$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: K2blzeLZQ7f6K3vrp1HSIWZCQ1ZwgNyN3i56oW0Cau0= Subject key identifier: DF:41:55:13:CA:69:A3:DD:5E:A3:AA:63:02:CE:B4:29:73:75:B3:7B Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 34DD Signing time: Tue 04 Nov 2025 14:57:39 +0000 Manifest this update: Tue 04 Nov 2025 14:57:39 +0000 Manifest next update: Tue 11 Nov 2025 14:57:39 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: Dwq3Y/XLIBWNLL6LN9oaC5m5lsIkQPajkYY5reDfdnw=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: mHUNvL3zJnpmbPqxHDIgKHTL5AEKLo79So94ufeiHA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: Nov 4 14:57:39 2025 GMT Not After : Nov 11 14:57:39 2025 GMT Subject: CN=690a1463-613f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:c4:1b:ea:55:4d:a8:c4:21:c6:9e:cd:e9: 04:6f:9b:04:f1:70:31:5a:bc:97:b2:a0:4a:92:34: 52:db:05:b8:29:05:55:c9:c8:ba:85:79:df:72:4a: 9d:04:18:ef:30:57:25:45:b5:4e:ff:1c:03:f8:a9: 57:1d:54:93:af:0d:da:5f:e1:fd:9e:1a:8c:42:95: 5f:3e:b6:6a:07:74:26:8b:24:46:87:fc:a8:a0:d2: 2a:81:2d:5b:6b:cb:87:6f:40:55:1f:97:1b:0e:04: cd:3d:39:1f:a7:ef:31:75:29:79:fc:a3:bb:45:c5: 4e:2e:9d:97:aa:9f:5c:c8:f5:07:fe:5b:8b:db:91: d8:6b:90:fb:a1:2f:60:46:d4:22:e4:e9:77:a2:d6: 4c:bf:93:50:47:71:45:55:5a:4f:cb:2c:86:a4:ea: b0:54:6f:14:44:82:71:90:56:cb:77:4c:ef:0d:9c: ee:8e:05:a1:fc:ea:fd:fa:7c:0a:45:d8:cd:6c:93: a2:8b:81:f1:bf:7f:12:57:c1:31:6b:59:ee:fc:5b: d1:cf:8b:86:3e:64:b3:08:0e:1c:50:61:35:c7:66: 2f:9b:8c:73:d1:7b:a0:a3:b1:99:e5:a4:6f:dc:7b: 27:80:05:86:6d:20:91:2c:6d:be:32:a9:e8:1b:ea: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:55:13:CA:69:A3:DD:5E:A3:AA:63:02:CE:B4:29:73:75:B3:7B X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:11:ef:ea:7e:ae:81:52:8d:42:2a:cd:3c:cf:cd:76:69:09: af:d2:c9:5d:a4:13:35:3e:05:3f:0f:fe:1a:23:c8:06:b0:20: e3:6d:22:96:4e:ff:94:f3:22:ae:b6:f8:b7:a1:50:6b:25:5c: c2:40:da:8d:bd:e6:50:a9:aa:9f:73:53:07:06:1e:db:d2:79: 5a:75:c9:1f:e0:5a:9a:28:4c:46:d1:48:10:30:39:27:bd:7b: 80:3f:50:b0:93:ba:5e:a9:8e:cb:36:6c:a0:e8:de:28:fd:21: 13:a8:4b:9a:09:b4:dd:25:6a:71:e9:fc:d5:22:be:cd:e5:f4: df:e3:6e:dd:df:6b:03:49:6f:f0:4c:ec:cb:9e:92:d3:eb:88: ba:5f:44:19:35:07:a5:13:4a:e4:77:fa:56:b4:1a:80:10:a6: 78:9c:65:bc:4b:6b:0c:f1:db:79:b7:ee:98:cb:84:32:b9:ba: e1:b1:0a:48:d0:01:5c:5a:fc:b6:c0:ac:24:4f:be:76:a5:f7: 7a:6c:85:14:19:57:b2:0a:bf:b2:80:fb:62:50:9e:00:31:8a: e9:10:ba:6e:20:79:fa:82:1e:fc:54:f2:bf:4e:3c:ba:63:7f: 39:c0:4d:1d:22:f0:7f:67:5e:c4:0f:1c:a7:9e:8e:02:64:d0: 84:dc:16:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjUxMTA0MTQ1NzM5WhcNMjUxMTExMTQ1NzM5WjAYMRYwFAYD VQQDEw02OTBhMTQ2My02MTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GLEG+pVTajEIcaezekEb5sE8XAxWryXsqBKkjRS2wW4KQVVyci6hXnfckqd BBjvMFclRbVO/xwD+KlXHVSTrw3aX+H9nhqMQpVfPrZqB3QmiyRGh/yooNIqgS1b a8uHb0BVH5cbDgTNPTkfp+8xdSl5/KO7RcVOLp2Xqp9cyPUH/luL25HYa5D7oS9g RtQi5Ol3otZMv5NQR3FFVVpPyyyGpOqwVG8URIJxkFbLd0zvDZzujgWh/Or9+nwK RdjNbJOii4Hxv38SV8Exa1nu/FvRz4uGPmSzCA4cUGE1x2Yvm4xz0Xugo7GZ5aRv 3HsngAWGbSCRLG2+MqnoG+ohTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9BVRPK aaPdXqOqYwLOtClzdbN7MB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByEe/qfq6BUo1CKs08z812aQmv0sldpBM1PgU/D/4aI8gGsCDjbSKW Tv+U8yKutvi3oVBrJVzCQNqNveZQqaqfc1MHBh7b0nladckf4FqaKExG0UgQMDkn vXuAP1Cwk7peqY7LNmyg6N4o/SETqEuaCbTdJWpx6fzVIr7N5fTf427d32sDSW/w TOzLnpLT64i6X0QZNQelE0rkd/pWtBqAEKZ4nGW8S2sM8dt5t+6Yy4QyubrhsQpI 0AFcWvy2wKwkT752pfd6bIUUGVeyCr+ygPtiUJ4AMYrpELpuIHn6gh78VPK/Tjy6 Y385wE0dIvB/Z17EDxynno4CZNCE3BbQ -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:39 2025 by rpki-client