$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: /M7Sz7o7OdhYB7NuUZqd16va8I5y6MdTyQiqZgX+n08= Subject key identifier: 9D:4A:03:C3:7C:9D:15:D6:94:79:93:A9:08:8C:7A:DC:B3:79:C5:C5 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A63 Signing time: Sat 06 Sep 2025 19:53:25 +0000 Manifest this update: Sat 06 Sep 2025 19:53:24 +0000 Manifest next update: Sat 13 Sep 2025 19:53:24 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: 3dmf1e8xoNyEGNDjbvS6Dtf0e1d9+ggtPeSXlrBDDxY=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Sep 6 19:53:24 2025 GMT Not After : Sep 13 19:53:24 2025 GMT Subject: CN=68bc9134-135d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:d6:3c:fc:b7:5a:4c:66:fc:0b:66:cb:2f: 13:0c:fe:ac:6b:48:95:47:10:96:88:fd:f8:36:41: b9:c0:40:13:ad:49:ed:8d:c2:0e:27:64:84:ef:59: 9d:66:57:7f:c7:8f:6c:e1:a8:63:3c:a3:29:c7:d1: c4:c6:6e:12:cb:bf:dc:2c:93:8a:4d:df:e1:85:8d: 4f:17:64:0e:2f:cb:11:98:53:c6:0f:d3:73:c9:c3: 5f:c2:25:49:b4:03:30:c4:ee:5c:87:9e:0e:0a:10: 88:0c:ab:ef:14:41:f1:b2:cc:69:59:ef:cb:cf:80: f5:18:4b:36:c2:30:fd:b6:40:68:64:63:fa:83:16: 5a:e7:ba:b2:5f:af:3c:86:c0:04:df:7b:56:12:3e: cd:d6:a7:ca:f9:03:06:cc:25:1a:c2:08:8d:78:d9: 65:53:93:93:83:67:2a:05:cf:2c:c5:39:ba:d5:40: 9e:04:43:ac:d2:c7:02:aa:6d:b3:4d:0b:de:f0:85: 08:fc:b0:46:98:5e:f0:35:74:5b:e6:ca:79:e1:aa: 69:49:95:53:c5:b7:18:4f:6e:63:23:9e:ba:a2:5f: 6d:4d:12:f8:8b:8f:74:1c:3b:86:29:d3:f9:17:24: 90:f2:08:0e:e8:89:27:13:80:56:e2:01:a8:ec:75: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4A:03:C3:7C:9D:15:D6:94:79:93:A9:08:8C:7A:DC:B3:79:C5:C5 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:20:13:1c:a3:62:89:a2:51:fb:06:63:03:8b:8b:41:91:1f: 55:71:3f:c8:87:b2:bb:6e:2c:8d:2a:5d:a0:da:d8:56:40:6f: ea:3a:e5:67:8a:8d:a1:cb:bb:86:0b:cf:c2:29:95:97:ac:17: 59:73:21:aa:53:96:30:32:35:57:a1:f6:44:7b:b7:19:c8:08: 4d:2b:bd:1a:4e:0a:3a:85:c5:b6:06:ed:91:0f:62:69:f1:56: e1:5d:e6:21:cc:dd:04:14:4d:22:da:77:5f:58:e4:f4:de:ff: f2:c9:d8:a0:3a:00:37:f5:97:08:ce:c9:c8:56:7d:97:e9:5e: 5b:58:7f:e3:f9:02:fe:69:b1:48:92:bf:8d:e4:a0:cc:11:e1: 6c:b8:b4:53:c2:a8:85:3a:55:41:37:d8:a8:9e:a2:33:df:22: 82:a3:db:9b:93:cc:4e:97:17:b7:22:d4:b3:2e:44:3a:f5:f5: c9:1e:a1:e3:ca:48:c5:bc:e3:c9:b1:f1:29:8c:68:16:db:9a: b9:e1:8c:6a:4c:aa:5a:c1:19:9a:f6:0a:a6:d0:ff:6e:64:f5: 56:11:0b:03:be:ec:90:ab:b6:72:48:cc:7d:57:6e:ca:a8:3a: db:ed:80:a8:d1:9d:45:f7:a8:5f:eb:af:18:58:58:7a:f2:84: 30:d8:86:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUwOTA2MTk1MzI0WhcNMjUwOTEzMTk1MzI0WjAYMRYwFAYD VQQDEw02OGJjOTEzNC0xMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvETWPPy3Wkxm/Atmyy8TDP6sa0iVRxCWiP34NkG5wEATrUntjcIOJ2SE71md Zld/x49s4ahjPKMpx9HExm4Sy7/cLJOKTd/hhY1PF2QOL8sRmFPGD9NzycNfwiVJ tAMwxO5ch54OChCIDKvvFEHxssxpWe/Lz4D1GEs2wjD9tkBoZGP6gxZa57qyX688 hsAE33tWEj7N1qfK+QMGzCUawgiNeNllU5OTg2cqBc8sxTm61UCeBEOs0scCqm2z TQve8IUI/LBGmF7wNXRb5sp54appSZVTxbcYT25jI566ol9tTRL4i490HDuGKdP5 FySQ8ggO6IknE4BW4gGo7HVovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1KA8N8 nRXWlHmTqQiMetyzecXFMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfIBMco2KJolH7BmMDi4tBkR9VcT/Ih7K7biyNKl2g2thWQG/qOuVn io2hy7uGC8/CKZWXrBdZcyGqU5YwMjVXofZEe7cZyAhNK70aTgo6hcW2Bu2RD2Jp 8VbhXeYhzN0EFE0i2ndfWOT03v/yydigOgA39ZcIzsnIVn2X6V5bWH/j+QL+abFI kr+N5KDMEeFsuLRTwqiFOlVBN9ionqIz3yKCo9ubk8xOlxe3ItSzLkQ69fXJHqHj ykjFvOPJsfEpjGgW25q54YxqTKpawRma9gqm0P9uZPVWEQsDvuyQq7ZySMx9V27K qDrb7YCo0Z1F96hf668YWFh68oQw2IYt -----END CERTIFICATE-----Generated at Mon Sep 8 14:33:54 2025 by rpki-client