$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: nB2MBh7Xi7sjLYrbM7QWWeWdmfAlQd1zNq35yL51/fI= Subject key identifier: D3:B6:ED:74:5C:1C:13:07:0C:22:CE:9D:0C:EA:B9:2D:1E:A7:BD:02 Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 349B Signing time: Wed 02 Jul 2025 14:57:12 +0000 Manifest this update: Wed 02 Jul 2025 14:57:11 +0000 Manifest next update: Wed 09 Jul 2025 14:57:11 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: H4IEMnNBdKcm9+opiPQ5pH9JMDgGxlJcxTXd9AQeE8s=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: Jul 2 14:57:11 2025 GMT Not After : Jul 9 14:57:11 2025 GMT Subject: CN=686548c7-450d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:dd:f8:49:f9:a4:ac:c2:fd:0e:ae:85:a8: 5e:c8:43:68:cb:bb:ce:d8:96:38:b8:2c:78:49:49: ac:3a:e3:5a:ca:c3:8d:c8:26:71:42:82:c1:1b:56: bf:36:71:28:39:d5:92:9a:2f:b4:73:65:f6:19:0a: aa:6c:5b:f4:01:5f:6b:16:23:30:56:3a:26:90:9d: d9:a4:fa:ee:e4:c9:91:f9:33:36:06:3e:45:d5:3f: 41:a6:59:81:35:7b:34:96:03:70:fb:27:2c:da:94: d9:8f:52:ac:cf:fb:52:73:09:ce:55:0f:cc:4a:03: 6e:f0:ee:59:59:0a:6b:c7:0a:68:21:a2:51:f8:21: 98:13:18:a8:6a:26:20:b8:06:7a:d6:a3:05:98:12: 13:09:7d:cc:1a:a7:f7:04:ba:fc:f8:45:7e:81:f6: e0:e1:80:e4:ae:71:f8:98:94:9f:fb:d8:65:6f:81: 04:10:cb:98:69:15:98:1b:c6:7e:30:17:31:cc:1d: 3b:f7:6b:33:ec:4f:3a:32:80:91:e0:7b:65:9e:cc: f7:a9:e9:4d:5d:05:ba:2a:bf:58:95:69:6a:64:b3: ab:a2:58:90:e9:b7:99:29:59:25:ba:17:c9:b2:72: 8c:75:0a:f9:03:9f:e6:a6:6b:b1:17:09:61:67:a5: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B6:ED:74:5C:1C:13:07:0C:22:CE:9D:0C:EA:B9:2D:1E:A7:BD:02 X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5f:b2:00:6a:d2:da:24:b7:0c:66:05:7a:69:0e:e4:04:f0: 1c:43:c9:de:54:a1:4a:41:90:66:43:94:5b:c7:38:7d:fa:1a: 26:62:94:b9:f3:4b:48:86:f3:ba:c6:9c:4a:1a:b8:1c:ce:b0: c3:5b:52:48:e0:a5:35:da:00:b6:58:45:04:af:04:14:6d:6c: e3:2c:2d:db:f1:23:e2:6f:15:6c:98:f0:5f:44:c3:b5:7e:a7: 67:74:90:10:db:f1:87:cb:b8:db:33:52:39:31:75:29:d1:53: 41:aa:25:56:a9:8a:11:9a:ab:f9:a1:2e:dd:14:db:3f:47:cf: 14:06:b1:93:5e:b3:9b:8d:28:68:f8:57:27:12:7e:21:1e:a2: 9e:ed:df:ae:71:ae:2d:52:c3:ef:48:20:a5:64:d7:c7:f6:e8: 29:fa:7a:1a:91:bc:8a:eb:3a:0c:d0:0a:52:a0:99:49:f1:cb: d8:e6:a5:9b:3b:0b:b3:6f:33:e5:36:b6:1c:d9:1c:d4:ae:7a: a6:5c:93:17:69:0e:9c:f2:98:4e:53:e8:52:34:e1:2c:06:a7: b3:1a:61:75:51:14:15:a1:4c:85:0b:40:75:19:d5:d9:c7:2c: e7:b1:3e:a0:b0:a0:4c:19:fd:78:08:30:75:44:14:84:d9:4f: 70:21:0c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUwNzAyMTQ1NzExWhcNMjUwNzA5MTQ1NzExWjAYMRYwFAYD VQQDEw02ODY1NDhjNy00NTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbvd+En5pKzC/Q6uhaheyENoy7vO2JY4uCx4SUmsOuNaysONyCZxQoLBG1a/ NnEoOdWSmi+0c2X2GQqqbFv0AV9rFiMwVjomkJ3ZpPru5MmR+TM2Bj5F1T9BplmB NXs0lgNw+ycs2pTZj1Ksz/tScwnOVQ/MSgNu8O5ZWQprxwpoIaJR+CGYExioaiYg uAZ61qMFmBITCX3MGqf3BLr8+EV+gfbg4YDkrnH4mJSf+9hlb4EEEMuYaRWYG8Z+ MBcxzB0792sz7E86MoCR4Htlnsz3qelNXQW6Kr9YlWlqZLOroliQ6beZKVkluhfJ snKMdQr5A5/mpmuxFwlhZ6UNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO27XRc HBMHDCLOnQzquS0ep70CMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOX7IAatLaJLcMZgV6aQ7kBPAcQ8neVKFKQZBmQ5Rbxzh9+homYpS5 80tIhvO6xpxKGrgczrDDW1JI4KU12gC2WEUErwQUbWzjLC3b8SPibxVsmPBfRMO1 fqdndJAQ2/GHy7jbM1I5MXUp0VNBqiVWqYoRmqv5oS7dFNs/R88UBrGTXrObjSho +FcnEn4hHqKe7d+uca4tUsPvSCClZNfH9ugp+noakbyK6zoM0ApSoJlJ8cvY5qWb OwuzbzPlNrYc2RzUrnqmXJMXaQ6c8phOU+hSNOEsBqezGmF1URQVoUyFC0B1GdXZ xyznsT6gsKBMGf14CDB1RBSE2U9wIQyq -----END CERTIFICATE-----Generated at Fri Jul 4 08:02:12 2025 by rpki-client