$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: A4t8eFllCDXlxyscOm9wyxmyhJSKVadMYd9x86BMGvk= Subject key identifier: F1:D0:86:AF:63:0F:4B:5D:8F:D6:AF:83:02:D7:DA:E3:EC:1E:0F:C1 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 03AD Signing time: Sat 09 Aug 2025 01:17:21 +0000 Manifest this update: Sat 09 Aug 2025 01:17:21 +0000 Manifest next update: Sat 16 Aug 2025 01:17:21 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: QRuMR3KIPrlNeG9wkHmrbzBBoyOl9mx+GNFMIIb74Io=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Aug 9 01:17:21 2025 GMT Not After : Aug 16 01:17:21 2025 GMT Subject: CN=6896a1a1-6fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:b3:81:07:e3:a8:e8:24:ff:a1:f0:0c:8b: 19:ef:17:bb:4b:b0:57:43:10:a8:14:78:1a:dc:0d: 16:ad:9c:92:f6:4e:ad:35:bf:87:97:04:38:5f:13: d0:b8:ef:cb:18:78:d9:50:b2:6e:a1:66:41:a7:71: 79:74:89:f5:2f:b5:ff:18:ae:c7:05:6c:1d:6b:33: 68:6f:5b:47:15:cc:05:b4:98:a1:3a:b6:ec:a9:10: a2:42:45:c6:1b:48:98:39:1d:49:81:d9:65:0e:b0: e9:79:32:5f:89:e7:13:20:d8:61:41:fa:bd:06:9e: ca:e5:ed:7e:09:0c:ec:a4:c4:be:a0:24:5b:92:f7: ee:8f:05:63:b7:e9:62:3c:b7:94:d3:e5:a4:0d:f3: d2:30:ad:0a:a8:ae:b3:87:4a:ec:1e:e9:43:91:3d: 3d:75:89:43:fc:b2:b0:a0:81:26:d5:cf:9d:8e:9b: 14:79:af:86:47:85:78:2a:f7:9b:1c:16:d0:63:ee: 8b:b0:8f:35:b4:03:d9:c0:25:cf:b4:45:96:05:d7: 3c:5a:84:9b:0c:50:b7:06:a7:6b:34:9f:62:29:39: 4a:90:7c:e5:4e:b7:c9:96:9d:82:cc:d8:7a:fe:f7: e8:e6:47:63:8b:28:5a:a4:45:c9:d0:a2:f6:38:e3: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D0:86:AF:63:0F:4B:5D:8F:D6:AF:83:02:D7:DA:E3:EC:1E:0F:C1 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b6:05:e2:44:7c:e2:c5:6f:3c:7c:9e:0d:c5:c8:3b:76:a7: df:24:c2:3a:a6:ba:cf:ae:69:19:24:64:d8:c8:ee:ae:6e:d3: b0:aa:a1:f7:ec:9b:48:d6:aa:72:3f:80:45:3a:d2:45:1d:50: 40:93:b1:ec:ed:6c:52:d4:2a:67:f6:12:39:7c:b5:29:5d:5e: 49:85:fa:ed:a5:b6:76:43:a7:17:89:d0:b1:a2:7a:11:67:ee: b9:15:e8:26:6f:0f:13:eb:59:76:e7:61:87:6e:f7:52:04:8d: a0:dd:f3:c6:df:97:4f:07:d3:46:87:dc:6b:bf:53:b4:75:1f: f5:ec:36:87:60:1c:c5:f3:d4:d7:88:70:bf:ef:16:6b:78:e1: 78:53:54:01:2b:c9:dd:a0:24:59:aa:d9:4a:4f:c0:32:39:d0: b0:30:dc:c2:15:29:0d:b1:42:28:fd:f1:8b:ad:d7:87:4b:40: b1:62:ae:b8:3f:c6:46:ab:28:f0:0a:b4:55:73:ba:3b:69:68: e7:ed:ff:01:80:10:a3:5a:12:2f:af:29:9d:d9:cf:7f:83:80: ba:1b:c3:17:2c:16:b9:d2:22:26:c0:45:e7:db:fc:94:e9:4e: b2:b3:c8:3c:95:6f:3e:c1:42:e4:ca:67:36:65:9f:3f:f3:4a: 1f:db:66:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwODA5MDExNzIxWhcNMjUwODE2MDExNzIxWjAYMRYwFAYD VQQDEw02ODk2YTFhMS02ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH+zgQfjqOgk/6HwDIsZ7xe7S7BXQxCoFHga3A0WrZyS9k6tNb+HlwQ4XxPQ uO/LGHjZULJuoWZBp3F5dIn1L7X/GK7HBWwdazNob1tHFcwFtJihOrbsqRCiQkXG G0iYOR1JgdllDrDpeTJfiecTINhhQfq9Bp7K5e1+CQzspMS+oCRbkvfujwVjt+li PLeU0+WkDfPSMK0KqK6zh0rsHulDkT09dYlD/LKwoIEm1c+djpsUea+GR4V4Kveb HBbQY+6LsI81tAPZwCXPtEWWBdc8WoSbDFC3BqdrNJ9iKTlKkHzlTrfJlp2CzNh6 /vfo5kdjiyhapEXJ0KL2OOM0UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHQhq9j D0tdj9avgwLX2uPsHg/BMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHtgXiRHzixW88fJ4Nxcg7dqffJMI6prrPrmkZJGTYyO6ubtOwqqH3 7JtI1qpyP4BFOtJFHVBAk7Hs7WxS1Cpn9hI5fLUpXV5JhfrtpbZ2Q6cXidCxonoR Z+65Fegmbw8T61l252GHbvdSBI2g3fPG35dPB9NGh9xrv1O0dR/17DaHYBzF89TX iHC/7xZreOF4U1QBK8ndoCRZqtlKT8AyOdCwMNzCFSkNsUIo/fGLrdeHS0CxYq64 P8ZGqyjwCrRVc7o7aWjn7f8BgBCjWhIvrymd2c9/g4C6G8MXLBa50iImwEXn2/yU 6U6ys8g8lW8+wULkymc2ZZ8/80of22Zw -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:27 2025 by rpki-client