$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: U2xlWn+WvVfOCJuM0adlpcxpwB6RKal9bbqO+JEk1Pc= Subject key identifier: 49:00:08:E8:9C:05:E6:A7:06:4F:83:1D:5F:06:36:AB:EC:A2:5D:9A Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 0216 Signing time: Sat 09 Aug 2025 02:30:58 +0000 Manifest this update: Sat 09 Aug 2025 02:30:58 +0000 Manifest next update: Sat 16 Aug 2025 02:30:58 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: 1aMGjJ1lnnOS13iTni9Ge5iUimNZyebTkN/DGW7ODls=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Aug 9 02:30:58 2025 GMT Not After : Aug 16 02:30:58 2025 GMT Subject: CN=6896b2e2-b198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:37:11:d5:bb:73:22:56:9c:d3:9c:ea:4f: b0:1c:e0:f8:02:e8:3c:60:69:9f:06:14:43:e5:ca: 9d:87:0d:59:50:9c:ec:83:40:31:5b:82:b6:85:13: 29:e9:5f:58:b7:f8:91:79:a6:02:a3:ff:3a:40:3a: e4:a1:37:e7:e0:47:32:a9:3e:69:12:8f:b0:31:11: b1:7c:1b:94:45:b0:40:d0:bc:0b:22:e7:a1:73:d4: c5:95:45:2f:fe:38:60:e7:9a:02:71:e4:d3:27:fc: 37:9b:4e:9a:ee:88:30:90:25:8e:44:ee:2f:5a:e6: ce:18:2f:dd:2d:96:1b:87:02:81:c3:31:af:c5:3c: 01:3c:21:a5:2e:16:eb:28:67:91:64:f0:d1:15:b3: 20:e6:a9:78:ed:47:8e:37:a8:fc:cd:94:fc:c1:a4: 61:c5:4a:a8:60:0e:b8:ea:71:60:9b:6b:7f:e5:ea: 4a:9b:9d:b8:33:94:e7:5d:09:78:47:c6:53:8e:a0: 66:e2:d4:f3:6f:4b:17:e1:70:e8:ee:fe:4e:6d:ac: 0d:d1:7a:97:84:39:d2:04:ac:49:3c:1c:56:b4:7c: 4f:91:36:8b:10:63:05:64:c5:fc:70:aa:0b:4b:d8: 24:a4:b9:4c:03:19:74:6f:e9:33:bf:e7:25:3b:a6: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:08:E8:9C:05:E6:A7:06:4F:83:1D:5F:06:36:AB:EC:A2:5D:9A X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:96:57:60:f9:43:07:1e:32:42:a6:6c:65:67:c9:4c:24:f6: f0:d0:b5:fc:1e:be:8c:ce:b4:1e:4d:cb:3f:ae:d2:fd:89:85: 20:72:b6:36:7e:4a:44:3d:9c:a4:9b:df:27:e1:ee:6c:f5:f1: 8c:e8:b2:88:3b:ce:5e:ee:f0:dd:1d:9e:7a:43:65:69:b0:0e: 53:90:1e:ac:ff:94:d5:f7:94:2d:00:5b:cc:de:65:81:54:98: 16:63:07:3a:36:69:02:75:1a:be:b3:84:82:19:5a:d4:87:85: d5:74:37:03:36:f6:f6:6a:ae:91:06:49:9b:4c:db:97:f2:a2: 6c:c5:44:c1:b4:fb:af:f6:d5:42:c0:c9:4c:ad:3c:8e:c9:4b: 1c:16:f9:6d:81:82:9c:6b:df:49:f0:09:86:22:92:02:1f:d4: c0:d7:78:53:b6:b1:fc:47:09:b8:a1:c2:36:bc:d6:d0:e6:52: c1:32:c2:9b:04:83:62:a3:e0:c9:82:08:28:1b:39:22:0e:71: 3f:ab:fe:5f:4b:c9:9b:58:0a:c2:dd:d3:f1:2b:1c:61:f1:1b: 18:b2:79:09:38:5c:64:ed:a7:30:2f:c1:c3:53:4a:97:47:d8: 93:32:b3:b1:8f:12:1f:62:5d:b1:3c:22:a8:85:2a:3e:a1:6f: b8:5a:eb:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwODA5MDIzMDU4WhcNMjUwODE2MDIzMDU4WjAYMRYwFAYD VQQDEw02ODk2YjJlMi1iMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSI3EdW7cyJWnNOc6k+wHOD4Aug8YGmfBhRD5cqdhw1ZUJzsg0AxW4K2hRMp 6V9Yt/iReaYCo/86QDrkoTfn4EcyqT5pEo+wMRGxfBuURbBA0LwLIuehc9TFlUUv /jhg55oCceTTJ/w3m06a7ogwkCWORO4vWubOGC/dLZYbhwKBwzGvxTwBPCGlLhbr KGeRZPDRFbMg5ql47UeON6j8zZT8waRhxUqoYA646nFgm2t/5epKm524M5TnXQl4 R8ZTjqBm4tTzb0sX4XDo7v5ObawN0XqXhDnSBKxJPBxWtHxPkTaLEGMFZMX8cKoL S9gkpLlMAxl0b+kzv+clO6b+jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkACOic BeanBk+DHV8GNqvsol2aMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABlldg+UMHHjJCpmxlZ8lMJPbw0LX8Hr6MzrQeTcs/rtL9iYUgcrY2 fkpEPZykm98n4e5s9fGM6LKIO85e7vDdHZ56Q2VpsA5TkB6s/5TV95QtAFvM3mWB VJgWYwc6NmkCdRq+s4SCGVrUh4XVdDcDNvb2aq6RBkmbTNuX8qJsxUTBtPuv9tVC wMlMrTyOyUscFvltgYKca99J8AmGIpICH9TA13hTtrH8Rwm4ocI2vNbQ5lLBMsKb BINio+DJgggoGzkiDnE/q/5fS8mbWArC3dPxKxxh8RsYsnkJOFxk7acwL8HDU0qX R9iTMrOxjxIfYl2xPCKohSo+oW+4Wuvh -----END CERTIFICATE-----Generated at Sun Aug 10 04:47:59 2025 by rpki-client