$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: LnpxJxpB1NDHqkOmCaoRJPmwmJURdfw49IYFOJC2QDA= Subject key identifier: E1:69:9B:45:5B:91:56:AA:9C:4E:1A:FA:C4:57:BF:E9:6F:57:64:6C Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 3047 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 3017 Signing time: Fri 16 May 2025 15:39:23 +0000 Manifest this update: Fri 16 May 2025 15:39:22 +0000 Manifest next update: Fri 23 May 2025 15:39:22 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: k8XQSbjeFaQV3EXOkjn3fefUhELTBnHy0fg/KgCalV8=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: mZztKr45nO/gM/3Jsp/t6m3zKzm9X2x6Vn1aMOLEY00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12359 (0x3047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: May 16 15:39:22 2025 GMT Not After : May 23 15:39:22 2025 GMT Subject: CN=68275c2a-27d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:20:92:e6:52:13:d8:d8:92:2b:07:4c:69: 05:1c:19:fc:34:9a:57:a1:c0:75:42:7e:5f:95:33: d6:d3:36:50:04:ec:42:0f:c2:e9:9c:bf:96:4d:4f: 4d:07:e2:38:38:8d:fa:ec:bc:20:08:b6:ee:96:28: e4:68:bc:1a:89:f6:ad:29:63:9b:a4:0a:b2:64:d7: 0c:69:4b:bf:4b:53:2b:3f:7a:35:05:cf:70:95:bf: c2:ad:87:6b:60:1f:c5:2c:3e:b0:5a:4e:6b:27:af: c7:17:4b:a2:5d:22:c7:6d:5f:52:09:c2:24:ea:f4: 9a:b8:70:c5:e0:ab:3d:e5:6a:13:ac:fd:4c:ed:8a: 48:c4:11:40:3b:b9:29:d2:12:af:1e:e2:de:44:79: 27:50:84:6e:26:6c:52:22:1e:f5:37:bf:70:2b:f6: 20:43:dc:14:09:4c:ed:97:a8:e1:2b:2c:f0:2a:4d: 91:ef:02:07:fb:fa:04:6d:bf:0c:57:f7:bd:69:ef: b8:5e:b8:86:b4:5c:13:58:91:e7:52:fe:f4:64:1c: 2d:a4:d3:ce:39:e5:93:d6:1d:bf:7e:98:54:a3:13: da:c2:09:5d:04:b6:94:2c:5a:eb:4e:2d:93:e6:a5: 93:f2:ab:2b:35:1a:03:2e:39:e9:1c:bd:b6:ea:c8: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:69:9B:45:5B:91:56:AA:9C:4E:1A:FA:C4:57:BF:E9:6F:57:64:6C X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0d:a6:f2:c8:7c:49:fc:40:7f:ca:55:7a:51:f3:c3:da:a1: 2c:89:72:17:f2:28:56:87:75:2e:48:fe:f3:a8:a6:6b:70:87: b2:b4:c9:04:1d:d6:fd:a8:f1:f9:5d:9b:8f:3e:65:c7:10:05: 8d:ed:7f:2a:58:37:fd:50:1d:77:2d:34:d0:15:82:b5:38:13: 04:f4:a3:ec:1e:86:68:94:c0:02:25:f0:94:8e:9c:d0:29:5a: d4:a4:86:a6:df:e0:f3:b5:27:54:3d:d7:60:8c:b0:71:2c:d9: 0c:74:ec:d9:19:f4:69:f5:b0:68:05:e5:74:e6:c3:d7:ed:b5: 0a:e0:d5:77:11:60:de:39:99:ec:1b:3a:32:aa:ec:a8:fc:0d: 31:a1:59:f1:c9:7b:36:d0:0d:e8:fb:dc:25:b3:83:27:07:b2: 1e:a4:f3:1b:d2:fc:8e:89:33:57:f0:af:46:e1:f7:11:68:19: 63:69:99:0b:a6:b6:e7:c8:ad:1e:7e:a7:84:eb:99:5c:37:e9: 3f:ba:07:09:f4:34:a1:e7:0b:a8:e7:b7:14:a1:33:ca:53:b2: de:d4:a8:ca:d5:62:b8:08:fa:e4:3e:03:3a:55:2e:7b:ff:cc: e3:11:74:8e:3b:69:97:e5:e4:83:c8:51:88:34:52:fd:22:9a: 3c:55:27:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjUwNTE2MTUzOTIyWhcNMjUwNTIzMTUzOTIyWjAYMRYwFAYD VQQDEw02ODI3NWMyYS0yN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuEgkuZSE9jYkisHTGkFHBn8NJpXocB1Qn5flTPW0zZQBOxCD8LpnL+WTU9N B+I4OI367LwgCLbulijkaLwaifatKWObpAqyZNcMaUu/S1MrP3o1Bc9wlb/CrYdr YB/FLD6wWk5rJ6/HF0uiXSLHbV9SCcIk6vSauHDF4Ks95WoTrP1M7YpIxBFAO7kp 0hKvHuLeRHknUIRuJmxSIh71N79wK/YgQ9wUCUztl6jhKyzwKk2R7wIH+/oEbb8M V/e9ae+4XriGtFwTWJHnUv70ZBwtpNPOOeWT1h2/fphUoxPawgldBLaULFrrTi2T 5qWT8qsrNRoDLjnpHL226sgcYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFpm0Vb kVaqnE4a+sRXv+lvV2RsMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRDabyyHxJ/EB/ylV6UfPD2qEsiXIX8ihWh3UuSP7zqKZrcIeytMkE Hdb9qPH5XZuPPmXHEAWN7X8qWDf9UB13LTTQFYK1OBME9KPsHoZolMACJfCUjpzQ KVrUpIam3+DztSdUPddgjLBxLNkMdOzZGfRp9bBoBeV05sPX7bUK4NV3EWDeOZns Gzoyquyo/A0xoVnxyXs20A3o+9wls4MnB7IepPMb0vyOiTNX8K9G4fcRaBljaZkL prbnyK0efqeE65lcN+k/ugcJ9DSh5wuo57cUoTPKU7Le1KjK1WK4CPrkPgM6VS57 /8zjEXSOO2mX5eSDyFGINFL9Ipo8VSe6 -----END CERTIFICATE-----Generated at Sat May 17 21:32:10 2025 by rpki-client