$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: XJezZ2yvLDKMYl9cGTSt7R1zsN04NhGicml9V1if8dU= Subject key identifier: 0B:BB:7C:DF:2E:3E:09:FA:B7:BA:4C:96:77:E5:78:AD:57:3D:A1:2D Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 3482 Signing time: Wed 14 May 2025 14:55:16 +0000 Manifest this update: Wed 14 May 2025 14:55:15 +0000 Manifest next update: Wed 21 May 2025 14:55:15 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: ayofCD8oljjHHMeoMaoOMPqwjAST1/+vKyK6ma3QWG8=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: May 14 14:55:15 2025 GMT Not After : May 21 14:55:15 2025 GMT Subject: CN=6824aed3-bc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:5b:e8:fe:dc:20:1f:d0:ae:01:93:a2:ec: 75:13:55:35:42:74:b7:25:43:a2:9c:e8:b5:4e:e5: 66:33:a6:4e:8e:30:13:67:33:7a:8f:85:ba:97:bd: f5:1c:59:0f:1b:cc:74:bb:d5:c7:ca:ba:9f:35:1b: 14:fd:09:bb:25:b0:43:02:c6:38:6e:ff:cd:af:ce: 11:d2:3a:03:7e:ff:f7:15:97:43:96:b4:86:45:71: d7:49:f0:95:52:9c:0e:ac:04:ca:f2:5b:ba:dd:d6: be:71:df:16:dd:36:a0:1a:4e:d4:bd:88:d7:d7:5e: 9b:2a:6b:8a:ff:75:a3:d4:cf:98:08:02:1a:c4:b9: 34:3b:60:fd:5f:9f:60:ca:91:ad:c7:4d:6e:e3:9d: 5a:0b:54:1f:97:15:49:02:bb:df:55:74:3e:dc:c7: 69:33:d9:2e:02:28:98:4f:0f:b6:52:a9:f7:b4:2a: 76:1d:5c:e5:86:f8:4d:f7:e8:ac:9b:8e:c4:71:26: 21:d9:25:56:a8:fc:fb:59:53:1d:86:66:cd:42:2f: 72:8c:de:c2:e9:be:57:14:e1:4e:d9:d7:78:56:cf: 58:70:14:09:67:1d:6c:b3:61:85:98:eb:1b:84:44: c2:22:67:b7:f6:37:8a:94:46:06:84:c0:42:8c:d8: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:7C:DF:2E:3E:09:FA:B7:BA:4C:96:77:E5:78:AD:57:3D:A1:2D X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:21:e1:99:04:ad:d9:26:12:ce:b9:15:34:85:96:32:ea:c1: 4f:b8:34:27:cc:80:f1:d4:48:90:f8:cf:36:6a:ed:f3:c2:59: fe:7a:21:4f:8d:5d:61:b3:6f:f3:65:1d:5c:9e:7f:f8:1d:63: 6c:d8:07:09:e0:34:81:82:85:d6:f9:7c:76:7d:18:43:a9:96: 07:dd:c8:47:86:5f:02:2f:53:a5:81:81:46:71:04:3b:d6:95: 4e:73:2a:10:f8:b9:3a:f7:12:1c:c3:5f:da:eb:99:ab:6f:ce: 74:d1:63:75:b3:0e:19:ae:3c:2b:f8:1a:b4:6c:45:c2:ea:f6: 3c:5a:59:65:9e:f6:0a:43:f2:44:df:03:03:07:7f:5a:66:23: 62:99:a2:88:06:7a:02:df:80:8a:27:f5:a6:47:76:f7:7a:8f: 9d:d0:ba:ce:de:25:db:7f:7c:9a:40:3f:5d:0e:ee:07:08:9c: 09:e3:b2:26:3e:ca:26:37:67:2b:74:c6:9c:14:14:6c:4e:e2: a2:b3:c4:14:76:26:4a:74:be:77:dc:f1:6e:c1:13:ef:e1:72: be:9a:ce:9d:24:09:df:4a:3e:20:15:95:61:5d:41:0b:22:89: 87:b4:c6:d7:c5:f7:03:c7:73:fc:d3:e7:e1:1a:47:67:4d:29: f2:02:6e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUwNTE0MTQ1NTE1WhcNMjUwNTIxMTQ1NTE1WjAYMRYwFAYD VQQDEw02ODI0YWVkMy1iYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoANb6P7cIB/QrgGToux1E1U1QnS3JUOinOi1TuVmM6ZOjjATZzN6j4W6l731 HFkPG8x0u9XHyrqfNRsU/Qm7JbBDAsY4bv/Nr84R0joDfv/3FZdDlrSGRXHXSfCV UpwOrATK8lu63da+cd8W3TagGk7UvYjX116bKmuK/3Wj1M+YCAIaxLk0O2D9X59g ypGtx01u451aC1QflxVJArvfVXQ+3MdpM9kuAiiYTw+2Uqn3tCp2HVzlhvhN9+is m47EcSYh2SVWqPz7WVMdhmbNQi9yjN7C6b5XFOFO2dd4Vs9YcBQJZx1ss2GFmOsb hETCIme39jeKlEYGhMBCjNhl6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu7fN8u Pgn6t7pMlnfleK1XPaEtMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeIeGZBK3ZJhLOuRU0hZYy6sFPuDQnzIDx1EiQ+M82au3zwln+eiFP jV1hs2/zZR1cnn/4HWNs2AcJ4DSBgoXW+Xx2fRhDqZYH3chHhl8CL1OlgYFGcQQ7 1pVOcyoQ+Lk69xIcw1/a65mrb8500WN1sw4Zrjwr+Bq0bEXC6vY8WlllnvYKQ/JE 3wMDB39aZiNimaKIBnoC34CKJ/WmR3b3eo+d0LrO3iXbf3yaQD9dDu4HCJwJ47Im PsomN2crdMacFBRsTuKis8QUdiZKdL533PFuwRPv4XK+ms6dJAnfSj4gFZVhXUEL IomHtMbXxfcDx3P80+fhGkdnTSnyAm5X -----END CERTIFICATE-----Generated at Thu May 15 16:07:18 2025 by rpki-client