$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: hDiLWDgYpAcrEiYRHCxSyrIkIKF5tUmAdZd3c2xiXXk= Subject key identifier: 3C:ED:3F:98:05:D8:E5:5F:CE:60:E9:A1:37:DF:90:7F:88:76:BD:3C Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 347E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 3478 Signing time: Thu 24 Apr 2025 14:54:27 +0000 Manifest this update: Thu 24 Apr 2025 14:54:26 +0000 Manifest next update: Thu 01 May 2025 14:54:26 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: sCqtW7IFLf71hMUJqFMyBwQyHmlbWvoH/g34pf0AA4U=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13438 (0x347e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: Apr 24 14:54:26 2025 GMT Not After : May 1 14:54:26 2025 GMT Subject: CN=680a50a3-3c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:6f:0a:85:1c:a3:ff:29:dd:2f:6c:49:d8: 6d:76:70:c3:02:23:98:20:c2:ff:7d:53:1d:82:d9: 4d:b3:3e:37:a4:24:90:75:ed:b7:3c:c8:50:d0:43: b3:61:ac:fb:d5:3a:6f:21:50:db:64:54:b4:be:d9: 34:68:88:86:6e:9d:96:de:e1:06:ac:2c:a9:32:a3: 31:8e:03:b6:3c:43:a8:49:38:aa:d0:4a:fa:d4:ce: 17:78:e1:cf:4a:5e:ee:68:92:ec:db:bc:da:5a:c8: 91:34:67:ff:0a:57:35:75:35:f1:5e:18:ac:39:f7: fc:b3:a9:d1:26:c8:b7:b3:e2:29:54:ad:b8:d3:0b: 92:db:46:73:eb:a7:61:3f:b5:9a:2b:0f:03:12:eb: 04:aa:b2:06:35:ab:4f:b7:ab:52:72:b0:97:7c:a4: 1c:93:de:f3:9b:e9:ea:89:67:07:f5:3b:c2:9b:1b: 8c:53:96:9e:50:07:4a:ee:78:5f:2f:fa:ac:1f:30: 04:8e:6a:55:5e:71:ac:a8:50:7a:23:46:8e:c5:76: da:d1:4f:9b:8c:ea:ff:c4:f8:eb:fb:65:6e:2f:f9: 8f:e8:62:6a:fd:d9:10:c0:51:ab:b0:c5:0c:e7:bb: 9a:0b:75:d9:6f:12:1a:aa:ec:be:96:dd:06:09:07: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:ED:3F:98:05:D8:E5:5F:CE:60:E9:A1:37:DF:90:7F:88:76:BD:3C X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fc:f4:0b:55:a5:29:62:f0:8e:b9:b6:62:4e:66:8c:01:63: 1e:b6:66:99:52:1d:58:58:77:85:c2:04:1d:45:aa:de:a9:b8: cc:85:0b:9b:9f:42:7a:46:34:9b:59:b8:25:33:50:12:fb:31: 90:f7:d4:a9:32:ea:90:87:df:bd:6c:de:9b:21:1d:8f:78:17: 17:07:83:2d:54:e7:ed:9f:17:ea:38:5d:e1:40:bb:27:3f:98: 40:99:a5:00:ba:7a:f9:85:e8:99:30:21:de:8d:9a:ca:85:5b: b5:fd:a7:0c:8a:53:1f:39:85:09:b0:98:0e:34:c7:0c:e8:81: 76:42:33:9d:77:30:f0:f8:e5:04:67:4f:c1:9c:5e:0f:d8:9b: e5:f0:72:dc:63:88:72:a0:d9:c0:1d:60:65:a2:e3:0e:56:a8: 0a:1c:37:72:c7:dc:ed:bd:a9:f7:58:20:91:d2:2a:7e:8e:b4: 31:1e:37:ab:d0:c2:a9:5d:54:c4:74:be:98:45:7c:e2:0e:8a: 6f:85:19:43:c3:3b:e9:cc:1a:f5:40:bb:85:8e:b2:7c:8d:6e: f7:1f:c1:6f:1b:90:f1:4a:47:19:d1:04:43:49:31:00:c9:47: cc:f7:fd:de:a6:fe:cc:58:a2:fc:19:b6:f8:71:ef:f0:5e:4a: 6a:68:c8:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUwNDI0MTQ1NDI2WhcNMjUwNTAxMTQ1NDI2WjAYMRYwFAYD VQQDEw02ODBhNTBhMy0zYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAondvCoUco/8p3S9sSdhtdnDDAiOYIML/fVMdgtlNsz43pCSQde23PMhQ0EOz Yaz71TpvIVDbZFS0vtk0aIiGbp2W3uEGrCypMqMxjgO2PEOoSTiq0Er61M4XeOHP Sl7uaJLs27zaWsiRNGf/Clc1dTXxXhisOff8s6nRJsi3s+IpVK240wuS20Zz66dh P7WaKw8DEusEqrIGNatPt6tScrCXfKQck97zm+nqiWcH9TvCmxuMU5aeUAdK7nhf L/qsHzAEjmpVXnGsqFB6I0aOxXba0U+bjOr/xPjr+2VuL/mP6GJq/dkQwFGrsMUM 57uaC3XZbxIaquy+lt0GCQd23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDztP5gF 2OVfzmDpoTffkH+Idr08MB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK/PQLVaUpYvCOubZiTmaMAWMetmaZUh1YWHeFwgQdRareqbjMhQub n0J6RjSbWbglM1AS+zGQ99SpMuqQh9+9bN6bIR2PeBcXB4MtVOftnxfqOF3hQLsn P5hAmaUAunr5heiZMCHejZrKhVu1/acMilMfOYUJsJgONMcM6IF2QjOddzDw+OUE Z0/BnF4P2Jvl8HLcY4hyoNnAHWBlouMOVqgKHDdyx9ztvan3WCCR0ip+jrQxHjer 0MKpXVTEdL6YRXziDopvhRlDwzvpzBr1QLuFjrJ8jW73H8FvG5DxSkcZ0QRDSTEA yUfM9/3epv7MWKL8Gbb4ce/wXkpqaMgr -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:35 2025 by rpki-client