$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: VLs/wLNAa/bv2VNelZ9OF1ZXwU0Y9gZuEteHip8qwLU= Subject key identifier: BE:E4:11:F9:EF:76:1D:DB:67:9E:A1:9F:13:12:3B:66:44:55:31:66 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 03D1 Signing time: Sun 19 Oct 2025 02:37:25 +0000 Manifest this update: Sun 19 Oct 2025 02:37:24 +0000 Manifest next update: Sun 26 Oct 2025 02:37:24 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: 8oQaK11iZanpEh8WnTx6o8bv0Hwe+4I8x0IsETIF7CU=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Oct 19 02:37:24 2025 GMT Not After : Oct 26 02:37:24 2025 GMT Subject: CN=68f44ee4-1a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:a2:c5:29:ad:62:00:e7:af:fb:3b:ef:ab: df:1a:85:b0:6a:3d:84:8f:b0:3f:e0:c7:82:5d:38: ae:0b:2c:3c:6a:c9:34:a6:2c:8a:c2:37:dd:f9:cb: 52:3b:76:cd:68:40:32:10:a0:ba:15:34:bb:96:dc: 08:e6:48:52:98:37:13:7b:4e:a3:aa:f3:3a:db:6b: 75:27:1e:84:d5:23:9d:14:22:0d:8a:ec:2b:b0:5c: 6b:4e:eb:71:90:94:64:11:81:39:6c:24:9c:18:1b: 21:91:a4:b3:6b:64:bc:92:3b:a1:ba:88:cb:44:a3: 12:3a:7b:ed:b2:e8:b7:8d:b9:d8:49:58:6d:0a:41: 25:e8:6c:6b:c8:e1:17:fc:f6:eb:1c:8a:f6:fe:53: 56:cb:30:29:6e:a6:a1:11:7a:33:8c:04:d4:ae:7f: ca:f8:8b:39:ef:7b:59:68:0f:9f:d8:00:70:c9:8c: ae:9e:ff:15:3a:48:d6:c3:0b:03:f5:2d:79:e9:82: bd:f9:e2:98:eb:f8:39:ce:9d:10:95:c8:14:50:0b: a9:a9:03:f8:18:94:4c:62:40:16:b4:b6:5f:a1:c7: 27:44:f6:10:13:60:f7:b4:87:93:6e:e2:f9:f0:6c: ea:22:03:a7:c8:ef:4e:8b:33:d9:84:7e:aa:3e:de: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E4:11:F9:EF:76:1D:DB:67:9E:A1:9F:13:12:3B:66:44:55:31:66 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:f7:0b:d0:39:c4:91:84:51:2f:40:97:35:a0:68:7f:d1:75: 78:9e:da:c4:c4:4b:5e:e4:d2:04:bf:ac:32:87:e9:ea:03:1a: c0:bf:0b:e9:ef:59:8b:c8:8a:92:5d:96:4a:53:60:de:96:23: 3c:20:66:1e:65:a2:54:9e:22:2f:14:de:d3:ae:ae:40:03:ef: f5:ee:7c:36:7a:f1:8e:5f:5f:3e:e2:3b:9f:68:cf:19:52:c0: ea:d4:2c:e7:3b:90:bb:8e:13:d1:01:ba:5f:52:47:3d:ff:9b: 79:b3:2d:79:04:7b:cb:05:ff:74:62:8e:90:33:e5:6d:a6:d5: f6:47:bc:67:92:92:69:39:60:ba:a9:4d:62:f1:8d:0f:33:69: ef:9d:3e:e5:36:15:90:82:a5:9e:87:bf:7c:c8:fe:86:2b:5c: b2:96:d8:ad:16:d5:11:ef:3a:44:a8:7c:6b:9d:8f:41:ea:da: 67:be:28:71:52:eb:77:6b:54:3d:31:05:02:7b:41:17:8a:f7: 8e:4e:c9:2b:11:27:94:7d:04:8e:a0:be:73:98:b0:14:01:8c: f4:92:f4:c6:5a:8b:c5:22:ac:75:a6:20:9f:34:00:61:f0:a9: dc:26:47:bf:3d:ef:41:91:a5:60:7c:4d:ff:7d:0b:81:1c:b1: 97:cd:2d:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUxMDE5MDIzNzI0WhcNMjUxMDI2MDIzNzI0WjAYMRYwFAYD VQQDEw02OGY0NGVlNC0xYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YKixSmtYgDnr/s776vfGoWwaj2Ej7A/4MeCXTiuCyw8ask0piyKwjfd+ctS O3bNaEAyEKC6FTS7ltwI5khSmDcTe06jqvM622t1Jx6E1SOdFCINiuwrsFxrTutx kJRkEYE5bCScGBshkaSza2S8kjuhuojLRKMSOnvtsui3jbnYSVhtCkEl6GxryOEX /PbrHIr2/lNWyzApbqahEXozjATUrn/K+Is573tZaA+f2ABwyYyunv8VOkjWwwsD 9S156YK9+eKY6/g5zp0QlcgUUAupqQP4GJRMYkAWtLZfoccnRPYQE2D3tIeTbuL5 8GzqIgOnyO9OizPZhH6qPt6FswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7kEfnv dh3bZ56hnxMSO2ZEVTFmMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN9wvQOcSRhFEvQJc1oGh/0XV4ntrExEte5NIEv6wyh+nqAxrAvwvp 71mLyIqSXZZKU2DeliM8IGYeZaJUniIvFN7Trq5AA+/17nw2evGOX18+4jufaM8Z UsDq1CznO5C7jhPRAbpfUkc9/5t5sy15BHvLBf90Yo6QM+VtptX2R7xnkpJpOWC6 qU1i8Y0PM2nvnT7lNhWQgqWeh798yP6GK1yyltitFtUR7zpEqHxrnY9B6tpnvihx Uut3a1Q9MQUCe0EXiveOTskrESeUfQSOoL5zmLAUAYz0kvTGWovFIqx1piCfNABh 8KncJke/Pe9BkaVgfE3/fQuBHLGXzS08 -----END CERTIFICATE-----Generated at Wed Oct 22 10:31:41 2025 by rpki-client