$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: 87O5NejrZPi2MoxvDWQ25NdBLoeWWnYPSfortZ4rdSg= Subject key identifier: 4E:1A:19:A7:F9:F4:F1:C2:6B:D6:44:9B:C9:21:9F:D6:DA:4B:A5:F2 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 01CA Signing time: Sat 23 Aug 2025 02:59:57 +0000 Manifest this update: Sat 23 Aug 2025 02:59:56 +0000 Manifest next update: Sat 30 Aug 2025 02:59:56 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: fQwMCCaf7nU0+95WJ/xjuq8oLwQyjq0+yMLIvEVQQy4=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Aug 23 02:59:56 2025 GMT Not After : Aug 30 02:59:56 2025 GMT Subject: CN=68a92eac-6b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:4d:8a:3d:13:f1:fe:93:24:a9:b6:d4:f4: f2:cf:2e:a5:f6:c4:02:cc:dc:72:68:c0:5d:62:9a: a1:c2:ae:e7:78:e3:57:6a:57:f8:70:7d:50:db:98: 38:86:4c:25:e9:bb:ff:db:18:78:a8:de:33:ca:60: d0:e2:b9:28:74:ab:85:46:ee:1d:eb:86:e3:75:a0: f2:64:c2:ef:b6:47:7e:95:34:f5:67:67:6e:2c:f5: aa:1c:29:25:ac:e9:f2:d4:09:5f:4b:b4:41:be:94: 68:79:3c:34:af:b2:49:5c:09:8c:65:d2:99:03:da: 95:69:43:f3:fc:e5:37:3c:f4:62:d3:bd:e2:ca:44: 4f:be:f4:b2:42:5a:a7:ba:98:a3:e2:0b:c4:cf:ca: 00:35:1f:90:40:9a:f8:9e:60:68:23:27:96:26:83: d8:e0:ad:6f:2a:6f:f1:18:de:f7:48:59:21:19:29: 06:eb:13:46:6e:07:4d:9e:51:42:07:c9:01:d9:fd: 6a:37:d3:47:8d:c4:c9:2a:10:a7:ee:82:4e:df:08: 93:5c:3f:c1:e9:b1:ad:fe:66:aa:e1:1e:32:40:98: 95:2e:4f:f0:e9:fa:57:e7:1c:1c:61:ff:1c:ba:93: 55:5f:47:3c:bc:77:16:62:65:d4:55:97:9f:ec:51: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1A:19:A7:F9:F4:F1:C2:6B:D6:44:9B:C9:21:9F:D6:DA:4B:A5:F2 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a3:7d:ca:6c:88:f5:e3:e5:ee:d0:6e:dd:26:45:cd:49:af: 79:c9:89:96:63:31:ce:36:1c:e6:97:7f:b1:f9:06:90:02:f3: a0:eb:8c:83:61:cb:b0:90:5b:56:ba:b3:c9:a3:ed:bb:9d:dc: 55:f6:fe:7d:be:a8:58:4c:b1:f6:9d:b7:b7:8f:a3:75:87:89: 60:55:0e:b8:3d:30:d1:ed:8f:38:43:69:23:f4:11:bc:38:43: 8b:c1:d5:c5:e6:9c:18:71:22:31:fb:90:47:96:19:c4:e5:51: 9a:37:c2:37:96:0b:78:03:0b:95:d4:23:ff:c8:ee:04:3a:8d: 72:04:af:30:96:c8:99:20:14:0e:f7:30:bb:db:f5:9d:0e:9e: 86:34:53:b5:4d:05:81:d0:f0:75:2e:a0:d7:58:e9:bb:ab:8d: f5:56:d5:c2:9a:17:32:52:72:06:2a:7c:6f:d3:3b:9a:b8:6b: 9a:c9:46:57:f0:b0:71:e3:e1:f4:1e:2b:3f:cf:6c:f1:e0:14: e3:53:1b:d1:5b:5f:9a:b9:06:2b:79:9e:b0:9d:7a:02:67:8b: 6e:4f:a0:1c:37:ea:8f:63:3a:66:18:42:70:e0:cc:7d:6b:2d: 60:97:d0:d7:29:68:c9:33:a1:3f:87:ba:02:3e:9d:1e:89:2b: 26:8e:16:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUwODIzMDI1OTU2WhcNMjUwODMwMDI1OTU2WjAYMRYwFAYD VQQDEw02OGE5MmVhYy02YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqktNij0T8f6TJKm21PTyzy6l9sQCzNxyaMBdYpqhwq7neONXalf4cH1Q25g4 hkwl6bv/2xh4qN4zymDQ4rkodKuFRu4d64bjdaDyZMLvtkd+lTT1Z2duLPWqHCkl rOny1AlfS7RBvpRoeTw0r7JJXAmMZdKZA9qVaUPz/OU3PPRi073iykRPvvSyQlqn upij4gvEz8oANR+QQJr4nmBoIyeWJoPY4K1vKm/xGN73SFkhGSkG6xNGbgdNnlFC B8kB2f1qN9NHjcTJKhCn7oJO3wiTXD/B6bGt/maq4R4yQJiVLk/w6fpX5xwcYf8c upNVX0c8vHcWYmXUVZef7FH4SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4aGaf5 9PHCa9ZEm8khn9baS6XyMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHo33KbIj14+Xu0G7dJkXNSa95yYmWYzHONhzml3+x+QaQAvOg64yD YcuwkFtWurPJo+27ndxV9v59vqhYTLH2nbe3j6N1h4lgVQ64PTDR7Y84Q2kj9BG8 OEOLwdXF5pwYcSIx+5BHlhnE5VGaN8I3lgt4AwuV1CP/yO4EOo1yBK8wlsiZIBQO 9zC72/WdDp6GNFO1TQWB0PB1LqDXWOm7q431VtXCmhcyUnIGKnxv0zuauGuayUZX 8LBx4+H0His/z2zx4BTjUxvRW1+auQYreZ6wnXoCZ4tuT6AcN+qPYzpmGEJw4Mx9 ay1gl9DXKWjJM6E/h7oCPp0eiSsmjhZ8 -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:06 2025 by rpki-client