$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: doyQXnWEYqYdU5amVVAhnQCyAe5mPgn95OlMUL5y1gQ= Subject key identifier: A1:CA:61:B1:CA:6E:BE:6C:5E:E7:2A:C9:22:ED:13:D5:48:2A:93:D7 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 03D9 Signing time: Wed 05 Nov 2025 00:42:34 +0000 Manifest this update: Wed 05 Nov 2025 00:42:34 +0000 Manifest next update: Wed 12 Nov 2025 00:42:34 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: nqnkIlRD7mGs/GcUko8/m+7Mekx08dz9sot8jgbUVuA=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Nov 5 00:42:34 2025 GMT Not After : Nov 12 00:42:34 2025 GMT Subject: CN=690a9d7a-6320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:0f:75:5c:24:a7:ae:c3:ea:9e:7d:0f:4d: 78:92:14:03:f3:eb:bd:1a:58:17:f7:c9:b4:ae:8a: 31:3e:fe:e6:38:20:69:cc:ec:f5:97:62:68:89:0b: 44:e6:df:f3:a1:f4:08:26:ca:6d:07:0d:72:aa:0f: 1b:b7:4c:3f:2d:5f:cd:32:88:c4:c4:8c:ba:98:48: 00:f4:82:d9:69:76:9e:47:c9:42:7a:fe:33:a7:1d: 2e:ca:fd:77:aa:c3:f8:1e:a6:7e:4c:64:f6:5b:72: b6:71:87:03:3a:bf:a1:4d:11:d0:a1:4f:cb:32:b0: 99:43:47:05:78:2c:2c:50:f8:5c:79:09:d0:29:87: 1c:4e:c8:c1:44:c3:c8:ef:dd:76:f3:8b:c4:c7:18: 6c:78:b1:c2:8b:9a:58:47:87:0b:2c:41:6f:57:25: 34:80:c9:62:25:36:00:df:19:28:73:a0:3e:38:93: 74:0a:ef:52:ec:8c:c8:8d:f5:99:e1:7b:5f:d5:54: bb:df:a6:f0:08:50:db:07:78:9f:ee:5e:f8:d2:d0: 6a:2c:b2:55:1c:f9:51:eb:98:7a:ab:6d:51:ff:46: ed:f3:a3:a8:bd:ce:21:17:44:20:7a:c7:82:23:27: 8f:b2:6b:90:db:88:eb:ce:51:62:c7:ec:b4:c4:7f: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:61:B1:CA:6E:BE:6C:5E:E7:2A:C9:22:ED:13:D5:48:2A:93:D7 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:90:18:de:a3:ba:ca:95:2c:b2:67:ca:6c:0b:02:1a:c8:ed: d8:06:d8:5b:4d:c1:14:47:cf:cb:65:24:34:17:d1:c1:8e:a8: b1:a1:8d:c7:f5:8f:88:05:5a:ee:a8:40:e0:f9:f6:b1:18:fa: bb:be:8a:ab:e6:3c:e8:04:35:dc:23:4d:e6:52:83:8f:19:5c: 4e:24:2d:77:9e:c4:6b:b4:3b:fa:f3:48:e9:0a:bd:c6:5b:8f: 62:db:11:56:d2:66:d5:e0:55:85:8b:57:19:f9:dc:20:75:7c: 78:c3:4b:72:53:f5:75:6b:b5:9c:12:16:85:e8:7b:4b:c5:b9: ea:86:75:b1:29:5b:5b:ad:4c:f9:e2:f4:d5:0c:fa:9f:43:2c: fd:f9:7a:07:5a:05:79:c2:65:2e:5b:0f:09:75:cb:0b:7a:9d: 43:b9:6d:f6:d5:70:f1:7e:df:01:d4:b6:32:69:92:a9:bd:ed: e2:3f:b5:3f:bd:c9:49:0d:7c:01:03:4e:76:1a:e2:06:76:e0: 79:61:75:4a:2f:ac:8b:98:ae:f2:cc:62:9e:52:61:bd:9c:dc: 21:cc:4c:1a:7b:d8:5a:0c:c7:ba:37:ea:1d:fe:21:13:2c:14: b1:c4:c1:b4:b7:fc:59:5a:72:88:26:a6:1a:32:98:3f:3a:b7: d8:85:04:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUxMTA1MDA0MjM0WhcNMjUxMTEyMDA0MjM0WjAYMRYwFAYD VQQDEw02OTBhOWQ3YS02MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqQPdVwkp67D6p59D014khQD8+u9GlgX98m0rooxPv7mOCBpzOz1l2JoiQtE 5t/zofQIJsptBw1yqg8bt0w/LV/NMojExIy6mEgA9ILZaXaeR8lCev4zpx0uyv13 qsP4HqZ+TGT2W3K2cYcDOr+hTRHQoU/LMrCZQ0cFeCwsUPhceQnQKYccTsjBRMPI 791284vExxhseLHCi5pYR4cLLEFvVyU0gMliJTYA3xkoc6A+OJN0Cu9S7IzIjfWZ 4Xtf1VS736bwCFDbB3if7l740tBqLLJVHPlR65h6q21R/0bt86Oovc4hF0QgeseC IyePsmuQ24jrzlFix+y0xH9wDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHKYbHK br5sXucqySLtE9VIKpPXMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7kBjeo7rKlSyyZ8psCwIayO3YBthbTcEUR8/LZSQ0F9HBjqixoY3H 9Y+IBVruqEDg+faxGPq7voqr5jzoBDXcI03mUoOPGVxOJC13nsRrtDv680jpCr3G W49i2xFW0mbV4FWFi1cZ+dwgdXx4w0tyU/V1a7WcEhaF6HtLxbnqhnWxKVtbrUz5 4vTVDPqfQyz9+XoHWgV5wmUuWw8JdcsLep1DuW321XDxft8B1LYyaZKpve3iP7U/ vclJDXwBA052GuIGduB5YXVKL6yLmK7yzGKeUmG9nNwhzEwae9haDMe6N+od/iET LBSxxMG0t/xZWnKIJqYaMpg/OrfYhQQx -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:59 2025 by rpki-client