$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: Bi7GcfA7gIdI6f01JAPcHn7aLdPVmbYPsR3D+15NwW4= Subject key identifier: FB:3F:80:73:E0:20:5F:65:9E:23:4A:3C:1B:47:CD:D3:37:48:B0:0B Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 047A Signing time: Thu 12 Jun 2025 23:40:27 +0000 Manifest this update: Thu 12 Jun 2025 23:40:27 +0000 Manifest next update: Thu 19 Jun 2025 23:40:27 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: EoOvgPr94iGHBkROx/2M+CxzUlFe4JnKf44Ro3I4r+k=) 2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=) 3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Jun 12 23:40:27 2025 GMT Not After : Jun 19 23:40:27 2025 GMT Subject: CN=684b656b-8a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:2c:12:6a:3a:e9:e9:36:87:ab:c6:01:13: 82:fa:e8:77:d9:70:d3:21:21:e6:76:96:d2:51:a8: 7a:bc:a0:18:58:fa:e0:eb:ad:12:ad:fe:ea:17:e1: b3:24:40:77:c0:2b:d9:f9:b9:d4:c1:6a:f0:f0:95: db:f1:55:c3:51:ec:6c:da:b5:fe:eb:a5:9e:7c:33: b0:88:bf:c9:bf:dd:82:61:e0:ab:6d:75:57:af:5d: 78:95:3b:fd:c9:35:1f:02:6b:42:bf:51:8c:4e:da: f7:9b:49:9b:ab:e5:6a:78:7a:67:3f:9d:ca:08:6d: b1:47:2c:2d:9c:85:a0:8f:a8:3e:f4:7c:87:52:7e: 2e:53:92:c3:c7:51:d4:15:f0:7a:2f:16:46:e4:ab: ab:66:c7:dc:02:c0:b1:76:1c:1a:95:1f:b8:63:33: 30:ec:b1:0e:8a:b1:0d:a6:6c:66:ff:37:bf:2d:a0: 65:7a:cd:0a:7f:25:fc:8e:21:8d:a1:92:ba:0b:77: d4:7e:e7:b5:54:f1:e3:bd:58:e1:bc:14:30:a7:eb: d5:b2:b4:de:9c:e2:c5:d1:a6:19:fa:94:41:c5:6d: 8a:61:aa:0d:8b:c3:54:8d:de:f2:92:9b:73:58:98: dd:49:e1:56:48:cf:7f:9a:6b:c8:53:51:8e:4b:d0: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:80:73:E0:20:5F:65:9E:23:4A:3C:1B:47:CD:D3:37:48:B0:0B X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d1:9d:21:f9:de:91:07:ec:fd:53:ed:3d:b3:05:b2:8b:2c: 21:4c:8c:ea:87:99:62:40:f5:d9:c0:62:d5:3e:56:25:13:24: d3:03:32:e1:f2:56:fc:82:82:ca:d1:85:6b:bc:34:ed:e2:b7: 0c:0b:f4:90:9b:ff:0f:ff:a8:e7:9f:6d:0b:19:7a:19:38:f2: e0:db:93:1f:7f:d4:97:6b:5a:ba:17:09:4f:c1:72:21:78:79: 88:ec:99:f7:d2:96:eb:bf:9d:22:8b:67:8a:d6:6a:14:9f:76: 19:1b:e8:61:9c:61:e4:35:2f:03:f6:23:8f:04:dd:b8:1f:46: fc:89:a4:fa:a9:da:40:8e:a2:c5:3a:2a:59:fe:05:63:53:d4: be:e0:6a:de:4d:2b:80:50:77:db:e8:65:a6:88:22:0f:32:66: 60:11:35:61:7f:cf:20:81:bc:47:73:04:e6:b4:c8:eb:45:94: 52:25:83:31:22:fc:29:cf:ae:e3:fb:8c:71:44:4b:d8:fb:07: 56:8e:cb:4b:1f:95:7f:8c:77:73:80:f3:9b:98:99:e7:10:54: 43:32:7f:52:3a:ae:97:3c:42:f8:29:78:bb:1e:e1:ec:a9:af: d9:fd:6f:a3:7e:a2:c4:0d:d9:b3:89:73:ea:f6:c8:0c:cc:fc: d1:79:0e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUwNjEyMjM0MDI3WhcNMjUwNjE5MjM0MDI3WjAYMRYwFAYD VQQDEw02ODRiNjU2Yi04YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14QsEmo66ek2h6vGAROC+uh32XDTISHmdpbSUah6vKAYWPrg660Srf7qF+Gz JEB3wCvZ+bnUwWrw8JXb8VXDUexs2rX+66WefDOwiL/Jv92CYeCrbXVXr114lTv9 yTUfAmtCv1GMTtr3m0mbq+VqeHpnP53KCG2xRywtnIWgj6g+9HyHUn4uU5LDx1HU FfB6LxZG5KurZsfcAsCxdhwalR+4YzMw7LEOirENpmxm/ze/LaBles0KfyX8jiGN oZK6C3fUfue1VPHjvVjhvBQwp+vVsrTenOLF0aYZ+pRBxW2KYaoNi8NUjd7ykptz WJjdSeFWSM9/mmvIU1GOS9AeZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs/gHPg IF9lniNKPBtHzdM3SLALMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM0Z0h+d6RB+z9U+09swWyiywhTIzqh5liQPXZwGLVPlYlEyTTAzLh 8lb8goLK0YVrvDTt4rcMC/SQm/8P/6jnn20LGXoZOPLg25Mff9SXa1q6FwlPwXIh eHmI7Jn30pbrv50ii2eK1moUn3YZG+hhnGHkNS8D9iOPBN24H0b8iaT6qdpAjqLF OipZ/gVjU9S+4GreTSuAUHfb6GWmiCIPMmZgETVhf88ggbxHcwTmtMjrRZRSJYMx Ivwpz67j+4xxREvY+wdWjstLH5V/jHdzgPObmJnnEFRDMn9SOq6XPEL4KXi7HuHs qa/Z/W+jfqLEDdmziXPq9sgMzPzReQ4/ -----END CERTIFICATE-----Generated at Sat Jun 14 18:00:18 2025 by rpki-client