$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: 2YOB5mvFFdGGLMTTWUIqX3VU/39FO2aRlbMeg4MddRU= Subject key identifier: 22:7B:42:3D:BE:71:E1:51:DD:F2:B5:32:D0:C5:C4:F0:83:6E:A2:62 Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 3042 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 3012 Signing time: Tue 06 May 2025 15:28:46 +0000 Manifest this update: Tue 06 May 2025 15:28:46 +0000 Manifest next update: Tue 13 May 2025 15:28:46 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: /DLyW+TK0/z1gZcCQCv7u3u3QWDKKbcGsw6Rc1Sy15A=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: mZztKr45nO/gM/3Jsp/t6m3zKzm9X2x6Vn1aMOLEY00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12354 (0x3042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: May 6 15:28:46 2025 GMT Not After : May 13 15:28:46 2025 GMT Subject: CN=681a2aae-2069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:ce:00:3e:a2:7e:58:c4:76:79:cb:f5:1b: 84:48:de:9b:32:4a:e7:92:19:8f:9e:54:b9:7c:e6: d2:6d:13:44:1b:f3:73:a7:b1:6c:a1:bc:16:90:7f: 75:0a:2c:16:cf:ef:45:83:ac:30:07:15:ae:e5:2d: 4f:a3:81:0b:69:a3:5a:57:b4:98:07:2e:0d:fe:b7: 26:0f:d9:f9:04:7a:a3:86:24:ed:f3:ed:88:cc:06: aa:c2:12:8b:a0:3d:16:21:d5:3e:7e:46:59:23:2d: b8:ba:50:12:b3:4a:6f:bd:ad:d5:7e:ca:1f:15:bf: ff:86:63:78:bb:bd:8f:54:b7:6e:03:db:27:fa:52: ce:72:d3:74:02:58:e3:fa:d5:a7:c5:79:3f:81:a2: da:f9:af:86:f5:de:ab:90:c7:ce:27:6f:de:87:f2: f2:4d:16:8d:16:5b:28:b0:13:27:34:e6:95:b0:a4: d0:53:10:bb:d0:af:be:2a:aa:8e:8f:c2:19:50:f8: 75:27:7f:f9:d9:82:84:35:c8:62:11:ff:cf:a9:41: 67:d3:8d:17:b6:93:64:98:7c:61:41:fa:9f:03:ed: cc:aa:ed:66:05:23:28:0c:0e:f8:ba:f4:ec:e3:d7: 43:ca:2a:a6:28:ab:bb:23:91:e1:95:da:63:2d:99: d3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7B:42:3D:BE:71:E1:51:DD:F2:B5:32:D0:C5:C4:F0:83:6E:A2:62 X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:2d:e4:7a:48:9b:d6:05:d5:4d:0e:6d:ad:8b:1f:ea:e6: b4:84:0c:b8:c6:bb:26:01:0e:af:c4:f2:7c:5c:db:ed:aa:e1: 9c:ea:3a:01:80:4e:a7:db:8c:97:bb:b7:69:06:56:94:be:7e: a9:3d:d3:c9:85:08:8c:07:5a:78:f7:05:14:07:7d:b0:3e:e5: 4a:e3:e2:78:ec:cb:e3:a6:e0:4b:1d:ac:eb:11:44:71:99:a3: 5f:3e:e9:99:96:db:58:10:0f:ca:c6:eb:27:f6:0f:84:0d:aa: 3f:9e:9e:7c:24:01:d0:87:d9:8a:1d:0e:23:83:ff:df:c1:36: ad:45:a3:1a:5e:a4:83:f3:eb:7d:c7:cf:f8:e3:24:99:92:69: 98:60:3d:cd:0a:7e:18:e1:5d:7b:e7:97:d0:08:ac:01:f5:75: 6f:7c:6c:a6:4c:01:bd:81:b3:b4:66:3b:f1:d3:5a:cc:a3:4d: 82:71:51:e8:79:c7:07:36:8a:e8:8e:39:9d:79:06:b4:b8:2e: ee:2f:98:52:f0:42:ee:a3:98:78:9d:dd:00:8d:6f:e5:eb:7c: 97:37:fc:e1:04:22:f8:d4:b4:b2:74:f0:27:22:5d:73:0e:9c: 71:d3:11:05:5f:f9:56:f2:ba:bb:48:6d:e6:88:d6:ce:f9:fa: fa:d4:1f:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjUwNTA2MTUyODQ2WhcNMjUwNTEzMTUyODQ2WjAYMRYwFAYD VQQDEw02ODFhMmFhZS0yMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pLOAD6ifljEdnnL9RuESN6bMkrnkhmPnlS5fObSbRNEG/Nzp7FsobwWkH91 CiwWz+9Fg6wwBxWu5S1Po4ELaaNaV7SYBy4N/rcmD9n5BHqjhiTt8+2IzAaqwhKL oD0WIdU+fkZZIy24ulASs0pvva3VfsofFb//hmN4u72PVLduA9sn+lLOctN0Aljj +tWnxXk/gaLa+a+G9d6rkMfOJ2/eh/LyTRaNFlsosBMnNOaVsKTQUxC70K++KqqO j8IZUPh1J3/52YKENchiEf/PqUFn040XtpNkmHxhQfqfA+3Mqu1mBSMoDA74uvTs 49dDyiqmKKu7I5HhldpjLZnTFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJ7Qj2+ ceFR3fK1MtDFxPCDbqJiMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUgC3kekib1gXVTQ5trYsf6ua0hAy4xrsmAQ6vxPJ8XNvtquGc6joB gE6n24yXu7dpBlaUvn6pPdPJhQiMB1p49wUUB32wPuVK4+J47MvjpuBLHazrEURx maNfPumZlttYEA/Kxusn9g+EDao/np58JAHQh9mKHQ4jg//fwTatRaMaXqSD8+t9 x8/44ySZkmmYYD3NCn4Y4V1755fQCKwB9XVvfGymTAG9gbO0Zjvx01rMo02CcVHo eccHNorojjmdeQa0uC7uL5hS8ELuo5h4nd0AjW/l63yXN/zhBCL41LSydPAnIl1z Dpxx0xEFX/lW8rq7SG3miNbO+fr61B8c -----END CERTIFICATE-----Generated at Wed May 7 08:24:53 2025 by rpki-client