$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: 1VwIhkJdAmcoUSe0kHVI50Lcc3lJLNlHABwHtCu+iHk= Subject key identifier: B4:7E:B2:8C:D7:1B:1A:7A:70:20:AA:5A:1C:34:6D:F4:F4:50:E5:FC Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 0389 Signing time: Sat 31 May 2025 01:04:26 +0000 Manifest this update: Sat 31 May 2025 01:04:26 +0000 Manifest next update: Sat 07 Jun 2025 01:04:26 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: LX3uFr3grOxS2Wze9G8SgGaXpOMZe0nUzo8gut1ndPU=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: May 31 01:04:26 2025 GMT Not After : Jun 7 01:04:26 2025 GMT Subject: CN=683a559a-9b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:e7:ce:81:7d:8c:fd:d1:6b:8c:66:2e:83: e0:bf:0c:b8:55:a3:e6:29:7a:f3:c6:10:18:1f:bb: 2a:04:ed:1f:93:8f:0a:bc:ec:35:5c:ad:db:4a:fd: 5e:e4:a4:3e:d4:81:fc:99:33:48:b3:73:97:27:4b: 31:45:a9:1e:0e:48:e2:9b:9c:4f:3f:7c:34:c4:82: 81:87:85:93:44:ff:4e:a8:96:2a:15:79:4b:3c:d9: 32:d5:e2:58:93:fc:6a:d1:28:eb:68:c9:3e:68:ad: 1a:65:41:8b:9b:19:5b:c1:fa:44:b3:36:f2:a3:2d: bc:a9:68:a1:d8:14:ed:23:c5:6a:2a:ad:9f:7a:7e: b2:8f:b9:8c:b4:8b:24:06:cd:24:07:49:5f:20:32: f9:bf:9f:9e:ab:b7:35:42:88:d8:aa:4d:01:ff:8d: 96:d4:1a:4a:48:76:5e:d0:08:35:43:48:4a:32:ea: f5:f7:56:53:dd:0b:b6:c6:af:12:5d:27:e1:95:ab: 6c:ca:2a:33:42:3a:3b:3d:d3:8b:5d:0a:de:0c:29: 03:0c:83:12:a8:5b:ce:29:b1:88:fc:bc:95:8f:1e: 27:08:41:ba:8d:d1:24:8b:7d:2a:77:82:32:e5:ab: 53:94:df:6c:cb:21:73:dd:f4:d7:91:47:d6:46:fd: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7E:B2:8C:D7:1B:1A:7A:70:20:AA:5A:1C:34:6D:F4:F4:50:E5:FC X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:1a:b3:f7:2a:fd:0c:b8:8b:05:f2:15:02:2e:7a:32:a9: 24:dd:0d:e2:35:45:1c:ae:f5:d4:eb:6d:2e:cc:c4:02:56:95: a8:0e:d2:4d:cf:d9:0a:15:08:aa:a0:b3:db:0d:86:7c:5a:2e: 49:47:d0:6f:19:84:c0:dc:b4:72:c6:d5:e9:8b:0e:db:17:03: 0e:f5:c3:30:3f:cc:98:0a:fa:1c:0c:f7:5c:bc:41:82:c7:23: 03:c7:a7:20:eb:c0:65:da:db:18:20:51:7f:da:78:74:34:d6: 47:3f:61:0d:a0:2a:a8:1c:65:44:8d:c4:af:c5:60:df:bf:c8: 83:76:33:8a:d3:e4:16:02:b9:39:ba:42:8d:1f:ef:f9:b4:40: e5:0a:ec:1f:12:4e:ac:d4:07:64:1f:2c:19:0f:4b:4f:f6:2b: 67:ba:c8:87:51:a8:63:f5:96:07:af:da:0c:d0:4c:e3:7a:41: 96:ef:c2:fc:28:3a:07:34:68:8c:56:0d:11:e0:55:d2:3c:6b: 63:7b:4f:04:16:ba:f0:e5:17:87:3d:87:1f:86:4e:69:ed:0e: e3:ca:66:e0:84:d9:99:7d:9b:a7:5c:f0:6c:08:ab:ae:de:54: 8d:73:76:c1:4c:c9:7d:f6:cf:89:81:0d:99:5c:53:d6:3a:80: 7b:18:f3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwNTMxMDEwNDI2WhcNMjUwNjA3MDEwNDI2WjAYMRYwFAYD VQQDEw02ODNhNTU5YS05YjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wbnzoF9jP3Ra4xmLoPgvwy4VaPmKXrzxhAYH7sqBO0fk48KvOw1XK3bSv1e 5KQ+1IH8mTNIs3OXJ0sxRakeDkjim5xPP3w0xIKBh4WTRP9OqJYqFXlLPNky1eJY k/xq0SjraMk+aK0aZUGLmxlbwfpEszbyoy28qWih2BTtI8VqKq2fen6yj7mMtIsk Bs0kB0lfIDL5v5+eq7c1QojYqk0B/42W1BpKSHZe0Ag1Q0hKMur191ZT3Qu2xq8S XSfhlatsyiozQjo7PdOLXQreDCkDDIMSqFvOKbGI/LyVjx4nCEG6jdEki30qd4Iy 5atTlN9syyFz3fTXkUfWRv27kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLR+sozX Gxp6cCCqWhw0bfT0UOX8MB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcDRqz9yr9DLiLBfIVAi56Mqkk3Q3iNUUcrvXU620uzMQCVpWoDtJN z9kKFQiqoLPbDYZ8Wi5JR9BvGYTA3LRyxtXpiw7bFwMO9cMwP8yYCvocDPdcvEGC xyMDx6cg68Bl2tsYIFF/2nh0NNZHP2ENoCqoHGVEjcSvxWDfv8iDdjOK0+QWArk5 ukKNH+/5tEDlCuwfEk6s1AdkHywZD0tP9itnusiHUahj9ZYHr9oM0EzjekGW78L8 KDoHNGiMVg0R4FXSPGtje08EFrrw5ReHPYcfhk5p7Q7jymbghNmZfZunXPBsCKuu 3lSNc3bBTMl99s+JgQ2ZXFPWOoB7GPPy -----END CERTIFICATE-----Generated at Sat May 31 17:17:32 2025 by rpki-client