$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: 3tpgeSibCJaFU+pyr/f7byL5Ce8di1LUIfI/voV7x7c= Subject key identifier: 5B:98:E0:E8:52:F7:26:61:BD:BD:28:69:19:93:61:DE:D3:F1:82:5B Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 3A Signing time: Sat 23 Aug 2025 07:47:04 +0000 Manifest this update: Sat 23 Aug 2025 07:47:04 +0000 Manifest next update: Sat 30 Aug 2025 07:47:04 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: B23Nhgdfwk2xqKQRLy6YqPy0l/uX83ti3JsYEgHUoV8=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Aug 23 07:47:04 2025 GMT Not After : Aug 30 07:47:04 2025 GMT Subject: CN=68a971f8-9de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:1a:af:bc:19:c8:98:c1:2a:19:f9:10:fb: 03:e0:00:f6:8c:0a:15:ae:b8:22:56:05:cf:e6:47: 88:28:8b:9a:16:82:e4:a5:9e:a9:0e:ba:8e:90:b0: ff:eb:94:e2:d1:86:47:82:8d:2b:18:77:6e:3d:09: 31:4d:db:d4:e7:d6:c8:5a:61:e8:5f:07:d9:7a:56: 03:53:99:d3:44:cb:31:c7:0d:54:00:5a:1f:57:28: 1c:36:f0:6c:9c:f3:c6:78:41:36:cc:5a:63:25:53: b0:79:1e:f7:2a:34:16:e0:23:71:57:5a:df:18:6c: cb:9d:37:9a:bb:53:c7:88:34:30:72:df:09:c1:2d: 18:43:48:a2:82:92:3c:1b:85:a8:5a:ad:64:a7:ab: a6:7a:82:87:f6:d4:60:a4:9c:8f:92:c4:8d:0c:5b: c3:84:60:97:d6:3d:68:c5:a0:3f:a1:32:59:cc:76: 9b:ab:43:04:01:2c:25:01:d8:6a:4d:00:ae:9c:b6: 4f:ff:e2:d9:c4:57:c6:83:57:08:85:51:50:97:2a: b4:f1:a6:d7:58:f1:ca:f2:f6:e4:e5:8e:cf:ef:b0: b5:36:a2:d5:64:ef:52:1f:44:48:37:ff:86:c3:e6: 05:26:9d:94:c3:f2:aa:de:bb:ae:e4:4f:e7:ab:ad: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:E0:E8:52:F7:26:61:BD:BD:28:69:19:93:61:DE:D3:F1:82:5B X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:82:e7:6b:63:dc:cf:21:37:41:3f:a9:dc:a3:d2:ed:82:bd: 33:7b:3f:bf:0a:71:ba:d4:bf:b3:26:93:39:cd:7a:5e:0d:19: 9e:d9:d8:55:34:b5:3e:ff:97:de:77:43:b0:e3:aa:4e:93:cd: 9e:7f:28:2b:07:19:41:38:d9:7d:b2:57:5b:a2:37:82:1d:d5: c2:74:f1:86:c6:be:4d:df:8c:94:ea:8b:62:1e:e3:36:a9:58: 0b:25:74:25:e4:06:27:a6:2a:d5:2f:de:66:c7:ce:06:b0:ff: 9d:f5:fe:34:92:b9:38:98:74:69:50:76:62:03:ef:a5:fd:c9: eb:e2:17:d1:e9:63:2a:bd:40:68:31:db:e9:a8:3c:9d:fc:a5: 8b:ac:75:09:c0:74:9d:7e:fa:1e:42:4e:19:b7:64:e6:22:92: 70:ef:55:5b:73:7b:a8:1e:f5:a2:7b:1c:02:f8:ec:9a:ea:72: 7c:ee:9a:ba:8a:b2:26:92:59:19:ec:d5:57:c2:ab:df:96:66: 82:f5:86:77:ac:02:a6:c6:fb:21:ee:0e:9f:56:e4:2b:af:d4: 41:a6:93:2f:20:9f:29:b9:30:17:3a:61:8b:b1:d1:66:17:c9: 92:7f:b0:ac:2c:7c:7a:46:4f:73:77:55:d0:a8:51:31:cd:e1: 23:8b:48:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA4MjMwNzQ3MDRaFw0yNTA4MzAwNzQ3MDRaMBgxFjAUBgNV BAMTDTY4YTk3MWY4LTlkZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzWBqvvBnImMEqGfkQ+wPgAPaMChWuuCJWBc/mR4goi5oWguSlnqkOuo6QsP/r lOLRhkeCjSsYd249CTFN29Tn1shaYehfB9l6VgNTmdNEyzHHDVQAWh9XKBw28Gyc 88Z4QTbMWmMlU7B5HvcqNBbgI3FXWt8YbMudN5q7U8eINDBy3wnBLRhDSKKCkjwb haharWSnq6Z6gof21GCknI+SxI0MW8OEYJfWPWjFoD+hMlnMdpurQwQBLCUB2GpN AK6ctk//4tnEV8aDVwiFUVCXKrTxptdY8cry9uTljs/vsLU2otVk71IfREg3/4bD 5gUmnZTD8qreu67kT+errbw3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW5jg6FL3 JmG9vShpGZNh3tPxglswHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCC52tj3M8hN0E/qdyj0u2CvTN7P78KcbrUv7MmkznNel4NGZ7Z2FU0 tT7/l953Q7Djqk6TzZ5/KCsHGUE42X2yV1uiN4Id1cJ08YbGvk3fjJTqi2Ie4zap WAsldCXkBiemKtUv3mbHzgaw/531/jSSuTiYdGlQdmID76X9yeviF9HpYyq9QGgx 2+moPJ38pYusdQnAdJ1++h5CThm3ZOYiknDvVVtze6ge9aJ7HAL47JrqcnzumrqK siaSWRns1VfCq9+WZoL1hnesAqbG+yHuDp9W5Cuv1EGmky8gnym5MBc6YYux0WYX yZJ/sKwsfHpGT3N3VdCoUTHN4SOLSO4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:13 2025 by rpki-client