a6:59:14: b6:2b:69:09:a8:a0:3c:72:e9:c2:24:ae:aa:12:54:ab:ec:f7: ad:66:17:60:f4:ab:b8:f0:5d:38:d9:57:ec:a2:f9:93:18:6d: 4a:db:81:e1:19:35:31:03:91:45:a0:ce:4a:21:62:5b:23:bc: dc:0b:e3:46:53:73:e3:ad:3e:e5:b1:c0:f7:8e:1d:66:89:2e: 87:56:04:92:1a:9a:c3:4e:ed:9e:ed:79:10:ed:cb:65:cc:88: d7:70:9d:4e:11:f3:32:6c:79:75:4b:57:b4:0f:50:f8:f9:a8: e1:33:a9:72:49:c9:4e:ae:46:e5:3b:df:53:59:e1:6c:31:bc: 9d:d8:82:7b:92:a6:d6:ac:ee:00:92:de:c3:a3:71:1d:5f:a6: 8b:ce:6e:a3:22:b0:7e:20:18:08:4f:5c:03:7d:5a:0e:50:02: a6:cf:84:29:1f:d6:15:7a:c0:7f:6b:3d:8f:f1:7b:48:a2:13: 8e:b1:60:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTEwMTkxMDM0MzhaFw0yNTEwMjYxMDM0MzhaMBgxFjAUBgNV BAMTDTY4ZjRiZWJlLTY5MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMgn6jn+v7BmBArubTEONAnlKxLDZH538BFTjM5NKOv4WcExEf3Jehxs16LuzA ifinCMWTSZU7f4puDbDmCDz4uZIzVls30T+vYaVXNHR7mL3RuGzS39k+tFOXDKNc EWxm6e3cC0qDce8E2cGQLW6FU1kPRpzkmSKOijKIkxg1gFhSHPwGo/8dnlincy9R ndhuS7fKqrnht5kEUudhOShx/tyaZZEcWuKUZnnIZHSmA4KBdMQzwLKdftwLtilw leH2xoDWgu1s8gMC8uVQcR1mbFi8LU9BEeXMV9rQh4c05A9Hl96VByJnpT7TeDUc eVnftiPZiRN2I0lZS9VydMbzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcPpgbTGs lXKWvgIolOsE9qnkr1UwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIr/BkeXkm0/NQyMs8fbvIJZcLtAcU+LA03UiEwxl1pGHDci6oTrwoQZ mGK5LmPcdD5OBaTGWOWYxKSRVmRDTIVfiCNxMaZZFLYraQmooDxy6cIkrqoSVKvs 961mF2D0q7jwXTjZV+yi+ZMYbUrbgeEZNTEDkUWgzkohYlsjvNwL40ZTc+OtPuWx wPeOHWaJLodWBJIamsNO7Z7teRDty2XMiNdwnU4R8zJseXVLV7QPUPj5qOEzqXJJ yU6uRuU731NZ4WwxvJ3YgnuSptas7gCS3sOjcR1fpovObqMisH4gGAhPXAN9Wg5Q AqbPhCkf1hV6wH9rPY/xe0iiE46xYM0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:34 2025 by rpki-client