$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: QqUeI5rxAqb5AEZqNYUauing0voesd34vNZvOz5I8+g= Subject key identifier: 7D:36:6E:20:49:A4:3C:33:72:4D:B8:CA:5D:11:70:5C:DA:28:4E:3C Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0C6D Signing time: Sun 20 Jul 2025 18:23:53 +0000 Manifest this update: Sun 20 Jul 2025 18:23:53 +0000 Manifest next update: Sun 27 Jul 2025 18:23:53 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: ZydZJpxG6AjXGMW8c2XN5eUngAwTRcATlDHZc3LHzTc=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: L3QtLlUYOp97S+0J2ZEUAV9V2aNzWM2GyLPcyzG+Vzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Jul 20 18:23:53 2025 GMT Not After : Jul 27 18:23:53 2025 GMT Subject: CN=687d3439-743f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:54:8e:26:f3:28:ae:0e:56:64:49:39:cd: 75:f0:08:2d:23:36:27:d4:f0:e1:fb:de:5e:5e:0c: 9f:69:30:53:90:89:5e:a8:f4:ef:9b:c7:cd:9a:dc: 60:0d:58:04:4c:df:68:c3:92:5e:1b:37:fc:b7:ae: ef:4a:96:f0:5d:14:1d:31:9d:f9:88:af:a8:3f:56: 10:ab:df:f6:4f:97:54:88:21:37:bf:1a:36:bd:44: 38:26:8e:e9:34:e9:1d:4b:2b:8f:4b:f8:6b:34:13: 2b:7c:b0:57:fe:bd:04:0d:9c:b0:8a:7c:14:91:9e: 96:d8:2b:41:e0:32:1c:7f:72:9b:8a:2a:f5:7e:42: 46:e6:f0:97:91:f3:8f:86:6b:19:78:67:2b:a3:fb: d6:ba:62:c5:bb:62:e2:19:e4:ae:9a:16:08:e4:21: 33:c7:e4:41:d5:b6:e3:89:87:30:86:3a:42:01:6d: be:ef:14:5f:40:f4:e0:0d:f1:1d:ca:15:16:78:ae: b7:9f:bb:2f:8d:8d:2e:6f:8a:9b:74:07:44:8a:9e: 97:ee:b2:d7:ad:cc:20:f9:a1:02:f5:67:85:77:70: bc:e3:62:79:89:69:e7:39:87:1f:e1:a5:de:a7:19: fa:e2:28:14:6b:f1:9d:73:be:53:13:a3:9d:7f:ce: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:36:6E:20:49:A4:3C:33:72:4D:B8:CA:5D:11:70:5C:DA:28:4E:3C X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ed:3c:5a:98:94:56:26:04:2b:8c:63:80:23:7a:eb:5d:3d: c5:de:0d:ad:67:8e:15:0c:5b:53:ac:9f:7e:94:79:7b:65:53: b1:2b:33:db:b5:97:90:64:59:e5:c4:b4:bd:f6:70:c3:b4:c2: 53:ec:da:e5:9f:f2:64:90:75:79:00:7b:8c:6f:c7:ec:43:35: 0c:73:23:71:40:45:98:1e:25:57:a8:86:ea:95:47:eb:27:64: 49:a0:54:da:60:7d:00:9e:75:06:e4:a0:3f:26:5f:85:82:d9: 7b:7b:4b:28:b5:2f:d7:e4:ef:a8:cb:a2:a8:22:9f:3b:ac:a1: cb:0f:b0:aa:97:29:36:6c:48:75:5b:16:b5:17:40:96:ba:08: c1:db:e6:38:4a:e6:26:da:e3:12:d9:4c:91:f0:01:6c:56:30: 25:2b:c5:d9:19:a8:01:10:5a:4a:7f:27:7c:97:d0:e7:3d:38: aa:c6:77:b4:7b:12:f4:37:0c:5a:a2:9d:06:09:bb:14:a8:5a: 85:c2:77:4a:02:3c:b4:05:0a:46:28:5c:66:90:ec:6a:64:61: 45:fc:0b:e2:b2:af:a6:61:65:0c:96:fc:9c:8a:4a:bd:10:78: 44:eb:2d:05:fe:f6:67:5d:ce:72:84:ba:75:b2:eb:a6:df:b1: 3d:3d:36:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjUwNzIwMTgyMzUzWhcNMjUwNzI3MTgyMzUzWjAYMRYwFAYD VQQDEw02ODdkMzQzOS03NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn9UjibzKK4OVmRJOc118AgtIzYn1PDh+95eXgyfaTBTkIleqPTvm8fNmtxg DVgETN9ow5JeGzf8t67vSpbwXRQdMZ35iK+oP1YQq9/2T5dUiCE3vxo2vUQ4Jo7p NOkdSyuPS/hrNBMrfLBX/r0EDZywinwUkZ6W2CtB4DIcf3Kbiir1fkJG5vCXkfOP hmsZeGcro/vWumLFu2LiGeSumhYI5CEzx+RB1bbjiYcwhjpCAW2+7xRfQPTgDfEd yhUWeK63n7svjY0ub4qbdAdEip6X7rLXrcwg+aEC9WeFd3C842J5iWnnOYcf4aXe pxn64igUa/Gdc75TE6Odf84ngwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH02biBJ pDwzck24yl0RcFzaKE48MB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS7TxamJRWJgQrjGOAI3rrXT3F3g2tZ44VDFtTrJ9+lHl7ZVOxKzPb tZeQZFnlxLS99nDDtMJT7Nrln/JkkHV5AHuMb8fsQzUMcyNxQEWYHiVXqIbqlUfr J2RJoFTaYH0AnnUG5KA/Jl+Fgtl7e0sotS/X5O+oy6KoIp87rKHLD7Cqlyk2bEh1 Wxa1F0CWugjB2+Y4SuYm2uMS2UyR8AFsVjAlK8XZGagBEFpKfyd8l9DnPTiqxne0 exL0Nwxaop0GCbsUqFqFwndKAjy0BQpGKFxmkOxqZGFF/Avisq+mYWUMlvycikq9 EHhE6y0F/vZnXc5yhLp1suum37E9PTY3 -----END CERTIFICATE-----Generated at Mon Jul 21 13:23:44 2025 by rpki-client