$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: 4Tf8nsuKIbmFfYDJq9aRhGloZ9kVWWC/jJ2W/Q72TYE= Subject key identifier: 14:2F:A2:13:D8:9F:E9:E8:5B:6A:F6:DB:2B:15:CE:A7:E3:43:99:6E Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 03A2 Signing time: Sat 19 Jul 2025 01:13:09 +0000 Manifest this update: Sat 19 Jul 2025 01:13:08 +0000 Manifest next update: Sat 26 Jul 2025 01:13:08 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: qS5F3PeediDUodZABl1DPzIrFZwmzET2ucc1Gr7eMfw=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Jul 19 01:13:08 2025 GMT Not After : Jul 26 01:13:08 2025 GMT Subject: CN=687af125-8c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:04:56:6d:a2:4d:47:7a:e5:85:ea:de:c1: 87:50:ab:da:89:8f:cf:5d:3b:d0:d7:e6:db:2e:99: bd:92:72:1a:7e:c9:7f:6d:6a:3f:77:f9:c1:0c:95: c3:77:ad:bf:5f:2e:de:ac:32:91:9e:1c:05:79:07: c1:a6:9c:b7:09:27:f0:66:53:cd:f3:4d:04:80:40: 01:47:ed:5a:bf:b1:b2:5d:0d:05:8b:fd:d1:c8:bc: 32:41:7a:56:a9:cb:42:29:df:8e:10:5f:fe:aa:95: c8:f0:b1:bb:43:00:6e:00:40:ee:85:33:8e:f8:7f: 22:a9:fc:61:54:f0:d5:21:99:08:f2:4d:e7:56:bb: a2:c1:19:b3:ad:27:44:19:99:3a:72:6a:ef:2a:98: b4:98:a2:d7:4b:a0:75:c9:b9:34:a9:62:a5:e5:2d: 4b:e0:7b:72:3f:9a:78:fc:f3:56:93:8d:e5:e0:ad: 7a:51:00:c3:9f:63:87:f6:e7:b7:32:91:ec:9d:86: 40:92:77:44:6f:9f:1a:4f:2f:f9:4e:a1:1b:0f:eb: 48:8a:fa:74:27:c0:56:11:ce:65:dc:93:d4:0a:47: d1:40:a1:9e:10:2e:0e:55:fe:71:c2:28:ef:b2:93: e9:7d:6c:f2:78:85:aa:29:ba:77:fd:2d:20:e1:1a: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2F:A2:13:D8:9F:E9:E8:5B:6A:F6:DB:2B:15:CE:A7:E3:43:99:6E X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:b3:e6:9e:33:30:c2:b2:bb:4d:12:63:5f:76:e9:67:0e: 36:a9:0e:93:bd:77:23:1d:69:b8:e9:20:d5:77:cf:91:ca:c8: 1a:ca:df:9b:4d:fa:18:58:9f:24:e9:96:1a:ac:f0:0f:d0:fc: 6b:cd:76:18:99:a5:da:ff:17:e3:aa:80:e5:e0:de:63:22:53: 8b:88:56:7d:f9:26:e7:97:93:3a:db:1f:aa:e8:dc:21:9f:9f: f0:67:a4:11:62:f6:1f:9f:48:55:ee:e4:35:06:f6:61:70:b6: ee:e2:5b:ea:79:7f:e5:76:52:fc:e2:e0:66:c0:5d:93:e2:bc: 32:2c:33:37:8d:d1:f0:ba:b1:b5:34:a9:2e:7f:1b:39:0a:4c: db:9a:e4:40:a0:9f:59:89:1c:7a:1a:9e:80:b0:29:56:d8:38: c9:b4:32:38:5a:13:48:7f:c0:e6:ab:f2:49:f5:5c:90:f8:27: 48:1c:cb:92:29:ba:59:ca:da:4a:c0:bf:92:2e:2c:f8:42:3e: 1d:3b:1a:88:eb:73:19:b7:37:79:f3:01:0e:7a:ed:bb:d3:d7: 46:98:7e:d9:48:a6:f7:47:62:1d:1e:e4:6e:10:1f:9e:9c:b4: 49:8b:8b:14:df:55:e2:74:bc:7e:4b:fe:ae:af:4c:14:cf:a2: 97:9c:0c:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwNzE5MDExMzA4WhcNMjUwNzI2MDExMzA4WjAYMRYwFAYD VQQDEw02ODdhZjEyNS04YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdUEVm2iTUd65YXq3sGHUKvaiY/PXTvQ1+bbLpm9knIafsl/bWo/d/nBDJXD d62/Xy7erDKRnhwFeQfBppy3CSfwZlPN800EgEABR+1av7GyXQ0Fi/3RyLwyQXpW qctCKd+OEF/+qpXI8LG7QwBuAEDuhTOO+H8iqfxhVPDVIZkI8k3nVruiwRmzrSdE GZk6cmrvKpi0mKLXS6B1ybk0qWKl5S1L4HtyP5p4/PNWk43l4K16UQDDn2OH9ue3 MpHsnYZAkndEb58aTy/5TqEbD+tIivp0J8BWEc5l3JPUCkfRQKGeEC4OVf5xwijv spPpfWzyeIWqKbp3/S0g4Rr0owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQvohPY n+noW2r22ysVzqfjQ5luMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIrPmnjMwwrK7TRJjX3bpZw42qQ6TvXcjHWm46SDVd8+Rysgayt+b TfoYWJ8k6ZYarPAP0PxrzXYYmaXa/xfjqoDl4N5jIlOLiFZ9+Sbnl5M62x+q6Nwh n5/wZ6QRYvYfn0hV7uQ1BvZhcLbu4lvqeX/ldlL84uBmwF2T4rwyLDM3jdHwurG1 NKkufxs5CkzbmuRAoJ9ZiRx6Gp6AsClW2DjJtDI4WhNIf8Dmq/JJ9VyQ+CdIHMuS KbpZytpKwL+SLiz4Qj4dOxqI63MZtzd58wEOeu2709dGmH7ZSKb3R2IdHuRuEB+e nLRJi4sU31XidLx+S/6ur0wUz6KXnAyk -----END CERTIFICATE-----Generated at Sun Jul 20 11:31:41 2025 by rpki-client