$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: 8p9eKkFO8vnAOvgnoOk2EwP15AQtE/COvjJxbiqCcT0= Subject key identifier: 8D:EF:ED:0B:07:BF:10:AA:7F:5E:AC:43:34:3E:0E:C3:5A:18:D5:AC Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 04AA Signing time: Mon 15 Sep 2025 00:17:08 +0000 Manifest this update: Mon 15 Sep 2025 00:17:07 +0000 Manifest next update: Mon 22 Sep 2025 00:17:07 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: 4Hw69etny+Uy4WHuTA0OkbKXkA9FRzq4+U63JYAbGvo=) 2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=) 3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Sep 15 00:17:07 2025 GMT Not After : Sep 22 00:17:07 2025 GMT Subject: CN=68c75b03-8f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c6:2c:b2:c5:ca:08:42:87:3d:ed:60:ec:de: 24:98:a8:87:97:85:73:9b:b0:f5:9b:9c:0e:19:0a: 5f:ed:9f:bb:ec:07:00:70:55:ce:5f:ec:90:43:1b: a2:7c:fe:7c:97:88:9a:7b:ca:4f:67:61:25:9c:56: d5:c1:9b:96:76:6a:32:53:76:23:47:cc:e4:ab:98: fa:7a:41:95:e9:04:bc:78:9f:23:68:b5:f2:40:b9: fb:2a:07:8c:43:a9:c3:11:5f:4b:86:d1:65:4f:95: 7d:2c:e5:30:a1:8c:74:d7:9e:60:ff:e1:91:bd:7b: b8:02:ed:07:34:04:07:d7:3f:9a:3c:4b:a9:48:85: 4b:5b:93:b6:ab:e2:dc:fb:66:db:45:97:e9:f8:24: aa:c8:40:b5:36:85:14:f7:1f:fc:15:d5:3f:c3:4a: 0c:66:8c:b9:cf:04:66:7f:24:76:8e:08:6d:e4:33: a0:47:77:b2:91:bf:4a:fe:a1:26:18:d9:39:4e:0c: 34:f9:7e:88:b0:33:42:03:bb:62:5c:f6:29:9b:15: 60:64:f0:30:8f:0b:84:fe:9a:77:68:64:24:78:2f: f3:d4:21:c5:60:5e:ed:a4:3f:97:24:a0:a9:a0:80: 8f:60:33:3f:f6:7f:1e:83:45:04:43:08:0e:1b:4e: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EF:ED:0B:07:BF:10:AA:7F:5E:AC:43:34:3E:0E:C3:5A:18:D5:AC X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0e:e7:96:df:d6:9a:de:e1:0f:6f:31:37:c1:9e:ed:2e:c9: 0c:1b:9b:97:b0:62:4d:03:95:15:65:5e:8c:97:b1:ab:47:39: 94:19:cb:64:83:e2:68:a2:aa:31:0b:8b:e5:3b:44:8a:fc:c4: 00:6e:ca:3a:a5:36:a7:23:e7:e3:85:44:90:fb:c9:d1:c8:2f: 42:2b:9a:fa:fc:26:ce:bb:b3:fd:38:2f:c9:92:be:1f:5c:a9: 37:bb:39:b9:c5:99:c9:4e:a6:de:52:ef:fa:40:89:8b:c4:b5: f9:9c:13:3f:7c:cd:0d:4c:06:57:c6:3d:c1:c1:ae:86:cf:44: 90:4c:77:01:cb:b9:3c:1c:2e:ef:4b:22:14:a4:86:71:ef:8e: 80:65:36:6c:4c:e1:5c:29:42:1a:88:68:35:3f:0c:2c:a0:f4: 25:fb:36:d8:89:90:85:d0:db:10:5a:8a:40:29:21:85:44:54: 27:f0:c4:39:2f:04:b8:e0:9d:fb:26:73:b7:c6:1d:7e:e9:51: 62:d3:f7:ff:5f:c7:1e:cc:ab:65:63:b1:95:93:80:b5:57:c5: f3:a3:fb:df:b5:ed:cd:e9:8b:85:3e:02:11:07:dc:b6:4d:09: 96:f6:9a:63:d8:2e:81:5e:74:37:bd:15:b7:a9:08:fc:97:3e: 4f:7b:f9:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUwOTE1MDAxNzA3WhcNMjUwOTIyMDAxNzA3WjAYMRYwFAYD VQQDEw02OGM3NWIwMy04ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cYsssXKCEKHPe1g7N4kmKiHl4Vzm7D1m5wOGQpf7Z+77AcAcFXOX+yQQxui fP58l4iae8pPZ2ElnFbVwZuWdmoyU3YjR8zkq5j6ekGV6QS8eJ8jaLXyQLn7KgeM Q6nDEV9LhtFlT5V9LOUwoYx0155g/+GRvXu4Au0HNAQH1z+aPEupSIVLW5O2q+Lc +2bbRZfp+CSqyEC1NoUU9x/8FdU/w0oMZoy5zwRmfyR2jght5DOgR3eykb9K/qEm GNk5Tgw0+X6IsDNCA7tiXPYpmxVgZPAwjwuE/pp3aGQkeC/z1CHFYF7tpD+XJKCp oICPYDM/9n8eg0UEQwgOG062OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3v7QsH vxCqf16sQzQ+DsNaGNWsMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJDueW39aa3uEPbzE3wZ7tLskMG5uXsGJNA5UVZV6Ml7GrRzmUGctk g+JooqoxC4vlO0SK/MQAbso6pTanI+fjhUSQ+8nRyC9CK5r6/CbOu7P9OC/Jkr4f XKk3uzm5xZnJTqbeUu/6QImLxLX5nBM/fM0NTAZXxj3Bwa6Gz0SQTHcBy7k8HC7v SyIUpIZx746AZTZsTOFcKUIaiGg1PwwsoPQl+zbYiZCF0NsQWopAKSGFRFQn8MQ5 LwS44J37JnO3xh1+6VFi0/f/X8cezKtlY7GVk4C1V8Xzo/vfte3N6YuFPgIRB9y2 TQmW9ppj2C6BXnQ3vRW3qQj8lz5Pe/ki -----END CERTIFICATE-----Generated at Tue Sep 16 19:15:08 2025 by rpki-client