$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: JhnLw/FROc3OXUUnyatyu+X9Y7h/S7GQjb6tYs+/oTE= Subject key identifier: FA:4A:C0:72:92:B9:81:B1:5C:7A:CA:52:08:AF:AC:A2:B2:1A:1A:1D Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 03BB Signing time: Fri 05 Sep 2025 01:02:36 +0000 Manifest this update: Fri 05 Sep 2025 01:02:35 +0000 Manifest next update: Fri 12 Sep 2025 01:02:35 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: tSjksH/SZP3pHc6OyL3f9d+PRzi7vxScoMbIH3OszbY=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Sep 5 01:02:35 2025 GMT Not After : Sep 12 01:02:35 2025 GMT Subject: CN=68ba36ab-a9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:bf:fe:90:5d:4c:dc:12:cf:cf:1d:d1:1f: bc:70:e0:a0:69:a8:5b:3c:2b:f2:3b:0f:57:2d:ca: 96:a6:4f:28:2c:35:2b:ed:d9:6f:a7:05:88:71:50: 2a:08:ae:70:5e:97:04:7e:a3:5a:c5:56:6e:de:67: b8:fd:24:e1:98:43:33:b1:82:7e:02:39:01:3e:a8: 64:8e:ac:48:3c:bb:7b:7d:89:17:6c:7b:82:aa:c7: 8d:db:da:55:c5:f1:4f:71:fd:10:1b:cd:68:d9:bb: e6:af:6a:37:52:1e:50:73:79:7f:99:7c:84:89:b0: 62:e9:3b:50:14:e2:99:9f:16:2c:26:e9:27:fe:99: 71:81:bc:d4:6a:c1:77:62:4b:cb:41:36:72:c0:12: c6:93:ff:e2:0a:31:e5:6b:84:8d:d9:3c:7d:f4:12: 15:0a:d4:b2:d7:4a:f8:ec:52:4c:17:c6:f0:ce:82: 41:19:5f:5d:21:ba:95:45:ef:bb:7f:6c:ac:c6:23: 9e:f5:aa:7f:81:56:2d:14:e9:3e:de:1b:84:4f:ba: 86:eb:10:bd:eb:ed:b5:a7:72:b5:32:1f:79:e0:97: 2c:cd:2b:b0:e7:37:d0:22:e1:f7:9c:d8:74:b7:06: 10:bb:66:89:8d:3a:11:be:00:08:e2:5f:cc:f3:8b: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:C0:72:92:B9:81:B1:5C:7A:CA:52:08:AF:AC:A2:B2:1A:1A:1D X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cf:1a:52:54:c0:6e:f1:28:c7:ef:64:53:94:75:ee:84:1e: 45:f4:8a:3a:d6:91:9f:99:29:13:50:7d:8f:bc:c4:ca:d7:b3: ec:1d:84:56:4b:63:68:40:88:2a:c5:0d:b9:16:d1:b6:ae:33: 0b:c6:ef:c4:12:d9:b7:60:85:a5:f0:14:8c:a2:99:c2:b8:5b: 7c:81:01:45:b3:04:3f:e0:b6:53:3d:45:c7:37:8e:3f:0c:1b: 38:57:90:9f:71:6c:13:04:08:bc:4b:c7:62:3e:2c:e0:6c:3a: 75:e8:68:7a:46:37:39:9f:d0:52:c9:aa:c7:68:3e:c9:50:20: cc:51:5d:ed:54:39:a9:6b:f1:4d:3e:88:ae:33:f4:fe:f2:12: 09:60:d3:be:73:1b:74:48:41:09:b1:db:04:8a:8a:94:f7:28: ae:35:6c:2f:61:51:ac:cc:7e:e4:09:7a:03:b2:fd:c4:1a:70: b5:d5:d8:5a:fe:1b:c2:58:7e:30:fb:ef:8d:d7:b1:1c:ba:04: d2:4f:93:c7:ab:5f:84:7f:24:77:76:4a:79:75:7e:af:9d:c5: 3b:c7:36:12:bb:5d:ac:77:08:b5:a7:0c:e6:0f:ae:5d:aa:4f: 2b:e9:a3:23:9a:1d:86:49:8b:31:50:93:dd:07:4d:cf:d1:4a: 51:9b:3e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwOTA1MDEwMjM1WhcNMjUwOTEyMDEwMjM1WjAYMRYwFAYD VQQDEw02OGJhMzZhYi1hOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIC//pBdTNwSz88d0R+8cOCgaahbPCvyOw9XLcqWpk8oLDUr7dlvpwWIcVAq CK5wXpcEfqNaxVZu3me4/SThmEMzsYJ+AjkBPqhkjqxIPLt7fYkXbHuCqseN29pV xfFPcf0QG81o2bvmr2o3Uh5Qc3l/mXyEibBi6TtQFOKZnxYsJukn/plxgbzUasF3 YkvLQTZywBLGk//iCjHla4SN2Tx99BIVCtSy10r47FJMF8bwzoJBGV9dIbqVRe+7 f2ysxiOe9ap/gVYtFOk+3huET7qG6xC96+21p3K1Mh954JcszSuw5zfQIuH3nNh0 twYQu2aJjToRvgAI4l/M84uHqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpKwHKS uYGxXHrKUgivrKKyGhodMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmzxpSVMBu8SjH72RTlHXuhB5F9Io61pGfmSkTUH2PvMTK17PsHYRW S2NoQIgqxQ25FtG2rjMLxu/EEtm3YIWl8BSMopnCuFt8gQFFswQ/4LZTPUXHN44/ DBs4V5CfcWwTBAi8S8diPizgbDp16Gh6Rjc5n9BSyarHaD7JUCDMUV3tVDmpa/FN PoiuM/T+8hIJYNO+cxt0SEEJsdsEioqU9yiuNWwvYVGszH7kCXoDsv3EGnC11dha /hvCWH4w+++N17EcugTST5PHq1+EfyR3dkp5dX6vncU7xzYSu12sdwi1pwzmD65d qk8r6aMjmh2GSYsxUJPdB03P0UpRmz4G -----END CERTIFICATE-----Generated at Sat Sep 6 07:04:31 2025 by rpki-client