$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: BCeW3uQfOf3EQXVCOLds0qWnpvUQrGqzKZ10e51QHZ4= Subject key identifier: E1:70:B5:7C:7F:28:38:8A:0A:18:59:65:4A:D5:FD:90:01:24:B3:77 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0476 Signing time: Wed 04 Jun 2025 23:57:59 +0000 Manifest this update: Wed 04 Jun 2025 23:57:58 +0000 Manifest next update: Wed 11 Jun 2025 23:57:58 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: iCzmkfWSD45oJIqm+dxAcnsGelKSkNt56exUSwaSAHM=) 2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=) 3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Jun 4 23:57:58 2025 GMT Not After : Jun 11 23:57:58 2025 GMT Subject: CN=6840dd86-3703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:83:7a:3a:72:20:a3:1b:5f:1a:14:ee:36: 03:bd:60:cf:ce:16:b5:e5:88:14:d9:10:d0:4d:76: 82:f0:f6:22:f4:3c:a1:bd:ac:3b:0c:5d:df:da:fd: be:2f:92:2b:06:8b:0b:38:7c:1d:a4:d8:0c:d4:cc: 61:4a:39:41:c7:8c:dc:ee:34:77:9e:df:d3:00:ee: e8:c1:0f:5a:d1:64:d2:07:b6:0e:ad:8c:99:b0:d9: 4a:9c:79:55:1c:f1:52:a0:38:d7:81:4b:63:ce:4b: ce:74:72:14:c6:53:ce:7b:2f:8b:89:7d:f0:c3:7c: c8:09:31:8e:bc:b0:6a:29:67:d2:1a:45:3c:96:3a: ee:70:76:59:34:67:1b:72:97:ee:9b:53:57:be:ad: 44:c9:0a:6e:0b:e7:15:5d:ea:47:62:bb:51:50:26: 80:52:97:4b:1e:d0:f5:dc:82:04:06:dc:48:57:e9: 57:c0:d3:1a:46:c1:ef:28:55:6d:bf:15:cf:e6:34: b3:fb:0e:cd:ff:19:d0:ba:f2:df:05:30:48:0c:dc: 09:aa:72:d4:69:59:02:eb:a4:9c:bc:5b:5f:3f:7e: 59:d9:77:58:eb:92:51:09:de:d1:bd:80:49:2a:50: 3c:97:eb:c8:19:ca:fd:46:fe:27:7a:61:22:62:59: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:70:B5:7C:7F:28:38:8A:0A:18:59:65:4A:D5:FD:90:01:24:B3:77 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:aa:81:4b:b0:f0:a1:30:6d:81:22:3c:f1:08:e2:5f:af:58: ea:80:77:6b:81:01:0b:65:00:ae:2d:d0:83:a7:ee:eb:3f:80: f7:a0:f3:31:87:f6:43:5f:44:99:dd:1f:d7:a1:a4:5f:72:7e: 8e:91:63:d7:1e:c2:56:59:a8:36:ed:1f:0b:c7:c0:0a:82:14: a2:e9:c6:9b:c4:5e:11:6d:38:f7:c1:12:16:80:0c:e8:65:b3: 4c:a9:12:7c:e2:1c:a2:35:8b:d2:5e:84:26:f4:ce:f3:f9:fc: 79:3b:b3:91:60:ca:84:5c:88:5a:c0:bc:c9:d1:97:55:be:58: 02:d6:e8:f7:61:31:9c:2f:f8:14:cb:1d:d7:67:55:d8:c7:86: fb:81:7b:77:35:b6:74:e7:24:79:43:66:5b:13:07:1b:37:df: 9c:9b:09:1f:75:d5:16:bc:1d:e0:3d:98:f7:85:e6:5a:83:b4: 4d:79:bc:08:35:19:50:29:1d:68:22:c7:77:aa:57:28:af:0f: 5f:29:a2:a1:05:7e:32:a1:de:66:1d:8c:12:12:20:4a:a8:2b: 3b:4f:b9:a0:6e:cc:5f:9a:e7:fd:2f:5b:a6:1f:b3:89:20:88: 80:98:5e:7a:9b:9b:fa:2d:68:3a:27:6a:07:7b:16:c0:47:bd: a7:4e:84:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUwNjA0MjM1NzU4WhcNMjUwNjExMjM1NzU4WjAYMRYwFAYD VQQDEw02ODQwZGQ4Ni0zNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMKDejpyIKMbXxoU7jYDvWDPzha15YgU2RDQTXaC8PYi9Dyhvaw7DF3f2v2+ L5IrBosLOHwdpNgM1MxhSjlBx4zc7jR3nt/TAO7owQ9a0WTSB7YOrYyZsNlKnHlV HPFSoDjXgUtjzkvOdHIUxlPOey+LiX3ww3zICTGOvLBqKWfSGkU8ljrucHZZNGcb cpfum1NXvq1EyQpuC+cVXepHYrtRUCaAUpdLHtD13IIEBtxIV+lXwNMaRsHvKFVt vxXP5jSz+w7N/xnQuvLfBTBIDNwJqnLUaVkC66ScvFtfP35Z2XdY65JRCd7RvYBJ KlA8l+vIGcr9Rv4nemEiYlk2XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFwtXx/ KDiKChhZZUrV/ZABJLN3MB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBqoFLsPChMG2BIjzxCOJfr1jqgHdrgQELZQCuLdCDp+7rP4D3oPMx h/ZDX0SZ3R/XoaRfcn6OkWPXHsJWWag27R8Lx8AKghSi6cabxF4RbTj3wRIWgAzo ZbNMqRJ84hyiNYvSXoQm9M7z+fx5O7ORYMqEXIhawLzJ0ZdVvlgC1uj3YTGcL/gU yx3XZ1XYx4b7gXt3NbZ05yR5Q2ZbEwcbN9+cmwkfddUWvB3gPZj3heZag7RNebwI NRlQKR1oIsd3qlcorw9fKaKhBX4yod5mHYwSEiBKqCs7T7mgbsxfmuf9L1umH7OJ IIiAmF56m5v6LWg6J2oHexbAR72nToRm -----END CERTIFICATE-----Generated at Fri Jun 6 12:40:04 2025 by rpki-client