$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: 53/4IeRvCOWuy2OOUcKqhUk3jXhw6ug3junCru+g6BY= Subject key identifier: 59:BE:6C:43:78:43:63:53:A8:0E:6A:2D:7D:E0:32:63:EC:10:82:45 Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0C78 Signing time: Sun 10 Aug 2025 18:21:23 +0000 Manifest this update: Sun 10 Aug 2025 18:21:23 +0000 Manifest next update: Sun 17 Aug 2025 18:21:23 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: kaoB383iUhB+R7W6nfTItAbgfHs9m/XeldpvSO5ALEQ=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: L3QtLlUYOp97S+0J2ZEUAV9V2aNzWM2GyLPcyzG+Vzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Aug 10 18:21:23 2025 GMT Not After : Aug 17 18:21:23 2025 GMT Subject: CN=6898e323-e558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:17:4f:da:26:34:8c:ab:92:36:52:07:ea: 40:e7:8d:d2:98:5c:66:21:57:18:1d:35:6f:3f:b7: 78:c3:c3:f1:6a:1d:cf:f9:f6:be:bd:23:fb:aa:7e: 43:24:d3:a2:98:d6:8a:29:7c:93:49:7f:87:ba:fd: e2:c8:3a:db:54:a3:76:b1:55:74:07:39:65:cb:c0: 1c:c8:19:d6:04:d8:66:cb:0e:56:7c:ca:8e:01:76: 9e:ed:dd:99:64:6f:09:49:42:41:e7:16:06:d7:5b: 9e:68:a0:67:ce:a7:ed:48:17:6a:9c:25:61:cf:01: 94:6e:23:a6:65:0c:66:81:58:46:84:3a:f5:6b:47: bf:e3:1f:1b:22:5d:a3:7c:ec:6c:d3:bb:34:6f:4f: a4:30:2c:a8:79:52:d6:88:a0:62:1a:65:79:c6:64: f0:6c:a8:3b:04:62:2b:84:a2:53:af:c3:0b:d7:92: 57:e9:5a:07:7a:6b:e7:3c:31:bf:0a:3e:9f:16:7d: 81:df:fb:aa:d0:01:f0:9a:b4:2e:e8:8a:bd:21:ad: 06:ea:55:a6:05:36:f3:2b:54:26:db:3d:4a:22:1c: f4:1b:01:02:3d:65:97:86:62:9e:d4:b3:aa:91:e1: e7:8f:bf:f1:fb:07:fb:f3:3f:fc:87:41:03:b6:35: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:6C:43:78:43:63:53:A8:0E:6A:2D:7D:E0:32:63:EC:10:82:45 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:46:30:32:23:b3:be:92:66:13:9a:74:f6:94:a3:59:8e:83: 9a:7f:03:21:9c:fb:8d:6f:b7:1f:44:b2:a5:2c:00:af:c7:79: 85:37:fe:0f:06:1b:c8:4d:2b:a7:1b:9e:32:dd:84:c8:39:f9: b4:18:4d:65:9e:18:d6:21:67:6e:b4:be:14:c3:a8:13:dc:2f: c6:44:97:f3:f8:64:42:c6:58:06:c7:ea:89:64:80:fe:cd:e6: 7e:c6:f3:2e:d4:f7:9f:ca:05:a8:ca:e0:aa:0f:6c:58:75:50: 30:1c:37:be:6d:70:67:c8:ea:16:6d:c4:c8:49:2f:52:c8:73: fa:42:77:5d:2c:08:82:14:e9:7a:7d:19:f8:79:f7:a1:af:aa: 03:16:46:81:c7:d4:47:b7:ef:c1:1c:3b:64:e1:34:4a:99:de: c1:73:9d:02:bb:d5:c0:04:f7:19:60:52:06:71:f9:a0:e7:2b: 35:48:f7:45:7a:4c:90:8d:0a:c4:0e:e9:56:61:d6:26:2d:4a: 78:f5:4f:a8:16:35:83:cd:1d:f3:da:86:ca:ad:2b:99:26:bd: 4b:2b:7a:a4:f7:57:ec:39:04:5e:f8:7e:04:f7:0c:54:fa:12: 2b:2c:c7:88:70:08:60:8a:3d:fe:f9:1f:62:45:a5:ab:8c:f7: f6:24:f1:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjUwODEwMTgyMTIzWhcNMjUwODE3MTgyMTIzWjAYMRYwFAYD VQQDEw02ODk4ZTMyMy1lNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvEXT9omNIyrkjZSB+pA543SmFxmIVcYHTVvP7d4w8Pxah3P+fa+vSP7qn5D JNOimNaKKXyTSX+Huv3iyDrbVKN2sVV0Bzlly8AcyBnWBNhmyw5WfMqOAXae7d2Z ZG8JSUJB5xYG11ueaKBnzqftSBdqnCVhzwGUbiOmZQxmgVhGhDr1a0e/4x8bIl2j fOxs07s0b0+kMCyoeVLWiKBiGmV5xmTwbKg7BGIrhKJTr8ML15JX6VoHemvnPDG/ Cj6fFn2B3/uq0AHwmrQu6Iq9Ia0G6lWmBTbzK1Qm2z1KIhz0GwECPWWXhmKe1LOq keHnj7/x+wf78z/8h0EDtjWhxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm+bEN4 Q2NTqA5qLX3gMmPsEIJFMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCRjAyI7O+kmYTmnT2lKNZjoOafwMhnPuNb7cfRLKlLACvx3mFN/4P BhvITSunG54y3YTIOfm0GE1lnhjWIWdutL4Uw6gT3C/GRJfz+GRCxlgGx+qJZID+ zeZ+xvMu1PefygWoyuCqD2xYdVAwHDe+bXBnyOoWbcTISS9SyHP6QnddLAiCFOl6 fRn4efehr6oDFkaBx9RHt+/BHDtk4TRKmd7Bc50Cu9XABPcZYFIGcfmg5ys1SPdF ekyQjQrEDulWYdYmLUp49U+oFjWDzR3z2obKrSuZJr1LK3qk91fsOQRe+H4E9wxU +hIrLMeIcAhgij3++R9iRaWrjPf2JPG0 -----END CERTIFICATE-----Generated at Mon Aug 11 12:58:25 2025 by rpki-client