$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: pqZoSvSk89hS8F+yJmHz9Z4KLY2jeTaZT2DtOBVswEk= Subject key identifier: 2D:1C:B7:08:9E:6B:86:D0:12:DD:DE:F3:3F:19:C0:A7:BB:8F:63:A9 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 046A Signing time: Sat 10 May 2025 23:43:34 +0000 Manifest this update: Sat 10 May 2025 23:43:33 +0000 Manifest next update: Sat 17 May 2025 23:43:33 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: EQkP9ZKBv8eVE5bc2RKCN1h2sEUMr3TA3W2xExal+P0=) 2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=) 3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: May 10 23:43:33 2025 GMT Not After : May 17 23:43:33 2025 GMT Subject: CN=681fe4a5-f31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:2b:e4:22:eb:1a:b2:87:e1:20:4d:27:fe: 57:d7:8e:68:6b:2f:cd:b0:6f:e3:20:33:5c:fa:10: 01:8e:53:e9:84:fc:97:8f:cf:fc:16:87:ae:fd:53: 97:49:f3:e7:39:79:4e:0c:c9:61:01:d1:a1:1b:9c: 74:c5:e1:bf:bf:a6:46:6f:c0:de:74:32:8a:1b:f6: 2b:32:cb:2f:2f:4f:57:28:f3:53:4c:a2:a0:78:7e: dd:95:1b:1d:aa:be:9e:e2:17:fd:37:cd:b2:f6:b9: 9f:e9:97:34:ba:55:fb:51:02:02:f4:50:cd:24:cb: 43:54:3b:e1:f3:39:9a:9b:26:d1:2a:78:2a:d6:af: f8:59:0f:d0:66:f8:2c:98:17:a0:4f:53:97:1e:43: 16:a7:58:c8:46:7a:ca:e1:6a:72:77:81:24:9b:87: ac:58:4c:83:f7:53:59:7e:cc:24:9b:74:99:a4:43: bf:dc:8d:e9:8c:8e:33:90:45:91:31:af:4b:78:c6: 4b:32:aa:bf:89:f5:8b:0d:79:56:5a:c3:39:77:a9: 28:70:f4:59:cc:8d:d3:85:d6:28:8a:51:12:1d:e1: f7:02:f9:b8:6a:3b:ab:74:d1:63:4d:59:54:d9:b1: 6a:a8:09:96:34:4a:cd:c8:47:64:d4:32:96:d4:e1: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:B7:08:9E:6B:86:D0:12:DD:DE:F3:3F:19:C0:A7:BB:8F:63:A9 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e7:8c:09:c7:b5:7a:9f:4d:88:ab:ea:2d:99:cb:7f:dd:2a: 84:62:b2:34:e4:be:bc:d0:b1:ac:33:67:61:51:d8:11:67:38: c1:ca:49:17:9c:58:6d:05:4d:0e:36:ec:a9:cf:96:a1:ac:4d: 0e:6e:17:7e:24:8d:70:03:a1:7f:67:24:5e:da:ad:d4:87:20: 71:2a:89:05:30:62:37:36:09:3a:47:bd:15:cc:41:fa:bc:be: 4f:12:fc:d6:e3:d7:a0:ea:f0:7e:53:cd:31:86:0e:59:a9:b9: 3e:9a:32:1a:d6:2a:8c:9b:23:b3:28:96:85:5b:81:5c:bb:e3: c7:59:4b:0c:c6:9c:e8:84:f1:d5:0b:d9:d3:4e:62:98:10:41: 5a:86:df:3c:86:98:02:c2:b7:3b:c8:dd:1d:d1:c1:fe:93:6f: 42:b1:2f:a5:a3:a2:02:19:5d:12:7f:ff:ac:64:62:4b:b4:36: 01:f9:9f:f4:50:8a:d0:56:35:6b:17:5c:a6:40:f4:d6:ea:2c: f1:7e:d0:a2:e9:b1:08:99:e0:59:36:a3:e3:4e:90:d9:a8:00: 30:9c:64:1e:f7:14:6f:90:70:aa:6b:76:ed:18:44:d3:ad:36: e8:66:27:03:c9:e3:16:5c:77:8c:62:de:9d:a2:15:15:26:22: 86:c4:06:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUwNTEwMjM0MzMzWhcNMjUwNTE3MjM0MzMzWjAYMRYwFAYD VQQDEw02ODFmZTRhNS1mMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKUr5CLrGrKH4SBNJ/5X145oay/NsG/jIDNc+hABjlPphPyXj8/8Foeu/VOX SfPnOXlODMlhAdGhG5x0xeG/v6ZGb8DedDKKG/YrMssvL09XKPNTTKKgeH7dlRsd qr6e4hf9N82y9rmf6Zc0ulX7UQIC9FDNJMtDVDvh8zmamybRKngq1q/4WQ/QZvgs mBegT1OXHkMWp1jIRnrK4Wpyd4Ekm4esWEyD91NZfswkm3SZpEO/3I3pjI4zkEWR Ma9LeMZLMqq/ifWLDXlWWsM5d6kocPRZzI3ThdYoilESHeH3Avm4ajurdNFjTVlU 2bFqqAmWNErNyEdk1DKW1OH/4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0ctwie a4bQEt3e8z8ZwKe7j2OpMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx54wJx7V6n02Iq+otmct/3SqEYrI05L680LGsM2dhUdgRZzjBykkX nFhtBU0ONuypz5ahrE0Obhd+JI1wA6F/ZyRe2q3UhyBxKokFMGI3Ngk6R70VzEH6 vL5PEvzW49eg6vB+U80xhg5Zqbk+mjIa1iqMmyOzKJaFW4Fcu+PHWUsMxpzohPHV C9nTTmKYEEFaht88hpgCwrc7yN0d0cH+k29CsS+lo6ICGV0Sf/+sZGJLtDYB+Z/0 UIrQVjVrF1ymQPTW6izxftCi6bEImeBZNqPjTpDZqAAwnGQe9xRvkHCqa3btGETT rTboZicDyeMWXHeMYt6dohUVJiKGxAZV -----END CERTIFICATE-----Generated at Sun May 11 18:51:02 2025 by rpki-client