$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: 6RcWmh8OJUpTMOyAmXn1tB4zT8limyZlgQYzI/QW4bk= Subject key identifier: 4A:64:F5:01:71:26:7A:A5:CE:A2:E4:59:94:84:E0:28:53:9C:91:3D Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 3077 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 3046 Signing time: Tue 12 Aug 2025 15:31:19 +0000 Manifest this update: Tue 12 Aug 2025 15:31:18 +0000 Manifest next update: Tue 19 Aug 2025 15:31:18 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: kxYRC6fwvHm0t09O6esrq3seF7AOYDh9cWUPDLIDZJw=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12407 (0x3077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: Aug 12 15:31:18 2025 GMT Not After : Aug 19 15:31:18 2025 GMT Subject: CN=689b5e46-02d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:99:9a:32:f7:3f:5e:cf:fe:9c:fa:50:9d: f1:48:ee:f4:e9:70:75:92:a8:2e:3c:03:9f:90:50: 44:2a:c5:87:38:62:21:0f:e9:1a:a3:cd:9c:42:d7: 78:4d:f3:13:3c:1a:12:a9:b6:7f:f9:16:e7:8c:f4: 8b:2b:06:2e:cd:3a:4a:bd:15:5b:dc:0c:2d:65:d3: 59:2b:67:0f:8a:f6:0e:96:79:f6:b9:82:83:37:76: 6b:7e:92:c1:04:e7:8d:37:3b:63:03:11:59:09:34: da:78:47:85:ac:a3:9c:29:2c:5e:06:be:76:72:71: 3a:64:f2:14:41:b5:c3:79:b7:c9:0b:9b:4c:56:f5: d1:49:0f:ce:6d:9e:c0:66:54:4f:ff:d3:36:14:c4: 07:7e:f4:c4:ef:bb:7e:16:7c:04:32:f7:dd:a2:e2: 24:d6:88:c1:27:54:15:96:41:8f:c3:21:29:39:6d: 55:73:b9:2c:c3:b6:4a:a4:7c:19:54:34:be:d7:b5: a1:bc:77:5d:99:4e:31:61:9d:81:03:b5:05:b7:57: a4:b0:1b:f7:6c:38:2c:b7:48:00:68:c1:0b:b8:77: 9d:8b:39:dc:e2:68:bb:79:02:e0:be:20:7e:9f:a2: 76:b4:b9:0d:14:72:41:f0:43:99:18:22:2e:36:1b: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:F5:01:71:26:7A:A5:CE:A2:E4:59:94:84:E0:28:53:9C:91:3D X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c4:2a:1d:53:10:53:87:00:27:b0:82:8b:67:e7:89:0b:79: 19:60:e8:68:9c:ee:ec:09:e1:6b:74:b8:ae:3e:c3:d9:6a:bd: c3:bc:e5:ce:41:5c:99:de:d4:61:44:a3:b5:93:1b:ca:f0:50: 7c:ef:40:f5:9f:92:b7:78:5b:f1:99:49:cf:e8:49:9d:ca:c2: eb:be:14:16:07:9b:ae:b2:7f:c1:bf:59:62:ae:a3:5f:14:60: 4a:cf:a9:22:b1:70:07:cb:e7:70:c1:13:d4:d9:45:db:c4:25: de:85:25:be:fe:ae:31:04:39:c7:e5:26:7b:92:56:bb:e4:f7: a3:f2:6f:ce:f8:45:6f:67:8c:f1:be:e3:b5:72:95:05:0b:be: ab:e9:ef:fe:76:38:3d:55:2f:df:b9:14:dc:3c:fb:bf:e1:89: 83:32:fe:18:80:b9:39:66:de:5d:30:17:38:c2:26:a8:87:d4: cd:e5:50:09:bb:b8:01:3b:63:14:0e:12:a1:e2:7f:6a:83:a1: dd:e8:73:2b:e4:17:a1:07:41:74:67:a3:9e:be:02:01:0d:e2: 09:bb:7c:b9:63:94:12:f9:48:42:a4:94:0e:29:35:ca:6b:72: 0f:e4:9f:ed:7e:45:45:f2:4e:41:c4:99:10:cd:d5:71:bb:64: 30:d0:78:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjUwODEyMTUzMTE4WhcNMjUwODE5MTUzMTE4WjAYMRYwFAYD VQQDEw02ODliNWU0Ni0wMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUuZmjL3P17P/pz6UJ3xSO706XB1kqguPAOfkFBEKsWHOGIhD+kao82cQtd4 TfMTPBoSqbZ/+RbnjPSLKwYuzTpKvRVb3AwtZdNZK2cPivYOlnn2uYKDN3ZrfpLB BOeNNztjAxFZCTTaeEeFrKOcKSxeBr52cnE6ZPIUQbXDebfJC5tMVvXRSQ/ObZ7A ZlRP/9M2FMQHfvTE77t+FnwEMvfdouIk1ojBJ1QVlkGPwyEpOW1Vc7ksw7ZKpHwZ VDS+17WhvHddmU4xYZ2BA7UFt1eksBv3bDgst0gAaMELuHediznc4mi7eQLgviB+ n6J2tLkNFHJB8EOZGCIuNhtl0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpk9QFx JnqlzqLkWZSE4ChTnJE9MB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+xCodUxBThwAnsIKLZ+eJC3kZYOhonO7sCeFrdLiuPsPZar3DvOXO QVyZ3tRhRKO1kxvK8FB870D1n5K3eFvxmUnP6EmdysLrvhQWB5uusn/Bv1lirqNf FGBKz6kisXAHy+dwwRPU2UXbxCXehSW+/q4xBDnH5SZ7kla75Pej8m/O+EVvZ4zx vuO1cpUFC76r6e/+djg9VS/fuRTcPPu/4YmDMv4YgLk5Zt5dMBc4wiaoh9TN5VAJ u7gBO2MUDhKh4n9qg6Hd6HMr5BehB0F0Z6OevgIBDeIJu3y5Y5QS+UhCpJQOKTXK a3IP5J/tfkVF8k5BxJkQzdVxu2Qw0Hjk -----END CERTIFICATE-----Generated at Wed Aug 13 02:59:41 2025 by rpki-client