$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: OL4fmmZotdSByPmAWpKu2NhoVAx664QiCC790/d30vU= Subject key identifier: D8:C8:26:A8:3F:E6:7D:35:99:D7:28:F3:E8:82:78:E5:56:54:2C:9F Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0C7E Signing time: Fri 22 Aug 2025 18:27:18 +0000 Manifest this update: Fri 22 Aug 2025 18:27:17 +0000 Manifest next update: Fri 29 Aug 2025 18:27:17 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: aGtAZRpa4oYrxcMdOxPAhk7V2oXFCr56NE0YRGLK9G4=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: L3QtLlUYOp97S+0J2ZEUAV9V2aNzWM2GyLPcyzG+Vzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Aug 22 18:27:17 2025 GMT Not After : Aug 29 18:27:17 2025 GMT Subject: CN=68a8b686-755e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:e0:60:68:15:b6:53:8e:79:2d:f8:c6:5a: b2:46:d9:e3:d4:7c:29:89:7e:28:8e:07:4e:db:98: b4:c6:77:f7:0b:df:58:56:f6:6a:d5:64:49:63:0c: 45:a5:4a:d6:42:5c:73:44:80:fc:32:57:f2:c0:81: 68:c4:e0:75:a6:9e:0e:3e:de:2f:00:cb:c7:85:e2: 9d:68:35:f9:03:24:53:53:62:d6:d0:69:3b:69:7b: 6e:1e:87:71:42:cb:5e:cd:44:fa:8b:6e:71:6c:27: af:6f:7d:bf:03:59:c8:82:23:92:bb:fd:e6:6d:8d: c6:85:76:54:8b:39:53:8c:07:3c:c3:12:bf:76:94: 68:33:79:cc:8f:6d:6b:c7:da:7d:5a:99:ea:33:3e: 00:e9:52:bc:97:9c:12:e6:1c:c2:b2:03:cc:12:45: ca:15:87:9b:b5:d2:07:32:2d:01:97:7d:6d:c6:e4: 49:9a:d4:a3:38:a0:cc:26:36:9b:23:49:3d:ee:87: 69:57:2d:37:46:28:da:d2:3e:07:2a:3f:3c:f0:5a: b8:d3:91:d8:e7:77:c0:2d:65:91:af:d3:52:32:66: 7a:f5:6b:1f:70:ef:f9:fe:a3:d5:03:cf:c3:4d:2b: 62:f2:05:4b:09:e1:1d:1a:77:d1:2c:52:aa:b0:79: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C8:26:A8:3F:E6:7D:35:99:D7:28:F3:E8:82:78:E5:56:54:2C:9F X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:04:ea:54:b0:51:76:81:6d:14:4c:c3:9c:d6:f5:2a:ab:cb: c4:bd:9e:3b:1b:53:8e:a5:3a:85:1e:f3:a5:41:d2:e5:26:b1: 44:e6:f5:ec:7d:6a:a6:d7:15:43:80:87:36:e8:3e:64:b2:fc: e2:85:41:1c:b0:dd:e2:c3:0d:a4:76:60:d2:e7:8e:64:71:50: 2d:19:f6:ff:f2:8d:64:68:d2:63:a6:46:10:ea:de:65:8b:ca: b7:e6:b1:1e:b0:af:c3:9c:fe:c1:74:4f:a8:dc:ac:e0:dd:fa: 78:f4:ab:12:ed:98:cf:d2:08:82:21:cb:2f:cf:6a:da:1b:42: 62:70:9c:31:f2:d8:13:bc:07:17:f8:37:6f:2b:b2:25:c5:44: 2f:f5:69:b0:69:05:21:54:75:da:23:4a:fd:ce:83:ba:57:67: a7:4f:a5:c6:a0:fa:8e:96:ec:09:74:71:4d:b1:86:78:9b:d3: ec:28:70:f0:57:1d:7b:13:b5:58:81:e7:73:7b:41:c8:8a:fa: 85:e0:f5:65:14:2a:52:1e:19:60:17:d5:b6:91:35:ae:87:3d: a5:2a:05:b3:85:63:97:34:bd:fd:0a:ca:bc:07:58:ca:50:45: 5f:29:fa:5f:ef:87:64:b4:97:74:f3:36:82:6b:8d:07:db:a6: 7a:81:ff:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjUwODIyMTgyNzE3WhcNMjUwODI5MTgyNzE3WjAYMRYwFAYD VQQDEw02OGE4YjY4Ni03NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cngYGgVtlOOeS34xlqyRtnj1HwpiX4ojgdO25i0xnf3C99YVvZq1WRJYwxF pUrWQlxzRID8MlfywIFoxOB1pp4OPt4vAMvHheKdaDX5AyRTU2LW0Gk7aXtuHodx QstezUT6i25xbCevb32/A1nIgiOSu/3mbY3GhXZUizlTjAc8wxK/dpRoM3nMj21r x9p9WpnqMz4A6VK8l5wS5hzCsgPMEkXKFYebtdIHMi0Bl31txuRJmtSjOKDMJjab I0k97odpVy03Rija0j4HKj888Fq405HY53fALWWRr9NSMmZ69WsfcO/5/qPVA8/D TSti8gVLCeEdGnfRLFKqsHkmQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjIJqg/ 5n01mdco8+iCeOVWVCyfMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiBOpUsFF2gW0UTMOc1vUqq8vEvZ47G1OOpTqFHvOlQdLlJrFE5vXs fWqm1xVDgIc26D5ksvzihUEcsN3iww2kdmDS545kcVAtGfb/8o1kaNJjpkYQ6t5l i8q35rEesK/DnP7BdE+o3Kzg3fp49KsS7ZjP0giCIcsvz2raG0JicJwx8tgTvAcX +DdvK7IlxUQv9WmwaQUhVHXaI0r9zoO6V2enT6XGoPqOluwJdHFNsYZ4m9PsKHDw Vx17E7VYgedze0HIivqF4PVlFCpSHhlgF9W2kTWuhz2lKgWzhWOXNL39Csq8B1jK UEVfKfpf74dktJd08zaCa40H26Z6gf+B -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:28 2025 by rpki-client