$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: jS1mtI1H6yMgLPKysSoxKkEcyqzBvOXH9GLR2TsdGEA= Subject key identifier: 46:D4:82:BA:98:CA:79:F6:E1:A8:DE:30:07:FD:16:04:D4:FE:CA:CA Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 020B Signing time: Sat 19 Jul 2025 02:26:15 +0000 Manifest this update: Sat 19 Jul 2025 02:26:15 +0000 Manifest next update: Sat 26 Jul 2025 02:26:15 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: bG0bY0BlD3Dfb4m7C5qYX9T3LapG3fXSYIbtPP2OVYQ=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Jul 19 02:26:15 2025 GMT Not After : Jul 26 02:26:15 2025 GMT Subject: CN=687b0247-1fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:04:a0:eb:a4:7a:71:4d:f1:c9:cc:13:52: 8b:38:cf:e7:8d:fc:45:41:a4:22:bf:93:2c:9f:42: 33:2d:54:1a:af:fa:eb:b2:7c:f0:1c:d0:58:29:fc: 4b:30:8c:2b:b5:0c:b4:62:6d:cc:8a:bb:9c:98:90: 3f:2c:14:4a:0b:eb:12:6b:3d:6f:ac:2d:07:23:49: 5b:0e:12:93:b5:72:88:4f:f3:f7:f1:90:67:40:69: c8:9e:75:05:b6:14:d2:9d:c3:88:b5:f8:7a:e8:93: d5:d9:71:9d:aa:bf:2c:e7:84:94:50:be:c0:6a:41: c1:0e:9f:5b:bc:c0:05:89:3e:02:2b:fa:7c:7d:a6: 5f:7e:b6:84:b3:2a:26:32:36:e3:7a:74:1a:c3:ff: 64:2e:dc:35:cf:70:aa:96:09:05:b3:cb:5a:ca:16: 57:54:11:23:e2:ad:db:08:94:57:96:67:f0:76:7f: aa:e3:77:19:f0:96:8e:c5:cd:c2:76:a3:3a:5a:c2: 4a:8e:f7:3f:f2:8c:83:6a:1c:f2:1d:9c:b3:eb:c9: 38:81:68:b2:cd:de:fe:aa:7f:27:39:56:86:df:e9: 29:37:c2:9a:03:ea:c7:9f:6c:8f:5f:02:67:dc:cf: 0a:e2:6e:94:a4:c7:93:13:58:6e:5b:bc:b3:45:e1: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:82:BA:98:CA:79:F6:E1:A8:DE:30:07:FD:16:04:D4:FE:CA:CA X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f4:f4:28:47:17:87:79:33:6d:bd:d9:6f:62:f0:23:6b:5a: 3e:fd:ff:05:a2:c5:e8:23:30:5d:71:58:3d:21:5a:55:03:00: ec:9c:ad:4e:65:ef:0b:44:9f:10:64:fc:25:71:69:0b:01:2e: 97:b3:77:06:89:d4:45:51:9a:1f:0e:61:6a:e7:68:5c:45:72: 3b:e4:a0:9c:93:a8:60:2c:f5:4e:c5:7a:57:ef:bb:c9:35:89: 1d:0a:9d:a6:4a:39:4e:13:ad:d7:1f:36:03:47:1d:d5:4b:66: 49:31:27:b8:5e:c8:57:3e:2b:90:74:03:a9:70:cf:30:cf:22: 6c:64:43:3e:b4:b0:ee:bb:6d:b7:95:0a:ae:7e:38:f7:15:f2: c1:b3:f3:11:d5:73:aa:bf:54:90:a0:82:c0:3c:55:fe:5e:47: f2:38:fa:6e:fe:96:58:83:7c:af:b1:6d:c2:b3:fc:48:64:6e: 72:03:fd:02:cc:d5:24:82:2c:b6:52:a0:ed:d9:ad:15:a3:6d: ec:b0:74:c8:80:2f:9a:fe:7f:1a:32:58:35:a3:6e:3d:f4:e5: 7d:e4:e2:e8:64:d4:78:7f:f1:56:29:33:72:0d:59:05:93:43: 52:79:bf:7f:a3:bb:b1:17:08:0e:80:09:c4:36:0f:b8:8a:dd: b2:af:c5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNzE5MDIyNjE1WhcNMjUwNzI2MDIyNjE1WjAYMRYwFAYD VQQDEw02ODdiMDI0Ny0xZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXsEoOukenFN8cnME1KLOM/njfxFQaQiv5Msn0IzLVQar/rrsnzwHNBYKfxL MIwrtQy0Ym3MirucmJA/LBRKC+sSaz1vrC0HI0lbDhKTtXKIT/P38ZBnQGnInnUF thTSncOItfh66JPV2XGdqr8s54SUUL7AakHBDp9bvMAFiT4CK/p8faZffraEsyom MjbjenQaw/9kLtw1z3CqlgkFs8tayhZXVBEj4q3bCJRXlmfwdn+q43cZ8JaOxc3C dqM6WsJKjvc/8oyDahzyHZyz68k4gWiyzd7+qn8nOVaG3+kpN8KaA+rHn2yPXwJn 3M8K4m6UpMeTE1huW7yzReE3WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbUgrqY ynn24ajeMAf9FgTU/srKMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9PQoRxeHeTNtvdlvYvAja1o+/f8FosXoIzBdcVg9IVpVAwDsnK1O Ze8LRJ8QZPwlcWkLAS6Xs3cGidRFUZofDmFq52hcRXI75KCck6hgLPVOxXpX77vJ NYkdCp2mSjlOE63XHzYDRx3VS2ZJMSe4XshXPiuQdAOpcM8wzyJsZEM+tLDuu223 lQqufjj3FfLBs/MR1XOqv1SQoILAPFX+XkfyOPpu/pZYg3yvsW3Cs/xIZG5yA/0C zNUkgiy2UqDt2a0Vo23ssHTIgC+a/n8aMlg1o2499OV95OLoZNR4f/FWKTNyDVkF k0NSeb9/o7uxFwgOgAnENg+4it2yr8XK -----END CERTIFICATE-----Generated at Sun Jul 20 07:11:48 2025 by rpki-client