$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: sXDdX0c3CQX7nCuttYQeIJSZgPG67Q/j9lq8ft5zd9E= Subject key identifier: A8:44:BD:73:2A:38:DF:45:D0:D5:5E:F3:02:3A:6F:45:58:98:05:11 Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A00 Signing time: Fri 08 Aug 2025 20:10:15 +0000 Manifest this update: Fri 08 Aug 2025 20:10:14 +0000 Manifest next update: Fri 15 Aug 2025 20:10:14 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: wi9fEh3oh6ctRxZsKAWYvzShEsp2wSiPW0WwxtDurf0=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Aug 8 20:10:14 2025 GMT Not After : Aug 15 20:10:14 2025 GMT Subject: CN=689659a6-1299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:ea:2b:8c:24:6d:0c:21:21:e9:83:08:95: 16:3c:59:40:6e:58:85:4a:5e:a7:db:66:cf:ee:f8: e8:19:84:d7:10:7f:b8:c4:7e:6a:20:d0:eb:60:e6: c5:54:93:a4:0b:00:a4:1f:fb:5b:3a:80:13:de:d7: 89:dc:e5:c2:e1:c0:16:55:ab:fd:e4:0d:9a:69:fa: 6e:5b:51:2d:d4:b8:a7:c9:4f:d5:b9:f7:3f:b5:62: 21:5a:92:08:fd:b4:e4:91:ec:47:59:e3:63:c9:05: 68:a4:a1:92:5d:bd:68:51:c9:04:cb:85:50:60:56: 01:01:ca:5c:7d:75:64:3a:fc:35:7c:bf:77:b8:43: 41:4d:56:34:30:f3:75:3d:e1:5b:b4:85:af:46:79: fc:a4:94:b1:e9:ba:6d:a7:d2:cc:e9:dc:b4:de:47: 70:a0:3d:be:89:d7:54:94:34:77:5f:e3:51:01:db: 73:e7:01:79:e4:77:5f:c8:22:7d:da:e9:b5:bb:e5: d3:a3:72:58:c6:66:78:82:79:5d:ca:e0:00:22:e8: 81:b0:2d:10:39:dd:e7:a3:9b:22:f3:82:c2:1e:41: 0f:bf:6c:b8:07:43:b4:3e:a5:3d:d8:58:8d:88:24: 47:a4:98:25:f7:51:d5:74:c1:0f:63:a1:70:dc:8d: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:44:BD:73:2A:38:DF:45:D0:D5:5E:F3:02:3A:6F:45:58:98:05:11 X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:31:a5:54:c6:55:72:14:76:0e:cb:f6:58:c8:08:bd:e6:60: 71:95:ef:b2:33:2d:34:82:89:d4:af:01:81:a1:7b:2f:cd:b8: 10:f7:0b:2c:52:7d:26:43:2c:ad:ea:05:78:8a:7e:57:68:31: f9:51:f5:e3:a0:23:4d:b6:e4:a9:3c:92:e1:1e:5b:64:85:57: f4:a4:f9:c7:46:b3:27:3e:8d:19:6d:fa:42:49:66:b5:5e:2f: 36:33:03:44:10:03:d7:3e:91:13:68:27:1b:c8:fa:ee:06:38: 52:de:de:76:e6:63:3a:34:1f:b8:45:cd:9a:86:ec:8e:98:ba: 3b:18:3e:1e:0d:f7:e7:ea:ef:db:d0:a7:23:7b:a0:c7:91:af: 06:3f:36:fe:61:83:83:f2:2f:4e:e5:21:ee:52:1d:db:f9:92: d5:ef:fb:1d:3d:f2:e0:3c:56:38:79:97:21:ec:f0:5d:4a:f1: 84:de:c4:67:48:f5:69:3e:10:f7:c9:f2:67:47:1e:e5:1d:fc: 69:77:0e:1e:ae:ab:52:f3:ff:8c:9e:ad:fb:dd:a5:a4:c2:b1: 08:be:f3:97:37:7f:d8:95:e0:00:7b:64:ad:9b:58:b4:da:88: f0:44:79:16:3b:c2:0f:e7:a3:48:9d:d4:0e:10:71:63:f4:f5: 0a:11:be:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwODA4MjAxMDE0WhcNMjUwODE1MjAxMDE0WjAYMRYwFAYD VQQDEw02ODk2NTlhNi0xMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK3qK4wkbQwhIemDCJUWPFlAbliFSl6n22bP7vjoGYTXEH+4xH5qINDrYObF VJOkCwCkH/tbOoAT3teJ3OXC4cAWVav95A2aafpuW1Et1LinyU/Vufc/tWIhWpII /bTkkexHWeNjyQVopKGSXb1oUckEy4VQYFYBAcpcfXVkOvw1fL93uENBTVY0MPN1 PeFbtIWvRnn8pJSx6bptp9LM6dy03kdwoD2+iddUlDR3X+NRAdtz5wF55HdfyCJ9 2um1u+XTo3JYxmZ4gnldyuAAIuiBsC0QOd3no5si84LCHkEPv2y4B0O0PqU92FiN iCRHpJgl91HVdMEPY6Fw3I0AmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhEvXMq ON9F0NVe8wI6b0VYmAURMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmMaVUxlVyFHYOy/ZYyAi95mBxle+yMy00gonUrwGBoXsvzbgQ9wss Un0mQyyt6gV4in5XaDH5UfXjoCNNtuSpPJLhHltkhVf0pPnHRrMnPo0ZbfpCSWa1 Xi82MwNEEAPXPpETaCcbyPruBjhS3t525mM6NB+4Rc2ahuyOmLo7GD4eDffn6u/b 0Kcje6DHka8GPzb+YYOD8i9O5SHuUh3b+ZLV7/sdPfLgPFY4eZch7PBdSvGE3sRn SPVpPhD3yfJnRx7lHfxpdw4erqtS8/+Mnq373aWkwrEIvvOXN3/YleAAe2Stm1i0 2ojwRHkWO8IP56NIndQOEHFj9PUKEb6w -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:27 2025 by rpki-client