$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: hOxdYs+g3A8AhlQQ0Z7MCnIvmTP+AijQAP84C0gUVEs= Subject key identifier: 93:7A:06:78:25:A2:14:62:73:46:D8:D2:C4:0C:91:F0:3E:FC:93:F6 Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 34DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 34D4 Signing time: Sat 18 Oct 2025 15:00:54 +0000 Manifest this update: Sat 18 Oct 2025 15:00:53 +0000 Manifest next update: Sat 25 Oct 2025 15:00:53 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: Uzp1Ec4Z7Vxpji8hhunaIoCy2YdghhJwh9EkALvOUAw=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: mHUNvL3zJnpmbPqxHDIgKHTL5AEKLo79So94ufeiHA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: Oct 18 15:00:53 2025 GMT Not After : Oct 25 15:00:53 2025 GMT Subject: CN=68f3aba6-289b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:03:d6:ac:5f:3f:de:27:90:3b:5e:85:f1: 94:96:1c:a7:74:59:95:bb:77:8a:ed:61:02:50:71: 2c:7c:25:c8:7a:56:96:c1:72:93:16:3f:04:65:31: 93:e3:0b:47:ec:ce:33:61:f1:53:4e:43:77:ae:1d: 11:79:cc:a2:27:a8:d8:81:bb:e2:57:84:da:b8:a1: 79:8a:d3:2a:4a:fd:be:6f:6e:3c:a9:c5:aa:66:4d: 6a:9c:af:18:f3:d5:6a:6c:c3:ad:bc:b6:2c:25:81: b8:c2:2e:ec:4f:ca:25:34:3d:21:ee:0b:93:ce:dd: b6:ed:35:ff:30:e8:71:89:b6:9e:36:29:89:a3:a2: a3:cb:f2:c1:14:5c:78:33:c9:8d:c5:78:08:0e:df: 2b:06:b8:ad:88:9f:0e:80:3b:0b:15:b6:74:be:67: e7:04:87:68:dd:bb:7f:4c:66:55:62:64:cc:8f:94: 45:28:da:a8:66:a3:aa:6d:0b:14:0b:e5:24:fa:27: 1a:c9:7a:cc:b9:4e:f8:50:79:b7:b9:a9:96:a2:e2: fc:18:72:c4:6d:88:89:8c:f7:1b:c5:f1:25:4e:4b: 1c:f2:80:76:ea:eb:14:ed:1a:b5:9f:38:a7:b7:35: a0:81:13:00:ee:51:53:c5:c8:4f:59:11:22:4e:f5: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:06:78:25:A2:14:62:73:46:D8:D2:C4:0C:91:F0:3E:FC:93:F6 X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f5:1e:7c:b6:7e:e9:d6:aa:0d:5e:ef:f7:e6:72:a4:f1:9f: 8a:0d:45:e7:7b:23:ad:6a:aa:f4:2b:65:05:d7:c7:27:e5:14: 58:79:ae:ea:5c:f4:68:10:5c:ff:43:2b:81:50:52:8e:9a:ea: 39:11:c4:6c:80:4c:27:ff:ab:71:6e:4d:79:9c:50:5d:c6:66: bd:8b:b2:7c:6d:a7:5c:0b:c5:99:41:8d:26:3e:e4:60:1b:d6: 86:d5:4f:d0:b0:78:46:4e:8c:7b:5f:7f:9a:27:9f:f4:5a:36: f1:9a:10:ab:0b:5f:35:79:99:4d:53:c6:0f:0b:c8:49:6e:10: a5:02:05:47:8b:e3:fa:ba:3b:04:b0:7b:c3:aa:76:7c:ec:7e: 23:2e:b0:25:03:2b:55:52:f5:f7:f2:58:7b:e4:5a:90:10:9d: 5f:7a:c0:03:f4:b1:6e:b8:5a:05:d4:82:a1:8c:92:d8:65:aa: 86:23:f3:04:4c:51:3d:c0:3c:74:41:da:e8:ae:42:a3:49:3c: 8d:01:ec:86:3e:ea:89:01:e6:35:ea:0a:2c:e5:a7:23:c9:26: f4:36:b4:2b:18:8f:aa:05:36:1e:c8:b0:ff:8f:d3:80:27:48: 11:49:2f:53:00:e4:7c:b0:d2:07:13:1d:d7:c3:85:09:f0:5c: 17:8c:7b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUxMDE4MTUwMDUzWhcNMjUxMDI1MTUwMDUzWjAYMRYwFAYD VQQDEw02OGYzYWJhNi0yODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFAD1qxfP94nkDtehfGUlhyndFmVu3eK7WECUHEsfCXIelaWwXKTFj8EZTGT 4wtH7M4zYfFTTkN3rh0RecyiJ6jYgbviV4TauKF5itMqSv2+b248qcWqZk1qnK8Y 89VqbMOtvLYsJYG4wi7sT8olND0h7guTzt227TX/MOhxibaeNimJo6Kjy/LBFFx4 M8mNxXgIDt8rBritiJ8OgDsLFbZ0vmfnBIdo3bt/TGZVYmTMj5RFKNqoZqOqbQsU C+Uk+icayXrMuU74UHm3uamWouL8GHLEbYiJjPcbxfElTksc8oB26usU7Rq1nzin tzWggRMA7lFTxchPWREiTvXn6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN6Bngl ohRic0bY0sQMkfA+/JP2MB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb9R58tn7p1qoNXu/35nKk8Z+KDUXneyOtaqr0K2UF18cn5RRYea7q XPRoEFz/QyuBUFKOmuo5EcRsgEwn/6txbk15nFBdxma9i7J8badcC8WZQY0mPuRg G9aG1U/QsHhGTox7X3+aJ5/0WjbxmhCrC181eZlNU8YPC8hJbhClAgVHi+P6ujsE sHvDqnZ87H4jLrAlAytVUvX38lh75FqQEJ1fesAD9LFuuFoF1IKhjJLYZaqGI/ME TFE9wDx0QdrorkKjSTyNAeyGPuqJAeY16gos5acjySb0NrQrGI+qBTYeyLD/j9OA J0gRSS9TAOR8sNIHEx3Xw4UJ8FwXjHsB -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:48 2025 by rpki-client