$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: cR+NnNAP1qHtskVkCZ++L8T7T9DJYCcy7ORiPkXYqaY= Subject key identifier: E1:7F:48:99:34:9F:73:57:F3:AA:E0:E1:9D:09:7E:F1:C0:44:D7:7F Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0497 Signing time: Sat 09 Aug 2025 00:29:51 +0000 Manifest this update: Sat 09 Aug 2025 00:29:50 +0000 Manifest next update: Sat 16 Aug 2025 00:29:50 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: O8GHrjrwuznwMtWO7WL19wSNgA9ulUMzfCh7hi7Nn38=) 2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=) 3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Aug 9 00:29:50 2025 GMT Not After : Aug 16 00:29:50 2025 GMT Subject: CN=6896967e-686a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:93:7b:2a:e2:e2:14:10:0e:4d:d7:be:a2: 3f:bc:d8:75:ac:e8:f9:db:8c:3e:e5:55:79:88:f8: 8e:b4:f2:fb:59:7f:7c:b1:98:b7:a3:58:8d:40:8e: dd:73:4d:cf:c0:72:88:ee:35:3b:7a:b6:7d:8a:9c: 2a:a5:da:f3:fe:7b:33:94:2f:d8:6c:f8:5e:82:91: 33:2c:34:34:24:5a:19:30:73:86:f9:66:80:67:65: 46:dc:90:14:5d:76:0a:0b:48:61:18:5f:1f:d5:70: e4:c4:ce:41:88:94:19:ba:4b:29:1e:c7:a9:9b:22: d0:6d:35:6e:84:90:77:c3:13:90:59:71:a3:ab:5f: 92:71:8e:2b:ca:8b:20:1d:2a:5a:ae:3c:68:df:54: 8c:78:2b:91:08:e1:83:ca:a9:21:e0:33:cd:e9:c8: aa:4f:16:d5:5b:da:a9:24:9a:43:6e:47:38:07:af: e5:cb:f1:34:6b:c4:43:3d:05:f1:e9:f0:f3:f5:77: 71:8c:f3:f9:12:60:10:84:a7:73:78:be:29:96:4e: 27:78:6d:32:3d:18:31:5e:8f:44:60:c5:89:3d:59: 94:42:a4:71:39:02:2a:29:b3:c7:26:ac:e1:e1:a5: fe:d6:e3:ac:b0:41:35:0d:fe:d8:f4:47:e6:92:4f: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:48:99:34:9F:73:57:F3:AA:E0:E1:9D:09:7E:F1:C0:44:D7:7F X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:10:08:0d:26:1c:35:d0:5f:ac:bf:a2:07:3b:6f:a5:5a:29: f4:29:b0:ce:65:cf:bd:d4:8b:21:d2:d0:19:71:78:ac:d7:d1: dc:39:eb:b8:fd:df:a1:81:50:9c:fe:82:09:6a:dc:e7:06:4e: 88:66:f8:53:2c:b0:89:59:15:24:1d:1c:be:0a:a0:40:ed:56: 65:38:a5:20:6e:0b:b2:d4:a1:46:c1:e3:3f:02:c2:91:f0:cd: 3a:86:c5:75:bc:b7:fb:3a:3c:84:a5:c2:1e:e0:f2:dc:7c:9d: ea:a6:67:ac:b1:15:e4:15:4f:3a:37:cd:0d:06:ff:18:1c:e0: 80:44:6e:c6:fe:d8:ee:99:d5:0f:5e:ec:35:b6:c8:31:26:c3: c0:45:8d:f8:69:b5:c5:18:64:35:f5:c3:75:32:06:64:91:87: e8:c1:2e:2a:5c:1f:eb:5a:8d:0a:9c:87:59:16:6e:0f:cb:4e: 1d:c4:1d:20:aa:22:dd:89:1f:98:1f:7e:5c:86:28:76:3d:7b: cf:9f:9a:00:d0:02:66:b1:64:0a:1b:02:19:ba:86:90:17:0e: 50:f9:0f:52:db:35:13:00:a7:8a:a6:64:b8:49:3f:fd:57:02: aa:30:80:10:65:44:df:c4:8b:bf:f0:56:00:ee:de:75:22:bd: 05:b2:d5:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUwODA5MDAyOTUwWhcNMjUwODE2MDAyOTUwWjAYMRYwFAYD VQQDEw02ODk2OTY3ZS02ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EuTeyri4hQQDk3XvqI/vNh1rOj524w+5VV5iPiOtPL7WX98sZi3o1iNQI7d c03PwHKI7jU7erZ9ipwqpdrz/nszlC/YbPhegpEzLDQ0JFoZMHOG+WaAZ2VG3JAU XXYKC0hhGF8f1XDkxM5BiJQZukspHsepmyLQbTVuhJB3wxOQWXGjq1+ScY4ryosg HSparjxo31SMeCuRCOGDyqkh4DPN6ciqTxbVW9qpJJpDbkc4B6/ly/E0a8RDPQXx 6fDz9XdxjPP5EmAQhKdzeL4plk4neG0yPRgxXo9EYMWJPVmUQqRxOQIqKbPHJqzh 4aX+1uOssEE1Df7Y9Efmkk/SQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOF/SJk0 n3NX86rg4Z0JfvHARNd/MB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEAgNJhw10F+sv6IHO2+lWin0KbDOZc+91Ish0tAZcXis19HcOeu4 /d+hgVCc/oIJatznBk6IZvhTLLCJWRUkHRy+CqBA7VZlOKUgbguy1KFGweM/AsKR 8M06hsV1vLf7OjyEpcIe4PLcfJ3qpmessRXkFU86N80NBv8YHOCARG7G/tjumdUP Xuw1tsgxJsPARY34abXFGGQ19cN1MgZkkYfowS4qXB/rWo0KnIdZFm4Py04dxB0g qiLdiR+YH35chih2PXvPn5oA0AJmsWQKGwIZuoaQFw5Q+Q9S2zUTAKeKpmS4ST/9 VwKqMIAQZUTfxIu/8FYA7t51Ir0FstWX -----END CERTIFICATE-----Generated at Sat Aug 9 05:37:16 2025 by rpki-client