$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: y7zQx3rz2BoyuiRle/Mtz66RA0P6lcpCaIHYMIlSfCY= Subject key identifier: EE:CE:BD:27:9F:39:2E:5B:73:65:B9:CB:B6:39:FD:46:63:62:C9:A4 Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0C87 Signing time: Mon 08 Sep 2025 18:21:40 +0000 Manifest this update: Mon 08 Sep 2025 18:21:39 +0000 Manifest next update: Mon 15 Sep 2025 18:21:39 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: vNCSs1LtVqN8bFPzT7tEIbQJ3jklXXz+uHHs3/Nw8hg=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: L3QtLlUYOp97S+0J2ZEUAV9V2aNzWM2GyLPcyzG+Vzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Sep 8 18:21:39 2025 GMT Not After : Sep 15 18:21:39 2025 GMT Subject: CN=68bf1eb3-6b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3e:f0:21:3b:c2:de:a4:56:e2:54:63:cf:57: 23:5c:8a:f2:b0:dd:64:8d:c7:2a:06:90:36:cb:6a: 48:7e:6c:b7:f5:18:2b:15:49:8e:4e:3c:e2:7c:a9: 73:fa:f0:e2:d5:89:cf:88:7a:e8:96:4a:b4:d8:5d: 4e:05:cf:52:82:21:6d:d1:ae:e4:cf:12:fe:59:2a: ab:31:8b:29:2c:30:e4:c5:b3:3e:6c:3e:bc:3c:41: db:4b:19:f2:4a:4b:77:d4:e6:90:64:4c:65:26:41: 37:31:50:64:10:3b:33:74:ea:c8:ff:21:31:67:40: 28:3e:4e:fd:6e:7d:c3:58:8e:a6:77:c8:f3:0c:52: b1:65:55:cf:09:e1:de:24:28:05:50:b9:4d:e0:58: 39:1e:4d:01:e1:46:a0:17:65:64:68:f2:3c:2b:36: 6c:63:53:64:13:f8:55:47:08:fe:11:a8:a7:f2:eb: df:b2:96:22:2e:9e:ed:10:31:4b:7f:09:62:8e:a5: f7:49:7f:8a:1a:20:34:ca:0c:92:6f:e1:bb:d2:a6: 9e:0d:99:79:d8:69:47:54:6f:b3:66:64:ba:71:81: f0:b3:06:28:a5:e0:10:ab:c7:f1:6a:f5:37:63:8f: 7f:7e:80:6d:e7:28:48:23:74:18:90:66:dc:ef:4c: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:BD:27:9F:39:2E:5B:73:65:B9:CB:B6:39:FD:46:63:62:C9:A4 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:6e:6e:e4:cf:ee:eb:c9:a1:28:34:d3:2a:90:f2:8a:ba:1b: ab:8c:3d:31:c6:dd:84:9f:d8:c8:fa:1c:86:af:7c:3e:64:84: 70:d0:ca:5c:bf:80:3d:13:5e:62:d6:2e:74:f3:36:93:e2:06: 74:40:03:40:bf:ad:ce:eb:92:cf:74:e3:8a:e0:ac:9c:c4:aa: 37:d3:2a:9c:b9:c0:19:96:14:7e:0b:8c:a3:67:a5:8c:67:dd: f3:4e:b9:e8:d0:10:9e:15:da:63:96:39:c0:b2:19:49:68:82: ed:36:ed:5f:11:93:08:3f:03:ee:8c:5b:0c:fc:e4:1a:30:95: 7a:66:22:aa:3a:f2:84:9a:96:e3:76:e9:e4:45:1d:13:79:c6: ea:32:16:8a:61:96:2e:d5:66:54:a4:10:cb:a3:5a:67:4f:d5: 1a:22:89:24:88:61:9d:a2:8d:31:79:70:45:cd:d1:d0:f1:c1: ce:7d:9c:fa:ce:fc:ab:9b:54:cc:76:e5:f1:fd:59:7c:3f:48: 60:e8:d7:80:c3:7d:6a:53:11:70:e5:65:ae:14:e7:7b:e5:da: 91:66:f0:3e:7a:ce:b5:45:23:ac:07:c9:a2:d3:f3:7f:9e:af: 79:30:5f:01:91:36:be:71:26:57:51:05:ea:ac:6c:07:1b:f2: a3:e2:cd:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjUwOTA4MTgyMTM5WhcNMjUwOTE1MTgyMTM5WjAYMRYwFAYD VQQDEw02OGJmMWViMy02YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7D7wITvC3qRW4lRjz1cjXIrysN1kjccqBpA2y2pIfmy39RgrFUmOTjzifKlz +vDi1YnPiHrolkq02F1OBc9SgiFt0a7kzxL+WSqrMYspLDDkxbM+bD68PEHbSxny Skt31OaQZExlJkE3MVBkEDszdOrI/yExZ0AoPk79bn3DWI6md8jzDFKxZVXPCeHe JCgFULlN4Fg5Hk0B4UagF2VkaPI8KzZsY1NkE/hVRwj+Eain8uvfspYiLp7tEDFL fwlijqX3SX+KGiA0ygySb+G70qaeDZl52GlHVG+zZmS6cYHwswYopeAQq8fxavU3 Y49/foBt5yhII3QYkGbc70x+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7OvSef OS5bc2W5y7Y5/UZjYsmkMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHbm7kz+7ryaEoNNMqkPKKuhurjD0xxt2En9jI+hyGr3w+ZIRw0Mpc v4A9E15i1i508zaT4gZ0QANAv63O65LPdOOK4KycxKo30yqcucAZlhR+C4yjZ6WM Z93zTrno0BCeFdpjljnAshlJaILtNu1fEZMIPwPujFsM/OQaMJV6ZiKqOvKEmpbj dunkRR0TecbqMhaKYZYu1WZUpBDLo1pnT9UaIokkiGGdoo0xeXBFzdHQ8cHOfZz6 zvyrm1TMduXx/Vl8P0hg6NeAw31qUxFw5WWuFOd75dqRZvA+es61RSOsB8mi0/N/ nq95MF8BkTa+cSZXUQXqrGwHG/Kj4s0T -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:49 2025 by rpki-client