$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: G6rVrxckq9mJJ9aN018vhtX6qxs32Oa3glg3sdpUPF4= Subject key identifier: CA:F4:65:9A:C5:1F:B8:6C:E9:D4:52:93:0D:DD:1C:5B:D5:A1:BA:5D Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A5B Signing time: Fri 22 Aug 2025 19:51:22 +0000 Manifest this update: Fri 22 Aug 2025 19:51:21 +0000 Manifest next update: Fri 29 Aug 2025 19:51:21 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: zJtFeB+ZJk4r0SubmopRAQQQgmCBzwIziqGCnkrtOSw=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Aug 22 19:51:21 2025 GMT Not After : Aug 29 19:51:21 2025 GMT Subject: CN=68a8ca3a-9df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:6a:1f:c5:3b:87:84:66:18:bf:74:45:4d: d4:79:2d:fe:d9:bc:40:ea:a1:bf:d6:a4:63:5c:54: d0:b2:8c:a8:d6:f4:d2:1c:c0:0d:42:eb:a6:74:e3: d8:81:2b:f5:db:3d:6e:50:7a:b6:c3:1d:69:1f:d3: 88:f1:c1:0e:52:f8:63:22:0a:56:84:f6:1b:f1:89: f5:cd:a4:1d:91:46:f5:33:26:a0:36:5e:ae:43:13: b4:cb:2d:18:0a:69:32:df:41:fc:04:e1:c2:e7:ff: aa:29:e8:aa:1a:5b:65:7d:65:ce:a5:5d:30:3e:e9: 0b:9c:ae:c6:f7:11:e7:4c:b9:e1:0b:91:e8:94:2f: 88:7d:19:e2:13:2f:52:0a:88:45:91:2a:49:df:90: 15:af:11:7f:76:2d:c7:e5:38:b5:69:49:eb:8d:02: c4:13:e0:03:a0:05:23:df:15:f8:48:f7:4a:23:59: b7:fa:2a:79:79:db:d2:92:cf:3b:4d:0f:1b:80:b7: 4f:da:39:39:67:0b:b8:7a:95:dc:03:3b:26:38:2e: d2:db:f5:19:3b:3a:cd:35:74:3a:a1:dd:0d:c2:5b: 67:b1:76:1b:19:94:1a:2b:28:d7:c6:f0:a4:c1:ba: a0:b2:2b:6a:85:f5:e3:16:8a:75:ed:9f:0f:1e:2a: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:65:9A:C5:1F:B8:6C:E9:D4:52:93:0D:DD:1C:5B:D5:A1:BA:5D X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:9b:0b:2a:fa:d9:75:71:d9:53:6f:5c:94:34:96:ab:7f:2c: dd:5b:b6:ca:1b:d1:1e:73:ae:2e:b4:15:98:9a:97:4f:43:46: 41:f5:d1:92:dd:2e:e9:4f:ce:32:94:f9:79:98:36:57:8a:aa: 1c:7d:c1:8b:44:d7:f3:aa:4c:84:2b:b6:07:c8:bd:b1:e8:d1: c3:24:a5:2d:f8:42:45:d7:af:ae:8b:ec:24:6d:de:79:de:d7: 68:16:ac:7b:fe:78:c2:a0:c3:e3:aa:db:80:be:cb:61:f5:95: 22:d2:1f:2d:67:6d:50:46:b0:92:6b:1a:81:97:f8:1d:ba:ac: fc:48:63:b4:08:06:83:3f:19:fa:93:a0:82:02:8c:95:e7:dc: 18:c6:f0:b5:f2:d1:8e:b0:38:7a:ba:ef:36:49:b3:52:63:ae: fc:f2:41:ff:c6:6f:f7:8a:b4:81:1e:c3:ea:c5:be:5f:ed:62: 48:a3:16:b3:a1:5b:8d:27:ce:dc:f1:85:5b:64:24:ae:8c:9a: c7:f1:8e:c0:42:f5:8e:ea:0c:a7:b6:8a:f7:b7:e7:b4:e2:2f: 4d:b7:f0:a2:76:1a:03:b7:90:a5:5b:f9:db:34:01:23:fb:b7: 3f:32:c0:af:a2:39:50:0f:2a:54:76:58:23:49:1d:3c:3d:74: 34:68:0d:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUwODIyMTk1MTIxWhcNMjUwODI5MTk1MTIxWjAYMRYwFAYD VQQDEw02OGE4Y2EzYS05ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt5qH8U7h4RmGL90RU3UeS3+2bxA6qG/1qRjXFTQsoyo1vTSHMANQuumdOPY gSv12z1uUHq2wx1pH9OI8cEOUvhjIgpWhPYb8Yn1zaQdkUb1MyagNl6uQxO0yy0Y Cmky30H8BOHC5/+qKeiqGltlfWXOpV0wPukLnK7G9xHnTLnhC5HolC+IfRniEy9S CohFkSpJ35AVrxF/di3H5Ti1aUnrjQLEE+ADoAUj3xX4SPdKI1m3+ip5edvSks87 TQ8bgLdP2jk5Zwu4epXcAzsmOC7S2/UZOzrNNXQ6od0NwltnsXYbGZQaKyjXxvCk wbqgsitqhfXjFop17Z8PHipHhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr0ZZrF H7hs6dRSkw3dHFvVobpdMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBmwsq+tl1cdlTb1yUNJarfyzdW7bKG9Eec64utBWYmpdPQ0ZB9dGS 3S7pT84ylPl5mDZXiqocfcGLRNfzqkyEK7YHyL2x6NHDJKUt+EJF16+ui+wkbd55 3tdoFqx7/njCoMPjqtuAvsth9ZUi0h8tZ21QRrCSaxqBl/gduqz8SGO0CAaDPxn6 k6CCAoyV59wYxvC18tGOsDh6uu82SbNSY6788kH/xm/3irSBHsPqxb5f7WJIoxaz oVuNJ87c8YVbZCSujJrH8Y7AQvWO6gyntor3t+e04i9Nt/CidhoDt5ClW/nbNAEj +7c/MsCvojlQDypUdlgjSR08PXQ0aA1C -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:29 2025 by rpki-client