$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: wI/5g6HikkbLFD5GV5LJlNspwcVkWdWmoBxU58pQ/Rk= Subject key identifier: 14:34:42:D6:53:75:70:C2:99:2B:2D:B6:0B:4A:1D:A8:AA:8C:75:AD Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 03B4 Signing time: Sat 23 Aug 2025 00:59:19 +0000 Manifest this update: Sat 23 Aug 2025 00:59:18 +0000 Manifest next update: Sat 30 Aug 2025 00:59:18 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: FxPg7+vafuokEFLKStKzflm+fZkG3hrvQhiftvElZw0=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Aug 23 00:59:18 2025 GMT Not After : Aug 30 00:59:18 2025 GMT Subject: CN=68a91266-11d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:71:7e:63:c8:21:f4:a5:77:37:e9:59:3f: e0:76:83:42:59:13:0c:18:c0:d8:6c:80:6d:3c:c9: c0:48:b3:d8:e0:76:7b:39:03:f8:bb:01:72:77:02: 77:b4:f2:c6:88:dc:5e:e4:4f:a6:91:f1:da:48:cd: 46:6a:f1:03:3f:bb:1e:ef:1f:79:2b:08:9c:0f:02: fd:94:a4:d9:df:42:89:5f:5c:f3:7d:88:f6:87:74: 25:f8:a6:eb:ee:ff:55:39:18:e1:75:b8:0a:01:dd: d9:f4:a9:f8:f6:b8:e3:b1:25:66:61:2a:eb:26:d4: b2:d7:12:ad:d0:ef:16:66:33:3c:33:3a:60:4b:74: 2f:a4:9a:8f:57:b7:ea:25:ec:ee:7c:f1:7a:90:e9: 66:18:53:d6:4a:93:f2:be:50:0e:91:dd:2c:f1:89: e5:9f:81:cb:1d:ea:b9:85:4e:65:df:46:e1:8b:67: da:44:63:1a:b2:be:b9:80:8b:f5:bf:4a:58:36:35: 9b:8e:82:ae:57:45:e6:2e:1d:4e:c6:41:ec:90:f0: 53:05:87:eb:43:bc:36:bb:77:d0:26:70:a1:e4:56: 78:64:ea:a9:0f:f0:3b:65:ce:dd:e6:1c:48:a2:d3: bc:13:c2:6e:09:29:29:34:66:25:f2:e6:09:27:5b: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:34:42:D6:53:75:70:C2:99:2B:2D:B6:0B:4A:1D:A8:AA:8C:75:AD X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fa:b3:67:66:89:93:fb:99:25:05:8e:f0:99:dd:43:a5:98: 20:6f:50:92:d1:30:7b:27:51:82:a7:ab:6d:bd:a0:0e:53:7d: 1f:d1:03:f1:14:b7:7a:21:11:0b:c2:10:25:51:c9:c0:1e:e3: 83:27:66:d3:42:30:3d:20:60:8b:b7:8c:7d:ab:88:b5:9f:53: a3:3f:ac:b9:db:7e:2b:49:53:ed:32:b5:8d:d3:19:76:33:ef: b3:64:6d:81:23:11:83:47:51:a7:bb:22:de:7e:76:f5:4a:25: 73:07:dd:76:ae:de:ae:27:1a:ce:3a:05:30:fd:2b:6f:2e:e2: b1:10:0c:8d:af:3b:08:f2:1c:48:a3:02:c8:83:2c:da:cc:70: 5a:32:82:de:f8:e2:87:2c:04:23:c1:76:bc:d3:48:0e:15:9b: 34:cf:bd:89:04:56:c9:a2:82:f4:86:8d:e9:db:f1:10:3a:3f: 87:ff:a1:ad:8a:0c:9a:f7:bb:1b:1f:90:5c:98:c4:a5:9e:f6: 31:d8:94:61:a9:ef:5c:b2:31:6b:ab:c8:80:88:59:79:5f:ba: e8:1b:8b:cb:58:fc:d4:cf:9f:33:56:ce:86:0e:0a:52:e3:e0: 9f:77:5a:3c:b1:e2:99:7b:1d:d7:1b:4f:a4:48:73:73:5b:5e: 71:14:df:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwODIzMDA1OTE4WhcNMjUwODMwMDA1OTE4WjAYMRYwFAYD VQQDEw02OGE5MTI2Ni0xMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBRxfmPIIfSldzfpWT/gdoNCWRMMGMDYbIBtPMnASLPY4HZ7OQP4uwFydwJ3 tPLGiNxe5E+mkfHaSM1GavEDP7se7x95KwicDwL9lKTZ30KJX1zzfYj2h3Ql+Kbr 7v9VORjhdbgKAd3Z9Kn49rjjsSVmYSrrJtSy1xKt0O8WZjM8MzpgS3QvpJqPV7fq JezufPF6kOlmGFPWSpPyvlAOkd0s8Ynln4HLHeq5hU5l30bhi2faRGMasr65gIv1 v0pYNjWbjoKuV0XmLh1OxkHskPBTBYfrQ7w2u3fQJnCh5FZ4ZOqpD/A7Zc7d5hxI otO8E8JuCSkpNGYl8uYJJ1snbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ0QtZT dXDCmSsttgtKHaiqjHWtMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+rNnZomT+5klBY7wmd1DpZggb1CS0TB7J1GCp6ttvaAOU30f0QPx FLd6IRELwhAlUcnAHuODJ2bTQjA9IGCLt4x9q4i1n1OjP6y5234rSVPtMrWN0xl2 M++zZG2BIxGDR1GnuyLefnb1SiVzB912rt6uJxrOOgUw/StvLuKxEAyNrzsI8hxI owLIgyzazHBaMoLe+OKHLAQjwXa800gOFZs0z72JBFbJooL0ho3p2/EQOj+H/6Gt igya97sbH5BcmMSlnvYx2JRhqe9csjFrq8iAiFl5X7roG4vLWPzUz58zVs6GDgpS 4+Cfd1o8seKZex3XG0+kSHNzW15xFN/E -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:59 2025 by rpki-client