$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: NBvGbooIPeyfZzSWXGiMbiLNK4Sk9xlDyt7U+rak35g= Subject key identifier: 91:21:7F:5E:36:F9:CD:E8:C2:95:61:3C:9B:17:D3:CD:EC:2D:5E:A3 Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 01FA Signing time: Sun 15 Jun 2025 01:43:39 +0000 Manifest this update: Sun 15 Jun 2025 01:43:38 +0000 Manifest next update: Sun 22 Jun 2025 01:43:38 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: um8cnQx8KjaIuhtAIY/epIQ+5Dq9nXfg7SrvCrT6uJs=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Jun 15 01:43:38 2025 GMT Not After : Jun 22 01:43:38 2025 GMT Subject: CN=684e254b-243a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:c6:79:10:b6:21:14:8d:75:47:71:68:9c: 61:59:e5:d7:ef:57:19:a2:63:22:c1:eb:b1:59:75: 81:ab:55:2c:57:eb:c6:ea:3e:12:e8:ff:90:1f:c8: f2:67:01:7d:0d:4b:db:8b:8d:aa:db:52:e4:68:b1: 7d:65:b7:3f:7a:52:f2:04:c7:e1:78:74:85:73:7e: 3f:25:dc:8e:d5:c7:c7:eb:27:1b:1b:c3:9c:43:c2: 51:93:ec:a3:9c:19:e5:cf:6b:e1:71:54:cd:ca:df: a3:7a:09:8a:a2:60:c5:74:9c:cf:4a:55:3f:f0:08: 8f:88:fb:62:5f:9a:94:dd:d0:69:a8:e8:82:e6:46: 36:5c:46:8d:1f:bf:2c:22:8d:66:7a:44:45:1d:26: 3f:3e:58:40:16:ab:d4:80:9b:40:24:05:d6:51:42: 8d:9a:3a:87:26:87:0b:11:1c:ac:77:ec:43:0d:91: 5d:9e:f2:b9:b4:e0:37:eb:1a:3d:49:da:9c:52:b9: 75:27:20:79:79:fb:31:39:2d:40:41:54:e0:d3:2d: 8f:95:b8:53:db:4a:e2:87:99:bb:df:ef:62:04:aa: 2e:a3:f8:30:2d:08:a1:06:4a:62:5e:88:ef:12:31: 19:ac:f1:2f:2d:ad:7d:cc:62:dc:85:4f:eb:fc:4a: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:21:7F:5E:36:F9:CD:E8:C2:95:61:3C:9B:17:D3:CD:EC:2D:5E:A3 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:fd:41:9d:50:0a:dd:a4:9e:10:bf:ca:59:14:8b:08:7d: 71:10:c9:90:a8:86:81:95:f3:32:45:22:ca:80:94:5f:df:82: 64:7f:8c:4c:d9:3e:1e:41:4a:ac:1f:85:75:d2:43:88:29:b4: 9f:d5:d2:51:75:19:39:14:82:0b:1f:73:6e:52:56:a7:82:f0: 01:1c:9c:30:67:48:d3:ae:23:d7:60:3e:12:17:45:ec:56:dc: c2:ed:5e:eb:e5:ec:63:d3:50:b6:48:e8:f7:42:7c:7e:86:90: 74:e5:c2:39:3f:7f:55:ed:8e:ac:03:ea:f6:e2:37:83:e3:c9: 3d:48:5e:02:77:d8:f8:a2:8b:fd:b8:15:56:ff:02:3a:79:6a: 98:7c:94:a6:a2:43:ab:f5:78:c3:85:7c:b4:c5:bd:da:4b:55: a6:94:92:ad:cb:dc:f5:2b:44:b1:da:21:ec:1d:23:40:ac:bf: c9:ba:ac:03:ed:ea:1f:86:e9:1b:a0:d0:1d:a4:08:a7:53:a7: ba:5b:2f:45:16:76:12:a3:cc:7b:62:09:b6:fb:d9:39:55:e8: c3:f3:78:bc:f3:fa:37:b9:96:d8:0f:86:57:5f:8c:a0:c1:21: 00:2c:ea:81:d4:66:e1:d6:67:c9:8b:7b:33:b6:0f:9a:00:5f: 7f:1e:36:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNjE1MDE0MzM4WhcNMjUwNjIyMDE0MzM4WjAYMRYwFAYD VQQDEw02ODRlMjU0Yi0yNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbDGeRC2IRSNdUdxaJxhWeXX71cZomMiweuxWXWBq1UsV+vG6j4S6P+QH8jy ZwF9DUvbi42q21LkaLF9Zbc/elLyBMfheHSFc34/JdyO1cfH6ycbG8OcQ8JRk+yj nBnlz2vhcVTNyt+jegmKomDFdJzPSlU/8AiPiPtiX5qU3dBpqOiC5kY2XEaNH78s Io1mekRFHSY/PlhAFqvUgJtAJAXWUUKNmjqHJocLERysd+xDDZFdnvK5tOA36xo9 SdqcUrl1JyB5efsxOS1AQVTg0y2PlbhT20rih5m73+9iBKouo/gwLQihBkpiXojv EjEZrPEvLa19zGLchU/r/ErN4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEhf142 +c3owpVhPJsX083sLV6jMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9fP1BnVAK3aSeEL/KWRSLCH1xEMmQqIaBlfMyRSLKgJRf34Jkf4xM 2T4eQUqsH4V10kOIKbSf1dJRdRk5FIILH3NuUlangvABHJwwZ0jTriPXYD4SF0Xs VtzC7V7r5exj01C2SOj3Qnx+hpB05cI5P39V7Y6sA+r24jeD48k9SF4Cd9j4oov9 uBVW/wI6eWqYfJSmokOr9XjDhXy0xb3aS1WmlJKty9z1K0Sx2iHsHSNArL/JuqwD 7eofhukboNAdpAinU6e6Wy9FFnYSo8x7Ygm2+9k5VejD83i88/o3uZbYD4ZXX4yg wSEALOqB1Gbh1mfJi3sztg+aAF9/HjZH -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:09 2025 by rpki-client