$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: VzqmClH5hwectEO6xpEg8nMRr/m16UmQPc6h+lV0/iw= Subject key identifier: 56:06:35:5E:8D:89:27:D8:46:47:25:EA:7B:4C:00:10:E3:FB:34:F0 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 0200 Signing time: Thu 21 Aug 2025 02:32:54 +0000 Manifest this update: Thu 21 Aug 2025 02:32:54 +0000 Manifest next update: Thu 28 Aug 2025 02:32:54 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: kMSaHsT42jUkFr4rtWe7gpAkrDvqZrf1shJvfrthBAM=) 2: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (hash: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Aug 21 02:32:54 2025 GMT Not After : Aug 28 02:32:54 2025 GMT Subject: CN=68a68556-d853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:b9:b4:90:b9:0b:5e:71:12:1f:85:04:35: 63:72:40:08:05:f5:ba:27:18:6c:d5:9a:6b:8c:90: 59:e2:d8:73:52:8a:cf:00:a8:1a:b5:c0:77:37:6b: 1e:26:9b:69:8f:0c:f1:3c:60:68:5c:42:60:7b:a3: ac:fb:2f:6f:49:a4:15:33:0e:8b:b9:59:80:89:ed: 1a:46:89:7c:9a:a6:0a:17:a6:97:e5:e6:aa:55:d7: 3a:dc:92:ad:6e:54:ad:21:af:dc:28:6d:cb:9a:d9: d1:ec:4a:55:c1:d4:f0:d6:6b:85:94:12:78:0e:40: 68:43:f4:a8:0a:39:51:c5:99:66:25:87:7c:5f:b9: 1c:66:2a:55:a5:c8:29:49:8f:a2:04:f5:bf:00:f2: 30:24:ed:62:e9:74:ea:d9:89:5b:ba:37:6e:38:2d: 40:59:3f:ee:b3:67:a7:4f:a9:0f:01:57:67:6b:18: 81:eb:1f:9a:81:0d:6c:33:a7:06:40:c4:a5:b6:13: 28:6d:08:98:e0:59:ca:a7:45:45:35:c0:65:a8:f6: 50:36:d1:3f:ca:bd:a9:9c:5c:6a:fb:6d:9c:24:88: 85:a6:3c:9a:eb:45:f5:6c:3d:62:82:55:6f:5c:36: c5:96:f9:0b:d2:87:0e:e1:66:c9:fc:b3:f4:6d:cb: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:06:35:5E:8D:89:27:D8:46:47:25:EA:7B:4C:00:10:E3:FB:34:F0 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:cd:cd:6c:f9:b7:fd:08:ec:d8:30:d0:4d:2f:45:29:90:eb: d4:47:58:e6:88:df:e7:43:17:3d:cc:c5:3a:04:39:38:3e:f0: 73:00:07:f3:d5:ec:ef:31:96:f3:86:b8:eb:4e:a1:b7:2a:8c: 83:9e:9e:a3:8a:df:9e:5f:ad:65:87:31:cf:da:8d:9a:fe:a2: 72:08:26:be:35:bd:f0:7c:b1:3d:55:22:4f:bb:88:ee:ad:70: 79:74:cc:8e:27:a9:90:d0:2b:ef:2d:13:3f:cc:a0:39:ac:e5: 75:37:a8:6d:bb:7d:12:02:f6:40:a1:a9:73:33:73:bb:4a:7e: 72:6f:93:e9:7e:b0:71:af:dc:fa:eb:00:af:3d:58:5c:fe:15: f7:6e:15:c2:c0:58:18:00:23:a8:4b:6b:28:e3:7c:39:0d:dd: 7c:0a:7c:df:01:65:3d:a9:e8:b3:39:64:7b:c1:00:6c:98:04: 46:c0:ae:c5:3e:3f:4a:f2:3a:28:b4:76:ce:24:d5:41:8f:4d: 7f:49:e6:6a:2e:98:9f:71:ef:4f:30:6f:29:78:ba:b1:36:04: 04:e9:f4:b4:41:02:70:2b:91:72:fe:c5:69:be:39:25:02:92: 9f:4e:22:ce:5a:3f:68:38:d3:8d:7e:ef:0e:f7:e0:01:1b:15: 78:fe:dc:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUwODIxMDIzMjU0WhcNMjUwODI4MDIzMjU0WjAYMRYwFAYD VQQDEw02OGE2ODU1Ni1kODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QG5tJC5C15xEh+FBDVjckAIBfW6Jxhs1ZprjJBZ4thzUorPAKgatcB3N2se JptpjwzxPGBoXEJge6Os+y9vSaQVMw6LuVmAie0aRol8mqYKF6aX5eaqVdc63JKt blStIa/cKG3LmtnR7EpVwdTw1muFlBJ4DkBoQ/SoCjlRxZlmJYd8X7kcZipVpcgp SY+iBPW/APIwJO1i6XTq2YlbujduOC1AWT/us2enT6kPAVdnaxiB6x+agQ1sM6cG QMSlthMobQiY4FnKp0VFNcBlqPZQNtE/yr2pnFxq+22cJIiFpjya60X1bD1iglVv XDbFlvkL0ocO4WbJ/LP0bct7vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYGNV6N iSfYRkcl6ntMABDj+zTwMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzzc1s+bf9COzYMNBNL0UpkOvUR1jmiN/nQxc9zMU6BDk4PvBzAAfz 1ezvMZbzhrjrTqG3KoyDnp6jit+eX61lhzHP2o2a/qJyCCa+Nb3wfLE9VSJPu4ju rXB5dMyOJ6mQ0CvvLRM/zKA5rOV1N6htu30SAvZAoalzM3O7Sn5yb5PpfrBxr9z6 6wCvPVhc/hX3bhXCwFgYACOoS2so43w5Dd18CnzfAWU9qeizOWR7wQBsmARGwK7F Pj9K8jootHbOJNVBj01/SeZqLpifce9PMG8peLqxNgQE6fS0QQJwK5Fy/sVpvjkl ApKfTiLOWj9oONONfu8O9+ABGxV4/tx+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:19 2025 by rpki-client