$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: hggdL8U1VrMtx2svg4G3GSzBkbFRiKnF5ZBhIORzCEI= Subject key identifier: E5:8A:1C:26:F3:32:5E:EF:29:AF:F7:28:D4:2E:E6:03:F7:68:61:23 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 1E Signing time: Sun 29 Jun 2025 06:54:19 +0000 Manifest this update: Sun 29 Jun 2025 06:54:18 +0000 Manifest next update: Sun 06 Jul 2025 06:54:18 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: P7DMwE0tT8xtuP8Naf7JU0gG6C2ZalwZdjFWm4oa6dk=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Jun 29 06:54:18 2025 GMT Not After : Jul 6 06:54:18 2025 GMT Subject: CN=6860e31a-a112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:f8:49:e1:71:46:bc:16:60:dd:93:06:36: f6:c4:59:49:94:c8:da:b6:27:71:7d:32:62:0a:b2: 3b:3f:d2:cb:af:e6:a5:26:c4:df:40:91:63:8c:ef: 0f:48:1a:60:26:43:0f:41:e1:bb:e3:e6:b0:25:b1: d8:2d:e1:86:5e:43:72:08:87:e0:f7:63:10:fe:e8: 72:a0:22:5a:9f:64:1f:22:2e:80:c3:5d:c8:8c:59: cc:0f:81:90:4a:c8:9f:ad:de:a3:af:43:2a:f4:bd: b2:cb:f1:7c:a3:d0:1e:3e:04:70:bc:fd:70:4b:38: ec:8a:e2:ae:40:e2:3e:90:53:9c:cc:b1:ac:76:b0: f3:31:15:a1:4a:e6:ac:11:1c:d5:ad:78:8e:90:76: 36:45:81:ef:08:a8:d3:00:66:f9:d5:ab:af:1c:9d: 2b:7c:72:67:1e:6b:a2:08:15:9f:33:2e:b9:00:42: c7:9f:3a:b7:0d:dd:b1:a6:f7:0a:2f:4f:42:3c:39: c0:d9:21:aa:12:cd:c8:8e:09:93:5b:fc:59:dc:63: a8:51:0c:4a:cb:21:7d:93:27:11:d2:13:b7:29:f0: 48:44:39:30:cf:e0:54:18:7b:57:1c:fc:93:d2:9f: 6a:3d:f2:73:05:fe:7c:70:8a:4f:88:4c:c6:78:99: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:1C:26:F3:32:5E:EF:29:AF:F7:28:D4:2E:E6:03:F7:68:61:23 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:86:85:bd:7b:88:b3:57:fc:f3:54:9b:97:29:b2:6c:e3:de: e7:73:16:58:1f:bc:e3:51:8f:d1:a0:d8:9b:5b:8b:92:cd:74: 4e:b3:00:30:38:d9:95:f2:3e:50:8b:1c:98:c5:63:e4:f9:ce: 87:0f:a9:88:ae:ab:54:9a:e2:fa:9c:72:09:97:8c:8d:b9:75: 71:81:94:6a:42:b4:07:72:fe:13:3c:02:a0:df:c4:f4:f8:26: bb:ee:a4:01:71:8c:99:f0:47:87:6b:88:81:0f:2b:5c:9a:85: 2b:d8:f2:3f:e7:45:d3:2a:11:72:1c:3a:ee:42:f9:d9:3f:26: 21:a5:29:23:f9:10:c5:27:ef:e3:9e:d8:31:a4:cd:c3:c8:65: 36:22:09:47:5a:76:fd:61:59:0b:a6:94:2f:2e:63:68:3a:65: 15:62:ed:75:66:58:9d:9b:a6:c6:96:ee:32:75:3c:41:0b:ca: d3:c1:3e:b5:b6:da:85:2d:4b:0b:9e:b8:24:35:99:cb:7c:19: 4b:6c:3f:c0:cf:8b:2b:b0:a2:81:f9:c8:f1:f0:22:29:da:c7: 76:57:8b:e1:f8:30:86:3a:44:04:5f:c5:c8:b0:74:a8:59:96: da:ad:9e:1f:b8:ae:ce:ed:40:4f:3f:42:85:92:98:8d:fa:d8: d2:33:a0:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA2MjkwNjU0MThaFw0yNTA3MDYwNjU0MThaMBgxFjAUBgNV BAMTDTY4NjBlMzFhLWExMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC98vhJ4XFGvBZg3ZMGNvbEWUmUyNq2J3F9MmIKsjs/0suv5qUmxN9AkWOM7w9I GmAmQw9B4bvj5rAlsdgt4YZeQ3IIh+D3YxD+6HKgIlqfZB8iLoDDXciMWcwPgZBK yJ+t3qOvQyr0vbLL8Xyj0B4+BHC8/XBLOOyK4q5A4j6QU5zMsax2sPMxFaFK5qwR HNWteI6QdjZFge8IqNMAZvnVq68cnSt8cmcea6IIFZ8zLrkAQsefOrcN3bGm9wov T0I8OcDZIaoSzciOCZNb/FncY6hRDErLIX2TJxHSE7cp8EhEOTDP4FQYe1cc/JPS n2o98nMF/nxwik+ITMZ4mdORAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5YocJvMy Xu8pr/co1C7mA/doYSMwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaGhb17iLNX/PNUm5cpsmzj3udzFlgfvONRj9Gg2Jtbi5LNdE6zADA4 2ZXyPlCLHJjFY+T5zocPqYiuq1Sa4vqccgmXjI25dXGBlGpCtAdy/hM8AqDfxPT4 JrvupAFxjJnwR4driIEPK1yahSvY8j/nRdMqEXIcOu5C+dk/JiGlKSP5EMUn7+Oe 2DGkzcPIZTYiCUdadv1hWQumlC8uY2g6ZRVi7XVmWJ2bpsaW7jJ1PEELytPBPrW2 2oUtSwueuCQ1mct8GUtsP8DPiyuwooH5yPHwIinax3ZXi+H4MIY6RARfxciwdKhZ ltqtnh+4rs7tQE8/QoWSmI362NIzoJg= -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:12 2025 by rpki-client