$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: W8dVYfRaFF3xwbUwDlr8WT0O4GUN2mBU3+twfiPAu7g= Subject key identifier: FD:08:7F:1E:3D:4B:DA:C5:9B:9A:9A:E8:AE:B9:15:54:18:F0:FF:E8 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 0391 Signing time: Sun 15 Jun 2025 00:34:08 +0000 Manifest this update: Sun 15 Jun 2025 00:34:08 +0000 Manifest next update: Sun 22 Jun 2025 00:34:08 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: LPr8WHPoOwup98FXTrzcxS7IJu4RKEuYICVSCjPnMTs=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Jun 15 00:34:08 2025 GMT Not After : Jun 22 00:34:08 2025 GMT Subject: CN=684e1500-71a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:f2:20:41:2a:6e:6e:94:a3:19:13:e6:d8: 86:88:e8:e0:68:60:76:a6:5c:50:84:f7:4f:4b:15: 2c:92:1e:51:e7:83:05:06:13:ae:c7:88:30:ac:aa: 2a:ad:ac:d8:79:2c:1c:05:e2:78:77:b6:06:30:38: 31:27:74:89:aa:31:4b:12:7e:a4:72:fa:ed:e6:30: 50:b7:d3:4e:31:6a:f1:da:49:1a:c2:94:56:6d:64: b0:aa:34:ab:50:e1:67:4c:8b:16:36:bf:e2:9e:53: 54:35:6f:e5:f4:8b:33:54:bb:84:aa:40:da:82:12: 45:ea:49:80:e4:26:17:df:71:26:7f:bf:bc:62:1b: 25:42:8d:1f:de:3b:b2:57:fb:85:0b:53:8d:81:b7: a6:e1:c6:6d:c6:bd:e5:7d:d7:04:ff:e0:d5:d9:3b: 4f:05:ec:09:7d:52:a6:3a:2a:06:6f:51:05:9b:08: 6e:15:06:19:ea:69:99:e4:28:f6:d3:12:83:42:8b: e9:75:76:f6:24:a6:c8:1e:fb:63:15:ce:61:ee:52: 14:74:23:e6:17:0a:0d:7f:a6:a1:1e:ee:7d:dd:3d: 4e:3c:bb:93:93:5f:5a:63:d9:4c:f0:14:77:3a:8b: 6b:2b:f9:ae:df:d2:74:65:09:0a:9f:16:fb:19:40: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:7F:1E:3D:4B:DA:C5:9B:9A:9A:E8:AE:B9:15:54:18:F0:FF:E8 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5e:1d:d4:6a:87:0e:3b:fd:f0:5e:bb:18:95:fc:23:5c:b1: 4b:9c:5e:95:4f:8f:96:d9:84:04:57:5f:d7:3c:9d:f8:74:59: 21:95:44:aa:fb:88:92:00:9d:09:5f:15:19:0a:2c:14:a5:8a: 5b:03:30:33:ff:9f:93:17:c0:42:79:b1:05:39:b6:05:93:e5: bc:fb:bb:75:d9:cb:5e:a9:16:a9:5f:bc:90:57:c0:4e:07:ce: 2b:b6:43:82:d0:4d:a7:a1:85:b8:e5:d0:8c:f9:32:f3:3c:4c: aa:6e:c5:e7:95:43:82:14:b5:85:15:71:21:48:41:6e:a1:f6: 46:60:b1:f8:bb:b9:1b:bb:fb:77:ce:76:eb:1d:d9:cf:9a:89: 97:f2:89:48:a2:72:53:be:ff:47:eb:86:14:c8:83:3d:2b:b2: 2d:95:8e:56:b9:2a:60:16:5d:ef:fa:28:d0:4d:0f:dd:43:d5: b4:7f:9b:91:c6:79:e1:92:24:f3:92:9d:52:84:96:f1:0f:7b: 97:51:27:92:7e:62:c6:5b:da:39:68:f9:c1:bc:b4:ff:b2:30: 14:6e:93:e5:d4:57:4d:a7:0f:e7:e9:9d:1a:43:df:47:31:43: d5:74:10:a7:90:23:36:27:2c:ac:26:34:6f:0b:ca:f5:bc:7c: fc:65:1b:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwNjE1MDAzNDA4WhcNMjUwNjIyMDAzNDA4WjAYMRYwFAYD VQQDEw02ODRlMTUwMC03MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/nyIEEqbm6UoxkT5tiGiOjgaGB2plxQhPdPSxUskh5R54MFBhOux4gwrKoq razYeSwcBeJ4d7YGMDgxJ3SJqjFLEn6kcvrt5jBQt9NOMWrx2kkawpRWbWSwqjSr UOFnTIsWNr/inlNUNW/l9IszVLuEqkDaghJF6kmA5CYX33Emf7+8YhslQo0f3juy V/uFC1ONgbem4cZtxr3lfdcE/+DV2TtPBewJfVKmOioGb1EFmwhuFQYZ6mmZ5Cj2 0xKDQovpdXb2JKbIHvtjFc5h7lIUdCPmFwoNf6ahHu593T1OPLuTk19aY9lM8BR3 OotrK/mu39J0ZQkKnxb7GUDfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0Ifx49 S9rFm5qa6K65FVQY8P/oMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLXh3UaocOO/3wXrsYlfwjXLFLnF6VT4+W2YQEV1/XPJ34dFkhlUSq +4iSAJ0JXxUZCiwUpYpbAzAz/5+TF8BCebEFObYFk+W8+7t12cteqRapX7yQV8BO B84rtkOC0E2noYW45dCM+TLzPEyqbsXnlUOCFLWFFXEhSEFuofZGYLH4u7kbu/t3 znbrHdnPmomX8olIonJTvv9H64YUyIM9K7ItlY5WuSpgFl3v+ijQTQ/dQ9W0f5uR xnnhkiTzkp1ShJbxD3uXUSeSfmLGW9o5aPnBvLT/sjAUbpPl1FdNpw/n6Z0aQ99H MUPVdBCnkCM2JyysJjRvC8r1vHz8ZRt3 -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:08 2025 by rpki-client