$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: fd7sZ5A0a8g8OhRJLnZOx+H9iV6t4Y14BfVlKf7ly7I= Subject key identifier: CB:10:AA:8D:6F:6C:36:BD:86:B6:AA:88:E9:5D:FB:55:65:5F:0A:CB Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A07 Signing time: Fri 22 Aug 2025 19:58:18 +0000 Manifest this update: Fri 22 Aug 2025 19:58:18 +0000 Manifest next update: Fri 29 Aug 2025 19:58:18 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: AWOQE7O57SXGfrCAz1JvS/+FiKylAJhNOFvB0Qdy1VU=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Aug 22 19:58:18 2025 GMT Not After : Aug 29 19:58:18 2025 GMT Subject: CN=68a8cbda-d4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:90:df:01:6a:ed:47:26:ba:47:c7:e3:e3: db:a3:7d:45:cb:53:a5:a7:e4:04:4f:34:db:90:fc: 4f:f9:bc:3d:ff:4e:e9:e7:18:5f:67:fa:36:f1:38: 2a:31:83:bd:5f:5b:93:7a:1e:79:19:f7:6f:07:30: a3:e7:1d:47:8a:d3:75:6a:3b:31:55:f2:4a:93:1c: 9d:ef:30:46:f6:83:49:08:13:7d:5b:11:8f:25:ed: a8:9f:d5:d6:c0:d3:fc:10:82:81:e6:e1:42:fb:aa: 59:b5:d7:8f:2c:f8:54:96:c3:12:a9:bc:93:a0:06: bb:24:a2:f4:1a:54:2c:70:88:3f:16:cb:a1:21:76: 36:e3:8f:ab:7f:70:31:bd:bd:08:31:1a:8d:ff:78: 72:f7:9f:de:e7:de:6d:bc:0b:6d:30:72:fc:2b:95: d4:4c:a5:56:d1:48:26:ce:dd:cd:a8:6d:df:e0:6e: b9:b0:a3:6c:70:a5:13:b8:97:8b:e0:00:89:74:94: 61:c5:24:8d:45:c5:f9:d6:da:9a:21:f2:32:8d:9d: 0e:99:e2:32:bf:16:7c:61:8f:b7:64:f2:f8:ea:ca: 96:98:07:ee:a3:16:c0:d4:4c:40:df:2d:e1:25:a3: 2c:82:b9:3f:5e:b8:ac:79:12:e5:6a:68:bc:35:49: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:AA:8D:6F:6C:36:BD:86:B6:AA:88:E9:5D:FB:55:65:5F:0A:CB X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2a:92:22:22:b4:11:bb:2e:2b:c6:a7:e3:b7:64:8c:9b:14: b5:ab:31:87:88:2a:41:c2:32:45:77:c5:91:b7:d1:f8:04:81: 9a:9e:b3:58:89:aa:dd:20:5d:58:23:a5:c1:37:6b:88:61:8e: ff:99:ea:fe:2a:5d:67:a2:26:13:0a:3b:5f:b9:00:4c:b8:95: d6:93:9a:93:52:2e:c4:47:19:4d:5d:3b:50:a4:f5:e7:01:a4: 4b:8a:4c:c1:4b:cc:f4:cd:36:f5:23:17:42:6d:8c:0f:96:78: 3f:9e:72:85:b8:d4:95:9c:2f:53:3c:2a:6a:e5:a6:d6:15:cf: 33:5e:ba:61:d0:0b:23:ec:83:80:f6:15:d5:8e:93:08:a0:e5: f1:be:6e:f6:c9:98:51:52:2a:70:b8:d0:59:0b:a5:13:bd:f8: 2e:93:1a:74:bc:f7:ef:cf:13:a6:f9:2d:1f:85:d5:78:69:d0: 29:8e:20:85:1f:bb:26:1b:bb:5d:55:d2:af:59:03:32:46:0b: ac:5e:8b:ea:02:d4:10:09:97:87:ca:49:7d:b5:1e:9a:ed:9f: d3:73:37:23:96:0f:a8:da:0a:5b:1c:56:aa:5c:00:b9:53:80: 15:d5:af:f3:1a:41:cc:83:07:ad:d8:7b:03:9c:d2:16:2c:88: 57:be:3f:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwODIyMTk1ODE4WhcNMjUwODI5MTk1ODE4WjAYMRYwFAYD VQQDEw02OGE4Y2JkYS1kNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4puQ3wFq7UcmukfH4+Pbo31Fy1Olp+QETzTbkPxP+bw9/07p5xhfZ/o28Tgq MYO9X1uTeh55GfdvBzCj5x1HitN1ajsxVfJKkxyd7zBG9oNJCBN9WxGPJe2on9XW wNP8EIKB5uFC+6pZtdePLPhUlsMSqbyToAa7JKL0GlQscIg/FsuhIXY244+rf3Ax vb0IMRqN/3hy95/e595tvAttMHL8K5XUTKVW0Ugmzt3NqG3f4G65sKNscKUTuJeL 4ACJdJRhxSSNRcX51tqaIfIyjZ0OmeIyvxZ8YY+3ZPL46sqWmAfuoxbA1ExA3y3h JaMsgrk/XriseRLlami8NUnjrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsQqo1v bDa9hraqiOld+1VlXwrLMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFKpIiIrQRuy4rxqfjt2SMmxS1qzGHiCpBwjJFd8WRt9H4BIGanrNY iardIF1YI6XBN2uIYY7/mer+Kl1noiYTCjtfuQBMuJXWk5qTUi7ERxlNXTtQpPXn AaRLikzBS8z0zTb1IxdCbYwPlng/nnKFuNSVnC9TPCpq5abWFc8zXrph0Asj7IOA 9hXVjpMIoOXxvm72yZhRUipwuNBZC6UTvfgukxp0vPfvzxOm+S0fhdV4adApjiCF H7smG7tdVdKvWQMyRgusXovqAtQQCZeHykl9tR6a7Z/Tczcjlg+o2gpbHFaqXAC5 U4AV1a/zGkHMgwet2HsDnNIWLIhXvj9f -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:22 2025 by rpki-client