$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: WX+sZhfxcKYdODkCH6Bya3OK0cZrbr3mbLsjLWdEMRw= Subject key identifier: DC:6F:F9:43:7C:46:9E:7C:78:16:1A:F0:79:7A:89:B3:1E:EC:85:B8 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A49 Signing time: Fri 18 Jul 2025 19:59:21 +0000 Manifest this update: Fri 18 Jul 2025 19:59:20 +0000 Manifest next update: Fri 25 Jul 2025 19:59:20 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: LC1IH05NYyXsYRIjS9cgp7DCX9r3Zs9gKD5fbnYSF/M=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Jul 18 19:59:20 2025 GMT Not After : Jul 25 19:59:20 2025 GMT Subject: CN=687aa798-ee9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:98:3b:9c:ab:2d:76:be:cf:73:32:6f:3e: 63:59:f9:c6:ee:75:08:11:4c:c4:01:8c:ef:f7:94: b1:04:b4:2f:06:82:47:f8:ec:b0:30:a2:8c:fe:77: c8:4e:4d:24:62:73:9b:fa:a8:0d:65:34:c6:94:cb: 26:c8:e6:9b:09:f2:67:b9:8a:d7:1a:a7:b8:ea:e8: 93:b9:9f:b8:33:16:ea:4b:97:51:f5:25:7c:e4:cb: fc:76:9a:06:fc:0e:e4:7e:05:e0:0a:8c:92:22:58: d9:2e:8e:4f:0a:de:7d:3a:62:bd:e7:a2:25:86:cb: 7d:eb:73:4b:4c:91:31:3c:ea:e3:67:47:52:64:1e: 68:03:f9:22:50:32:09:1d:1c:11:30:86:92:64:74: 2d:cb:ec:ae:82:de:a9:5d:db:22:b1:36:4d:c9:63: 8a:d1:d4:aa:6b:7f:19:1f:f8:9c:bf:fd:7c:fe:fb: 11:ae:db:4e:28:da:4c:f4:2c:e7:70:fe:c7:33:a0: 3a:11:41:be:7a:0a:00:5d:2f:1c:7a:b6:03:77:6f: b1:f1:ab:b8:22:51:12:e4:5f:2a:c2:3f:a4:ed:a4: 3d:26:66:7c:8b:50:d4:fc:03:1a:3f:a9:ad:70:f4: 13:ac:ef:23:55:10:2c:d1:09:89:50:bd:84:af:55: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6F:F9:43:7C:46:9E:7C:78:16:1A:F0:79:7A:89:B3:1E:EC:85:B8 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:46:42:08:70:d7:e0:48:eb:fa:57:e4:05:95:d7:9b:eb:75: 7e:0a:31:2c:8d:11:4a:19:d9:0a:14:85:91:0c:20:36:ca:b3: 9f:cf:b7:72:e7:a5:59:5e:d7:5f:e0:c2:3c:fd:8b:21:00:cf: c5:f1:7e:1c:86:41:d4:b3:45:f2:00:c9:03:30:77:e5:1c:c9: ae:2a:ce:b7:d0:d6:e8:58:f6:7a:77:b0:6e:19:78:ee:19:d3: 6c:20:89:ed:e8:ef:c4:90:48:87:c0:4f:58:07:54:9d:12:cf: 41:aa:c9:60:22:97:c2:76:95:26:2e:f9:73:37:c6:2e:df:50: 69:b9:d2:1f:49:ea:19:a7:1a:c0:3a:a4:fb:58:8f:ac:ce:02: 67:c7:d4:a4:85:7b:03:63:60:1e:27:52:74:90:4f:84:8b:4a: 98:fc:dc:d1:bc:25:27:f2:e9:da:7d:3a:58:c9:49:4d:82:71: ec:46:19:2e:04:9a:19:9f:a5:4b:b6:94:87:e0:08:02:52:3e: 4d:4f:50:db:0e:6b:4a:31:c9:54:97:f2:ad:f4:72:b5:47:fb: e9:02:b8:80:06:69:0e:dd:20:8e:b7:8e:70:d3:10:34:5d:dc: f9:ed:e1:4f:98:40:4b:91:e4:c2:13:e1:81:e8:8d:c3:7e:37: 13:ca:de:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUwNzE4MTk1OTIwWhcNMjUwNzI1MTk1OTIwWjAYMRYwFAYD VQQDEw02ODdhYTc5OC1lZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKaYO5yrLXa+z3Mybz5jWfnG7nUIEUzEAYzv95SxBLQvBoJH+OywMKKM/nfI Tk0kYnOb+qgNZTTGlMsmyOabCfJnuYrXGqe46uiTuZ+4MxbqS5dR9SV85Mv8dpoG /A7kfgXgCoySIljZLo5PCt59OmK956Ilhst963NLTJExPOrjZ0dSZB5oA/kiUDIJ HRwRMIaSZHQty+yugt6pXdsisTZNyWOK0dSqa38ZH/icv/18/vsRrttOKNpM9Czn cP7HM6A6EUG+egoAXS8cerYDd2+x8au4IlES5F8qwj+k7aQ9JmZ8i1DU/AMaP6mt cPQTrO8jVRAs0QmJUL2Er1U5+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxv+UN8 Rp58eBYa8Hl6ibMe7IW4MB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1RkIIcNfgSOv6V+QFldeb63V+CjEsjRFKGdkKFIWRDCA2yrOfz7dy 56VZXtdf4MI8/YshAM/F8X4chkHUs0XyAMkDMHflHMmuKs630NboWPZ6d7BuGXju GdNsIInt6O/EkEiHwE9YB1SdEs9BqslgIpfCdpUmLvlzN8Yu31BpudIfSeoZpxrA OqT7WI+szgJnx9SkhXsDY2AeJ1J0kE+Ei0qY/NzRvCUn8unafTpYyUlNgnHsRhku BJoZn6VLtpSH4AgCUj5NT1DbDmtKMclUl/Kt9HK1R/vpAriABmkO3SCOt45w0xA0 Xdz57eFPmEBLkeTCE+GB6I3DfjcTyt5E -----END CERTIFICATE-----Generated at Sun Jul 20 18:22:05 2025 by rpki-client