$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: SQl049c/iqfqsF8y8C4dUF9grVaugZQagFCP7gTx9Ek= Subject key identifier: 9E:0A:D1:2C:E9:C5:C7:40:4B:1B:4E:E1:DA:C0:FA:C1:68:F6:E0:46 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 0146 Signing time: Sun 19 Oct 2025 07:12:35 +0000 Manifest this update: Sun 19 Oct 2025 07:12:34 +0000 Manifest next update: Sun 26 Oct 2025 07:12:34 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: jTSSIGrtDaaQaS8vt1Qrk5sUyZugXN+af+8Jypf9+R0=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: AlpyGioYVyajcJ7eEz9QWJBXQdVphfXg8wGbaRLMJmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Oct 19 07:12:34 2025 GMT Not After : Oct 26 07:12:34 2025 GMT Subject: CN=68f48f63-7337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:0d:45:58:9b:27:87:ca:6e:64:c6:2e:ae: f7:8f:d8:09:e6:d3:a9:23:e0:91:26:ce:1e:d2:58: 38:c9:45:59:a3:e9:78:05:1d:87:1e:ac:cf:63:4a: 5f:49:28:41:8b:37:91:f8:7a:90:bb:20:d3:45:f1: 72:6c:77:6e:8c:53:06:30:8a:ac:04:64:a5:70:11: c6:be:24:e0:99:a3:ef:e8:81:07:f2:c3:7c:d8:3b: 53:24:b5:81:52:c7:bd:a9:8f:9b:cb:a2:2c:2a:20: 2c:d8:d3:2c:75:66:4f:90:6d:19:8a:bf:4e:03:37: 52:53:ca:37:fc:57:4a:98:be:b8:cb:32:ac:80:f1: 5b:d2:04:28:1b:bd:ed:31:89:04:c8:dd:32:59:6b: e1:4a:e3:c6:ca:64:e2:45:a8:89:4a:36:9e:0d:28: 40:52:8d:b6:90:15:b3:e2:20:a6:d5:9c:db:fe:f0: 65:58:52:d6:70:f0:8f:a0:41:17:71:9f:8f:d0:a9: 69:ae:37:15:18:6f:53:cd:5b:8a:ad:df:b1:d7:b4: 7e:89:3b:ef:26:23:9e:b7:6d:df:67:6d:0b:41:81: e3:ff:58:06:bf:33:b4:69:33:04:2a:95:90:b9:03: d6:01:20:a6:e1:76:d9:c2:02:67:d5:b9:31:2b:c7: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:D1:2C:E9:C5:C7:40:4B:1B:4E:E1:DA:C0:FA:C1:68:F6:E0:46 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:de:00:40:d9:bf:a0:73:fb:68:10:97:c7:1c:44:e8:8a:e7: 8c:68:e5:ae:c1:88:1d:b3:6a:1b:0d:97:7f:c0:ae:47:d0:b9: 15:10:5e:42:e3:0d:51:ca:56:c2:3f:a0:20:3f:5f:27:dc:d2: 28:4f:8b:ca:29:9f:92:35:78:c1:c9:b3:d1:7d:30:b3:4b:0a: cc:51:a5:94:8e:28:15:48:e4:c3:ca:53:82:b7:df:aa:99:7c: 77:2c:5d:4e:ea:28:ab:64:eb:cb:61:db:93:ef:c8:d3:6e:58: 7c:d0:3a:00:72:a1:8f:87:fa:52:de:38:a1:01:db:7b:54:f3: e1:9d:76:9e:3d:d7:b3:7b:ba:10:6c:f8:d4:32:90:29:93:59: 46:e0:94:0e:f6:ca:8e:2e:71:a4:92:32:70:74:f3:1c:99:de: 01:ba:91:b8:bc:c2:c2:57:13:c2:3f:0f:cf:71:18:65:c1:06: ae:fa:72:ab:8d:57:0f:8c:13:34:0c:f5:5d:59:b0:8a:00:31: 6d:0f:61:70:c5:ae:a1:22:0c:4d:4c:d9:af:a1:5d:a7:ca:70: 72:01:50:fb:fc:d1:33:fa:6c:04:38:74:c8:83:73:58:54:a0: 0c:2d:93:eb:2f:ff:3f:38:6a:3d:85:6f:75:ab:fa:ba:79:4f: f0:d4:e5:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUxMDE5MDcxMjM0WhcNMjUxMDI2MDcxMjM0WjAYMRYwFAYD VQQDEw02OGY0OGY2My03MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRQNRVibJ4fKbmTGLq73j9gJ5tOpI+CRJs4e0lg4yUVZo+l4BR2HHqzPY0pf SShBizeR+HqQuyDTRfFybHdujFMGMIqsBGSlcBHGviTgmaPv6IEH8sN82DtTJLWB Use9qY+by6IsKiAs2NMsdWZPkG0Zir9OAzdSU8o3/FdKmL64yzKsgPFb0gQoG73t MYkEyN0yWWvhSuPGymTiRaiJSjaeDShAUo22kBWz4iCm1Zzb/vBlWFLWcPCPoEEX cZ+P0KlprjcVGG9TzVuKrd+x17R+iTvvJiOet23fZ20LQYHj/1gGvzO0aTMEKpWQ uQPWASCm4XbZwgJn1bkxK8ezkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4K0Szp xcdASxtO4drA+sFo9uBGMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh3gBA2b+gc/toEJfHHEToiueMaOWuwYgds2obDZd/wK5H0LkVEF5C 4w1RylbCP6AgP18n3NIoT4vKKZ+SNXjBybPRfTCzSwrMUaWUjigVSOTDylOCt9+q mXx3LF1O6iirZOvLYduT78jTblh80DoAcqGPh/pS3jihAdt7VPPhnXaePdeze7oQ bPjUMpApk1lG4JQO9sqOLnGkkjJwdPMcmd4BupG4vMLCVxPCPw/PcRhlwQau+nKr jVcPjBM0DPVdWbCKADFtD2Fwxa6hIgxNTNmvoV2nynByAVD7/NEz+mwEOHTIg3NY VKAMLZPrL/8/OGo9hW91q/q6eU/w1OXd -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:57 2025 by rpki-client