$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: yhgj6KGu/K9QGy8jUZmoT2o/Lh3FQs3/pBtiV7OOEHg= Subject key identifier: 39:B9:F4:C8:63:B9:E5:4E:43:93:DA:3D:C1:C5:56:65:B0:56:6A:A6 Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 34A3 Signing time: Fri 18 Jul 2025 14:56:15 +0000 Manifest this update: Fri 18 Jul 2025 14:56:14 +0000 Manifest next update: Fri 25 Jul 2025 14:56:14 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: HBOcK6SeZ2u0By1PCyvyhFbdldDL9t1/Ln6hmmUO+04=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: Jul 18 14:56:14 2025 GMT Not After : Jul 25 14:56:14 2025 GMT Subject: CN=687a608e-c720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:0d:fd:2a:00:7e:37:0d:e6:74:8e:78:2e: 15:94:b0:4e:2f:fb:d8:ad:17:fe:38:a2:a6:1c:cb: 4f:6a:ee:f5:42:3d:66:9e:ac:c8:d6:d4:cc:9b:11: fb:c4:2a:02:02:c5:5b:ff:1e:4e:23:4a:14:48:de: 87:e0:80:7c:eb:23:d1:d8:ff:d6:28:b1:1a:64:6b: 23:b1:32:e5:34:17:d2:2d:7d:26:06:4f:5e:35:b8: fa:6a:be:67:a7:3b:ce:64:6a:a7:f2:60:d7:14:7c: 33:7f:c1:a5:ce:c0:8e:b9:56:17:3e:94:49:22:75: c9:37:b9:0d:c8:90:9c:24:b1:6a:4b:ec:c6:8b:f3: e8:ed:fd:11:b2:cd:df:a4:fe:15:a8:03:79:c8:6d: 65:d8:72:87:3d:07:ae:e5:ba:c8:43:82:a4:08:94: f6:55:74:c9:d9:8b:74:8b:d0:df:8a:f1:3a:99:ec: 34:f6:e8:f4:5b:2f:ab:82:ce:90:ca:79:c8:8c:cc: b0:52:d4:31:72:66:86:85:80:15:7d:f5:eb:b6:a7: 4c:0a:3f:d1:54:aa:89:a2:51:1b:3c:e6:cf:b3:85: bb:f5:2c:88:ed:8e:bb:48:3f:10:1e:86:60:f8:20: 10:af:f8:69:c9:01:17:c8:50:f2:3f:7d:0d:10:e2: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:F4:C8:63:B9:E5:4E:43:93:DA:3D:C1:C5:56:65:B0:56:6A:A6 X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7d:b8:bc:e5:83:63:26:92:32:a2:cc:93:23:c9:fe:de:cd: 72:11:bb:39:e0:c3:e7:56:bd:00:0f:50:a2:ad:4c:83:f4:63: 8e:76:f4:3f:2c:40:3c:8f:09:34:34:4f:a5:c9:90:7a:9f:08: 63:1b:fc:59:3e:f3:8f:4a:f8:97:dd:e4:cc:ad:35:9f:d3:66: 17:2e:0e:75:a1:6f:1f:f7:b8:40:e0:4c:ba:38:9d:6b:d6:53: 9a:34:e1:9a:68:81:bb:7d:c9:9f:b5:9a:ec:8e:02:69:3d:3a: dc:f4:79:ae:36:bf:5c:67:f7:cc:5f:4d:84:79:95:98:c1:d4: e9:e8:86:9c:fb:10:53:10:71:d2:1e:b9:04:b3:00:c4:70:2e: 16:ce:b2:75:2d:b6:71:39:d3:8b:31:18:a1:d9:8d:d6:08:62: 35:32:c7:d8:a8:7f:61:ab:83:8c:2a:8d:1c:bb:90:92:26:c1: f6:ed:27:63:0a:eb:4b:e1:78:40:8e:94:ff:54:0c:06:c6:56: 19:40:a6:32:8e:08:a7:ca:61:60:6d:95:ac:c3:15:ae:f9:3e: ab:65:14:73:28:f0:91:81:e3:5e:0b:b9:df:15:d7:8b:eb:03: ad:68:a3:12:e0:11:ca:56:34:f1:a0:8c:54:8f:03:96:75:3a: e7:8e:72:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUwNzE4MTQ1NjE0WhcNMjUwNzI1MTQ1NjE0WjAYMRYwFAYD VQQDEw02ODdhNjA4ZS1jNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIQN/SoAfjcN5nSOeC4VlLBOL/vYrRf+OKKmHMtPau71Qj1mnqzI1tTMmxH7 xCoCAsVb/x5OI0oUSN6H4IB86yPR2P/WKLEaZGsjsTLlNBfSLX0mBk9eNbj6ar5n pzvOZGqn8mDXFHwzf8GlzsCOuVYXPpRJInXJN7kNyJCcJLFqS+zGi/Po7f0Rss3f pP4VqAN5yG1l2HKHPQeu5brIQ4KkCJT2VXTJ2Yt0i9DfivE6mew09uj0Wy+rgs6Q ynnIjMywUtQxcmaGhYAVffXrtqdMCj/RVKqJolEbPObPs4W79SyI7Y67SD8QHoZg +CAQr/hpyQEXyFDyP30NEOL5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm59Mhj ueVOQ5PaPcHFVmWwVmqmMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCufbi85YNjJpIyosyTI8n+3s1yEbs54MPnVr0AD1CirUyD9GOOdvQ/ LEA8jwk0NE+lyZB6nwhjG/xZPvOPSviX3eTMrTWf02YXLg51oW8f97hA4Ey6OJ1r 1lOaNOGaaIG7fcmftZrsjgJpPTrc9HmuNr9cZ/fMX02EeZWYwdTp6Iac+xBTEHHS HrkEswDEcC4WzrJ1LbZxOdOLMRih2Y3WCGI1MsfYqH9hq4OMKo0cu5CSJsH27Sdj CutL4XhAjpT/VAwGxlYZQKYyjginymFgbZWswxWu+T6rZRRzKPCRgeNeC7nfFdeL 6wOtaKMS4BHKVjTxoIxUjwOWdTrnjnLE -----END CERTIFICATE-----Generated at Sun Jul 20 07:53:09 2025 by rpki-client