$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: BXHSL9qBQG7xhLI8kc/Xks6AOzrdUQD7f4jVFIfE5Jk= Subject key identifier: 04:68:E8:DE:AA:EF:AB:B1:F2:30:A2:F1:92:82:34:2E:F5:4B:C3:2F Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 346E Signing time: Fri 04 Apr 2025 14:54:51 +0000 Manifest this update: Fri 04 Apr 2025 14:54:50 +0000 Manifest next update: Fri 11 Apr 2025 14:54:50 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: 8tJwbFa8Eua2292dfpLJJX3iT+zJg/cCsHwbdos+ugk=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774 Validity Not Before: Apr 4 14:54:50 2025 GMT Not After : Apr 11 14:54:50 2025 GMT Subject: CN=67eff2bb-6602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:5d:a1:a5:71:d9:6c:f5:3d:f5:5a:de:b0: c1:05:40:b2:9b:34:97:6a:13:a6:07:cf:09:1d:c5: 98:31:49:d0:21:38:92:8b:80:95:a0:30:04:ff:3f: 13:e1:57:d6:5d:20:77:59:47:5c:e9:ef:b1:f2:c2: 3a:ee:17:ac:82:be:5b:24:df:3b:e5:63:0b:09:61: ef:17:8d:42:cd:24:7d:a2:c4:5d:1c:5f:25:ed:47: 7a:a3:6b:f0:93:e1:01:69:16:82:89:70:fa:7c:9d: 1a:90:f1:79:b4:e4:4b:a8:51:9e:ca:47:43:f7:a6: d4:42:77:c7:ac:e1:f9:12:2f:88:4b:b9:04:9c:d5: 66:e1:32:04:00:25:23:a4:1e:0a:92:82:20:4c:7b: 28:69:66:b1:a9:4d:5d:91:05:ea:3b:95:77:b1:2c: 45:41:26:a2:e4:40:c1:78:c5:98:fc:fb:be:51:78: d2:a9:b9:a4:c9:25:73:11:2a:16:e0:3f:42:09:58: 14:e0:01:0e:5d:25:f6:60:b0:1a:ad:c2:b2:a4:d4: e7:4f:d9:ff:86:ff:b1:20:2c:89:ff:ac:f6:4c:39: ee:9b:fc:9c:01:ba:f6:4c:77:39:3e:1c:52:b0:15: fe:4b:d8:c7:66:41:42:40:37:e7:50:ec:7a:6c:c3: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:E8:DE:AA:EF:AB:B1:F2:30:A2:F1:92:82:34:2E:F5:4B:C3:2F X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:95:1c:02:8b:9f:20:ce:b5:8d:55:fd:62:5c:f3:0b:fc:e6: 15:4f:77:d2:39:5a:4f:6b:7e:14:2c:c9:6f:ce:58:a2:f1:c8: 8f:ae:c7:e5:67:18:06:0b:77:3f:20:c3:d1:f0:cf:b0:b6:e2: 8a:e7:a8:0b:0f:2e:95:d3:4d:a8:b9:60:06:29:61:f6:34:61: 54:97:c2:90:df:0b:18:ef:bc:5e:9c:24:d1:90:9e:7c:ff:52: cd:13:e7:4c:16:30:30:86:08:90:f4:b3:aa:0b:6a:50:4b:32: 45:c8:0d:7a:24:ee:d0:4c:1d:98:15:cb:01:57:28:fb:00:73: b9:7c:81:4d:05:9b:9b:0f:80:41:61:c4:38:8b:bb:a6:ab:43: f8:4d:19:12:ea:92:1d:b3:3c:6d:98:b7:1e:44:25:55:a2:c4: 79:1a:60:a8:1b:2b:39:3f:6e:18:65:f1:0f:97:76:73:7e:cd: 61:a6:ae:4f:ce:6d:a7:cd:f3:b8:e9:8e:df:87:03:b0:47:c4: eb:94:e4:c1:1f:ed:c7:5c:78:eb:68:62:76:e1:9a:56:ad:f9: 32:56:d8:de:58:43:5d:a6:28:b6:9d:0e:f4:e5:22:4f:10:5d: 73:a7:fb:56:b2:bf:67:00:50:a6:67:ee:f8:a8:cd:9a:b4:80: 10:6c:f4:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUwNDA0MTQ1NDUwWhcNMjUwNDExMTQ1NDUwWjAYMRYwFAYD VQQDEw02N2VmZjJiYi02NjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mBdoaVx2Wz1PfVa3rDBBUCymzSXahOmB88JHcWYMUnQITiSi4CVoDAE/z8T 4VfWXSB3WUdc6e+x8sI67hesgr5bJN875WMLCWHvF41CzSR9osRdHF8l7Ud6o2vw k+EBaRaCiXD6fJ0akPF5tORLqFGeykdD96bUQnfHrOH5Ei+IS7kEnNVm4TIEACUj pB4KkoIgTHsoaWaxqU1dkQXqO5V3sSxFQSai5EDBeMWY/Pu+UXjSqbmkySVzESoW 4D9CCVgU4AEOXSX2YLAarcKypNTnT9n/hv+xICyJ/6z2TDnum/ycAbr2THc5PhxS sBX+S9jHZkFCQDfnUOx6bMNuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARo6N6q 76ux8jCi8ZKCNC71S8MvMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQlRwCi58gzrWNVf1iXPML/OYVT3fSOVpPa34ULMlvzlii8ciPrsfl ZxgGC3c/IMPR8M+wtuKK56gLDy6V002ouWAGKWH2NGFUl8KQ3wsY77xenCTRkJ58 /1LNE+dMFjAwhgiQ9LOqC2pQSzJFyA16JO7QTB2YFcsBVyj7AHO5fIFNBZubD4BB YcQ4i7umq0P4TRkS6pIdszxtmLceRCVVosR5GmCoGys5P24YZfEPl3Zzfs1hpq5P zm2nzfO46Y7fhwOwR8TrlOTBH+3HXHjraGJ24ZpWrfkyVtjeWENdpii2nQ705SJP EF1zp/tWsr9nAFCmZ+74qM2atIAQbPSf -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:08 2025 by rpki-client