$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: /MQiCAV2Ec0jkHoalaiJvjRTEYDz4Aa9LjwCPnT06kk= Subject key identifier: 47:B4:90:27:00:4A:5B:31:6C:25:57:30:38:04:E8:46:2F:58:84:77 Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0C5A Signing time: Thu 12 Jun 2025 18:13:20 +0000 Manifest this update: Thu 12 Jun 2025 18:13:19 +0000 Manifest next update: Thu 19 Jun 2025 18:13:19 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: /W2ZEiwbE8NHeOIJ+TH/WRXsYMYw8A5js7lLBg7b9TI=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: L3QtLlUYOp97S+0J2ZEUAV9V2aNzWM2GyLPcyzG+Vzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Jun 12 18:13:19 2025 GMT Not After : Jun 19 18:13:19 2025 GMT Subject: CN=684b18bf-414a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:9b:1a:f2:8a:98:29:83:dc:2f:13:2b:77: 2e:72:29:24:8b:f3:68:5f:ad:ff:f6:5b:c7:b6:1e: 57:4d:f1:9d:6c:88:35:c1:cf:f9:32:76:a8:ae:c3: f4:fb:17:e6:90:69:f3:2d:e2:2e:15:fd:53:07:f4: 58:cb:df:62:45:d2:9d:9f:c1:90:73:b7:6a:6b:ac: 12:3e:17:43:2e:0f:54:da:92:45:48:52:b7:01:2d: 3a:8f:14:8b:d6:6c:7d:66:8d:cb:41:82:a7:57:27: 70:a7:5a:23:18:9d:e1:5f:b3:c0:6d:10:46:57:85: fd:65:86:41:b8:65:eb:85:fd:c6:ae:1e:c7:30:95: 2f:fd:af:0f:b9:8b:49:18:36:c0:0a:d4:6e:05:49: ac:b9:82:e4:ff:bd:1c:4b:6e:64:f7:74:38:b7:e8: 78:13:a1:05:55:75:9e:7d:33:bd:43:2d:93:0a:fb: 86:d2:09:9b:7f:cb:bf:7e:f2:39:fe:1e:1f:4a:21: 53:ce:c4:73:2b:15:1e:3c:84:57:fb:c5:81:3e:e7: c1:95:47:39:bd:b3:bb:7f:42:bb:30:8a:22:af:f1: ca:d7:34:3e:54:17:b9:b1:cc:ca:ae:5c:88:3d:db: b2:2f:db:de:9e:a1:d2:35:38:79:29:6c:b3:a9:9e: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B4:90:27:00:4A:5B:31:6C:25:57:30:38:04:E8:46:2F:58:84:77 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f1:20:f5:6f:fa:23:06:f6:33:d5:8f:b6:1d:de:78:0e:fa: 2f:7b:b2:6a:30:2c:35:f7:a1:ca:9d:ca:15:11:4c:0f:bb:25: b8:fd:26:34:e3:43:aa:41:b5:ac:5b:ab:60:ef:98:64:92:91: 31:a2:14:e8:c0:fd:91:1b:d4:ae:f0:64:73:11:c1:22:db:8e: 16:6b:58:38:04:c0:60:75:e2:85:55:69:e3:d6:08:22:69:19: b3:1d:23:8c:64:61:b1:44:f7:46:f8:62:6b:36:cf:98:4f:a4: dc:e4:6a:a8:2a:15:5f:70:0b:6c:e7:29:05:99:5d:70:68:c5: 26:f2:b0:d2:70:b3:41:16:42:c5:fa:d5:6f:68:55:d8:ae:be: b7:52:71:ff:4e:bd:55:aa:d8:0a:43:68:69:80:0d:87:2b:15: e8:ce:35:b5:5c:ac:97:3d:d4:6a:72:30:66:40:4a:c6:3d:95: ed:5c:58:06:35:17:a1:7d:6c:ea:cb:08:53:da:61:79:3e:05: 8e:b6:83:8b:9d:27:0a:04:b9:54:25:e6:c9:d7:47:e1:33:ac: d3:70:5f:fc:cd:64:28:59:69:8b:28:cf:81:50:c9:e0:43:8e: 81:b5:a4:75:19:71:d8:24:10:9e:a7:8d:66:24:da:d1:af:a1: 0f:fb:73:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjUwNjEyMTgxMzE5WhcNMjUwNjE5MTgxMzE5WjAYMRYwFAYD VQQDEw02ODRiMThiZi00MTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VqbGvKKmCmD3C8TK3cucikki/NoX63/9lvHth5XTfGdbIg1wc/5MnaorsP0 +xfmkGnzLeIuFf1TB/RYy99iRdKdn8GQc7dqa6wSPhdDLg9U2pJFSFK3AS06jxSL 1mx9Zo3LQYKnVydwp1ojGJ3hX7PAbRBGV4X9ZYZBuGXrhf3Grh7HMJUv/a8PuYtJ GDbACtRuBUmsuYLk/70cS25k93Q4t+h4E6EFVXWefTO9Qy2TCvuG0gmbf8u/fvI5 /h4fSiFTzsRzKxUePIRX+8WBPufBlUc5vbO7f0K7MIoir/HK1zQ+VBe5sczKrlyI PduyL9venqHSNTh5KWyzqZ5llQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe0kCcA SlsxbCVXMDgE6EYvWIR3MB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa8SD1b/ojBvYz1Y+2Hd54Dvove7JqMCw196HKncoVEUwPuyW4/SY0 40OqQbWsW6tg75hkkpExohTowP2RG9Su8GRzEcEi244Wa1g4BMBgdeKFVWnj1ggi aRmzHSOMZGGxRPdG+GJrNs+YT6Tc5GqoKhVfcAts5ykFmV1waMUm8rDScLNBFkLF +tVvaFXYrr63UnH/Tr1VqtgKQ2hpgA2HKxXozjW1XKyXPdRqcjBmQErGPZXtXFgG NRehfWzqywhT2mF5PgWOtoOLnScKBLlUJebJ10fhM6zTcF/8zWQoWWmLKM+BUMng Q46BtaR1GXHYJBCep41mJNrRr6EP+3M4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:01 2025 by rpki-client