$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: URyL1jat/K8qNy9YzApY5qPEa6vA+f8lc7X3Rq2YtGk= Subject key identifier: 36:34:CC:CB:28:08:18:CD:D1:9A:BE:BC:4C:15:54:18:32:B8:A0:24 Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 307D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 304C Signing time: Sun 24 Aug 2025 15:26:00 +0000 Manifest this update: Sun 24 Aug 2025 15:26:00 +0000 Manifest next update: Sun 31 Aug 2025 15:26:00 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: /AgwPxxLv8lR6bIluuuXl5Nk7H/scZN0JHoCQS14DV0=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12413 (0x307d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: Aug 24 15:26:00 2025 GMT Not After : Aug 31 15:26:00 2025 GMT Subject: CN=68ab2f08-9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8b:ab:31:4f:a7:9e:2e:23:3e:91:f3:9c:4e: 2c:d9:78:d9:d0:8e:2c:3a:b5:f2:a3:b0:e8:af:9e: 24:f4:c0:91:8b:9b:01:32:96:ba:42:55:2d:f4:ee: c4:f5:8d:06:64:6f:0a:21:5f:8d:01:01:ab:bb:b8: a6:7e:63:7b:31:8e:47:85:80:94:00:92:02:68:9e: 80:90:7a:48:f7:59:9e:11:ea:2b:02:51:da:91:95: 06:d0:5e:bb:2c:40:64:79:0c:5b:d0:a6:01:e9:8b: ca:87:b0:6b:97:65:26:b8:39:77:52:54:59:a6:2e: 98:8e:a4:38:6a:fe:47:66:98:99:ca:ac:d2:7c:2e: 72:7b:77:53:9b:ba:4e:95:7d:7d:27:7a:28:d6:fe: 33:45:90:7c:3e:91:ae:0e:3f:06:5b:30:06:ef:b2: 48:b7:0e:da:cd:b2:5a:43:31:3b:b3:e8:a2:e3:df: e8:21:ef:5b:37:d4:1a:5d:7e:ce:a9:16:46:d2:be: e1:7c:89:cd:41:99:a4:ed:ec:5e:5e:ef:31:e3:7b: f3:db:a5:57:31:7c:15:0b:6f:e3:73:57:6c:da:35: 5d:fa:e3:e3:76:28:46:41:db:a8:e1:b8:71:a5:f9: b8:b0:99:62:d0:ce:fc:38:2f:3d:8b:74:52:40:f5: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:CC:CB:28:08:18:CD:D1:9A:BE:BC:4C:15:54:18:32:B8:A0:24 X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:04:92:f0:30:32:79:87:1c:05:c5:1f:bd:3b:00:56:45:41: 27:4b:d9:d6:83:5a:45:43:3b:50:fb:fc:0d:4e:28:ad:63:65: 1c:0a:6a:3e:a8:d6:99:1d:31:a5:08:b9:bc:2d:d1:5c:96:1c: 42:33:c3:c2:8b:5d:c1:63:20:f4:b1:06:63:cf:00:11:c6:04: 45:39:5d:59:35:58:a7:ff:52:5f:56:c2:32:3c:3d:52:29:68: d5:6b:35:aa:0b:09:c4:b4:58:f1:5a:ec:bf:28:ad:9c:d1:d8: 87:98:4f:9e:fc:7e:7c:21:fc:45:7b:88:d7:5d:16:ff:27:21: d6:d8:d0:55:a8:a8:1b:c0:62:83:d9:1b:01:8c:1b:60:28:6d: 10:92:4a:6e:a9:d4:91:86:d1:55:00:76:03:bf:ed:e6:23:44: 48:63:6d:08:d2:b2:83:66:05:a6:df:fe:aa:62:cf:e2:0a:0c: 6c:e9:0f:d9:dc:9a:51:99:b6:04:d4:6d:1a:30:48:6e:d7:cc: 92:03:42:8a:3d:fa:94:90:e0:dd:04:6d:f8:e1:e7:29:f4:e6: 09:04:7e:54:5f:47:32:87:dd:f7:0c:40:7a:6f:e3:9d:5d:a8: 18:e8:0c:42:e9:f0:31:b0:44:a1:2d:2c:0d:00:63:f1:fe:91: f8:25:fa:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjUwODI0MTUyNjAwWhcNMjUwODMxMTUyNjAwWjAYMRYwFAYD VQQDEw02OGFiMmYwOC05NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94urMU+nni4jPpHznE4s2XjZ0I4sOrXyo7Dor54k9MCRi5sBMpa6QlUt9O7E 9Y0GZG8KIV+NAQGru7imfmN7MY5HhYCUAJICaJ6AkHpI91meEeorAlHakZUG0F67 LEBkeQxb0KYB6YvKh7Brl2UmuDl3UlRZpi6YjqQ4av5HZpiZyqzSfC5ye3dTm7pO lX19J3oo1v4zRZB8PpGuDj8GWzAG77JItw7azbJaQzE7s+ii49/oIe9bN9QaXX7O qRZG0r7hfInNQZmk7exeXu8x43vz26VXMXwVC2/jc1ds2jVd+uPjdihGQduo4bhx pfm4sJli0M78OC89i3RSQPU2LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY0zMso CBjN0Zq+vEwVVBgyuKAkMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVBJLwMDJ5hxwFxR+9OwBWRUEnS9nWg1pFQztQ+/wNTiitY2UcCmo+ qNaZHTGlCLm8LdFclhxCM8PCi13BYyD0sQZjzwARxgRFOV1ZNVin/1JfVsIyPD1S KWjVazWqCwnEtFjxWuy/KK2c0diHmE+e/H58IfxFe4jXXRb/JyHW2NBVqKgbwGKD 2RsBjBtgKG0QkkpuqdSRhtFVAHYDv+3mI0RIY20I0rKDZgWm3/6qYs/iCgxs6Q/Z 3JpRmbYE1G0aMEhu18ySA0KKPfqUkODdBG344ecp9OYJBH5UX0cyh933DEB6b+Od XagY6AxC6fAxsEShLSwNAGPx/pH4Jfry -----END CERTIFICATE-----Generated at Sun Aug 24 22:25:58 2025 by rpki-client