$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: bBh6LXuKP/gx+UJ8IbIgrebmoVOsG9j/lonH4pBYl1Q= Subject key identifier: 18:4E:71:81:BF:35:B3:0E:33:E9:1D:C9:14:82:32:CB:55:54:B6:E3 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0A63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A3F Signing time: Sat 28 Jun 2025 19:54:51 +0000 Manifest this update: Sat 28 Jun 2025 19:54:51 +0000 Manifest next update: Sat 05 Jul 2025 19:54:51 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: XgWWNGf5klzKkKTTJz/hFW1QY3uZOfBFDD7dvTYMIV0=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Jun 28 19:54:51 2025 GMT Not After : Jul 5 19:54:51 2025 GMT Subject: CN=6860488b-4fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:32:85:3a:0b:73:a1:31:89:84:8f:41:85: 6b:bf:65:f9:b6:67:d7:dd:a4:d3:10:c3:c6:49:8d: 7d:13:2d:b9:d1:9c:fb:ef:5c:c7:f2:ee:af:c3:bb: 0b:8e:dc:29:17:99:1c:7e:29:e4:e6:89:af:ce:0f: e0:27:15:d3:3c:37:41:65:1b:d8:13:6c:76:2e:2c: eb:4a:27:d9:5e:74:cc:71:5e:a2:74:8f:ea:74:b3: b0:bd:33:82:ee:df:bf:0d:48:c8:9c:bb:e6:7e:a0: 77:32:1b:22:15:26:92:d2:aa:44:e2:53:02:ca:f0: 21:91:1b:c0:03:5d:74:d6:20:cb:ca:aa:8b:9b:39: 50:69:a3:09:0f:99:ed:66:21:d5:a9:ad:0e:71:fd: e6:44:3a:06:7b:7a:ec:de:14:f2:39:0f:40:ab:c8: 96:93:c6:1d:d8:44:63:5c:d9:97:94:29:8d:54:52: 31:ab:cb:dc:0a:e5:dc:10:95:51:7b:bd:39:64:e0: 43:c8:da:46:ce:9e:19:ed:89:30:16:64:a5:a4:28: ad:26:e5:6c:cd:c5:b6:a1:cb:f5:bf:b1:ef:55:00: 53:05:77:ad:9a:00:3e:5b:d3:a0:f8:15:79:5d:6e: bb:d7:15:1b:63:07:33:54:b0:dd:8b:5b:bc:86:14: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:71:81:BF:35:B3:0E:33:E9:1D:C9:14:82:32:CB:55:54:B6:E3 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a8:97:cf:f0:eb:03:30:7e:37:66:f9:ff:15:18:45:21:16: c1:6f:5c:43:23:96:a4:e1:60:bc:44:00:83:59:c3:65:be:7c: d4:e0:bf:db:85:93:f6:3d:02:b8:bc:da:d9:97:eb:39:f5:3c: 78:9c:c3:b9:8d:a1:18:5b:8a:2f:26:c6:10:c7:9a:af:dc:ce: e6:28:8f:17:c7:80:01:16:53:d2:63:70:cc:e0:75:b4:af:83: d0:10:8b:40:ac:9b:9e:f6:cc:eb:8a:b4:a9:0d:75:c4:5f:cb: 0a:3b:e0:d5:1a:2f:e9:ba:5f:9b:e8:77:b4:8f:e2:df:e8:a4: 23:f3:dd:84:d5:a0:23:46:a0:60:49:da:2b:26:5a:5d:cd:3a: d0:f3:18:8b:ed:8d:90:98:64:52:ac:2a:7b:ac:b7:a9:0c:99: ef:2b:8b:7f:3f:8b:28:47:bc:d6:ec:8d:d2:5f:be:4a:3f:51: 61:84:58:5b:6c:7b:8a:78:c5:94:82:a7:2a:2c:e2:91:2a:8e: 37:eb:5f:a4:81:bb:bb:d7:6d:fa:b0:b3:32:84:80:e3:04:44: 5c:50:2c:cf:5b:c4:8b:26:d6:e8:e0:a6:1e:12:fe:05:ef:e8: da:12:48:6b:b2:a2:2d:6d:b1:8f:59:4e:cc:51:64:4c:6c:06: 99:28:31:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUwNjI4MTk1NDUxWhcNMjUwNzA1MTk1NDUxWjAYMRYwFAYD VQQDEw02ODYwNDg4Yi00ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7gyhToLc6ExiYSPQYVrv2X5tmfX3aTTEMPGSY19Ey250Zz771zH8u6vw7sL jtwpF5kcfink5omvzg/gJxXTPDdBZRvYE2x2LizrSifZXnTMcV6idI/qdLOwvTOC 7t+/DUjInLvmfqB3MhsiFSaS0qpE4lMCyvAhkRvAA1101iDLyqqLmzlQaaMJD5nt ZiHVqa0Ocf3mRDoGe3rs3hTyOQ9Aq8iWk8Yd2ERjXNmXlCmNVFIxq8vcCuXcEJVR e705ZOBDyNpGzp4Z7YkwFmSlpCitJuVszcW2ocv1v7HvVQBTBXetmgA+W9Og+BV5 XW671xUbYwczVLDdi1u8hhRqHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhOcYG/ NbMOM+kdyRSCMstVVLbjMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIqJfP8OsDMH43Zvn/FRhFIRbBb1xDI5ak4WC8RACDWcNlvnzU4L/b hZP2PQK4vNrZl+s59Tx4nMO5jaEYW4ovJsYQx5qv3M7mKI8Xx4ABFlPSY3DM4HW0 r4PQEItArJue9szrirSpDXXEX8sKO+DVGi/pul+b6He0j+Lf6KQj892E1aAjRqBg SdorJlpdzTrQ8xiL7Y2QmGRSrCp7rLepDJnvK4t/P4soR7zW7I3SX75KP1FhhFhb bHuKeMWUgqcqLOKRKo4361+kgbu71236sLMyhIDjBERcUCzPW8SLJtbo4KYeEv4F 7+jaEkhrsqItbbGPWU7MUWRMbAaZKDFm -----END CERTIFICATE-----Generated at Mon Jun 30 20:03:59 2025 by rpki-client