$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: 4TRh7o/lhmgoRalMS9IvLGGR1uaBHr+zt5NaT1/PeNE= Subject key identifier: E8:1B:0E:B5:CB:AE:45:15:B4:1D:83:8A:E7:C1:41:56:02:DF:BC:65 Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 304F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 301F Signing time: Sat 31 May 2025 15:26:43 +0000 Manifest this update: Sat 31 May 2025 15:26:42 +0000 Manifest next update: Sat 07 Jun 2025 15:26:42 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: hlfQsuA3tMV2m758bgWNVE9PScUvF8OAFih1pAuSqIA=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: mZztKr45nO/gM/3Jsp/t6m3zKzm9X2x6Vn1aMOLEY00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12367 (0x304f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: May 31 15:26:42 2025 GMT Not After : Jun 7 15:26:42 2025 GMT Subject: CN=683b1fb2-c224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:f2:ed:45:ad:31:65:f0:5f:f7:89:70:97: 9c:a4:4c:14:7f:12:16:0b:76:5b:ba:4f:a6:eb:c8: b8:c8:88:2b:6f:ab:84:57:8b:09:31:1a:aa:c8:13: f6:39:e8:75:8c:e7:bd:99:63:8f:86:ae:61:f8:2f: c2:20:11:d2:15:dc:94:d5:95:4f:1d:2e:83:6b:6d: 44:da:ce:74:a0:4c:02:03:e4:82:f2:07:67:32:53: 5b:74:1b:ac:c3:34:cf:33:12:a2:f1:04:a3:32:d8: 1d:42:cf:6a:a0:02:33:0d:9c:7a:52:a9:05:a2:b8: d2:79:52:79:ec:b8:70:e2:03:2c:19:d7:2f:24:f2: a8:f0:c5:12:6a:a7:16:14:9a:b8:91:0e:61:79:5f: 2a:3f:bd:b6:c2:7d:3d:fa:55:a2:1c:5c:4b:78:8e: 09:93:d0:17:64:18:6a:f9:cc:08:4d:04:4e:eb:0c: 06:9a:37:dc:c7:25:73:0f:84:14:f9:9c:3a:0c:a6: ca:4a:84:64:bb:e3:79:0f:20:65:ad:76:13:52:74: ab:93:5b:50:be:4b:f2:7c:76:02:b5:86:39:87:3a: 70:e4:12:68:bf:76:2c:f4:3b:0a:be:6f:10:0a:30: ae:2b:1b:94:1e:c8:cc:09:78:bb:cb:79:bd:28:56: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1B:0E:B5:CB:AE:45:15:B4:1D:83:8A:E7:C1:41:56:02:DF:BC:65 X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:45:12:fc:60:80:68:8f:cc:46:c2:22:ef:79:68:74:ae:31: 95:75:63:2d:36:13:d9:70:ee:99:1a:40:86:e1:99:9f:b8:9f: ab:c2:33:4a:b8:0d:9b:38:f9:07:32:e8:2e:5c:f7:4b:10:a4: 55:5d:14:1a:da:31:ab:82:a8:e7:6d:53:99:c4:98:ea:3e:f3: dc:e8:96:f6:38:92:ab:37:a2:6b:ed:ff:0a:70:b3:69:11:ac: 46:ba:a8:80:50:64:06:c7:4c:43:31:36:fd:03:cd:ce:70:e5: 47:13:9f:c2:b1:3b:db:fa:74:8d:43:62:ed:8b:ed:60:03:a2: 8b:ec:1f:07:6b:93:9d:cb:c4:e9:c5:1c:d8:27:17:b5:9a:4f: f7:61:fe:b1:1a:56:50:42:e0:f8:4d:ad:6e:5f:d3:1f:4e:1b: c0:76:c1:a7:d1:bb:e9:1c:a4:fb:c7:49:18:da:a5:5d:15:e3: ca:22:5c:0f:65:13:f5:0f:11:ad:34:58:8a:0d:d8:32:2c:21: 37:db:75:9d:01:9c:41:35:52:fb:77:47:64:de:27:47:5c:07: a4:4b:f2:50:8c:93:a7:fb:f4:8d:ed:9e:5b:bb:2d:4f:8c:ac: c9:dd:ca:23:2f:b8:45:d3:1e:f5:42:c9:b2:52:11:1e:ca:97: 34:30:09:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICME8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjUwNTMxMTUyNjQyWhcNMjUwNjA3MTUyNjQyWjAYMRYwFAYD VQQDEw02ODNiMWZiMi1jMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNzy7UWtMWXwX/eJcJecpEwUfxIWC3Zbuk+m68i4yIgrb6uEV4sJMRqqyBP2 Oeh1jOe9mWOPhq5h+C/CIBHSFdyU1ZVPHS6Da21E2s50oEwCA+SC8gdnMlNbdBus wzTPMxKi8QSjMtgdQs9qoAIzDZx6UqkForjSeVJ57Lhw4gMsGdcvJPKo8MUSaqcW FJq4kQ5heV8qP722wn09+lWiHFxLeI4Jk9AXZBhq+cwITQRO6wwGmjfcxyVzD4QU +Zw6DKbKSoRku+N5DyBlrXYTUnSrk1tQvkvyfHYCtYY5hzpw5BJov3Ys9DsKvm8Q CjCuKxuUHsjMCXi7y3m9KFaFRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgbDrXL rkUVtB2DiufBQVYC37xlMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/RRL8YIBoj8xGwiLveWh0rjGVdWMtNhPZcO6ZGkCG4ZmfuJ+rwjNK uA2bOPkHMuguXPdLEKRVXRQa2jGrgqjnbVOZxJjqPvPc6Jb2OJKrN6Jr7f8KcLNp EaxGuqiAUGQGx0xDMTb9A83OcOVHE5/CsTvb+nSNQ2Lti+1gA6KL7B8Ha5Ody8Tp xRzYJxe1mk/3Yf6xGlZQQuD4Ta1uX9MfThvAdsGn0bvpHKT7x0kY2qVdFePKIlwP ZRP1DxGtNFiKDdgyLCE323WdAZxBNVL7d0dk3idHXAekS/JQjJOn+/SN7Z5buy1P jKzJ3cojL7hF0x71QsmyUhEeypc0MAkH -----END CERTIFICATE-----Generated at Sat May 31 17:56:21 2025 by rpki-client