$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: NWYh6EnGSgiBy66pI7LoplUgePW1SoKuOBS2VDA0nnk= Subject key identifier: 46:D7:19:A7:ED:46:72:6E:41:34:B0:F1:55:D4:09:78:38:09:C5:C9 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 01E7 Signing time: Sun 19 Oct 2025 05:00:41 +0000 Manifest this update: Sun 19 Oct 2025 05:00:40 +0000 Manifest next update: Sun 26 Oct 2025 05:00:40 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: 3+Sp0A8cnJ/yifHSO9/+Gavy74DQIRvhTGUeamwm1u8=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Oct 19 05:00:40 2025 GMT Not After : Oct 26 05:00:40 2025 GMT Subject: CN=68f47078-b75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:bf:e2:d5:48:ca:f3:70:cc:c9:fd:e3:bd: 29:14:70:49:9b:08:88:7c:ef:01:cf:8b:88:3c:33: e2:32:6b:22:9d:c7:6d:f4:3f:12:e4:13:d9:e3:16: 6a:00:87:b8:e6:a7:0e:9b:79:4b:ee:f5:be:b4:3d: 16:57:a8:81:b7:4c:97:38:b1:4a:a2:44:ef:a2:98: d9:49:67:dd:12:8f:f6:67:43:b4:5d:36:62:e9:99: 4a:2d:6a:14:b8:0c:a2:85:a2:0c:31:73:a3:d6:98: 39:db:63:83:9b:25:fa:fb:7e:82:d9:3e:52:3d:74: 9a:25:e1:c3:04:c3:66:cd:2a:03:e2:f4:58:0d:c9: b8:c7:45:20:48:b3:6f:11:19:c2:1e:be:61:35:be: 08:c5:34:08:3d:cc:e5:bf:51:50:3d:1a:50:ce:ff: 33:ff:9e:8a:86:1f:77:dc:a8:84:73:8c:cb:09:89: 37:31:de:d3:12:02:c5:04:99:b6:52:73:74:3d:37: 10:97:f0:1f:ce:c6:40:c3:8a:15:97:52:09:00:a9: ea:4c:b2:26:9f:6e:70:a7:c9:d3:7b:3f:2e:03:89: 25:70:7d:f3:2d:9e:c8:ba:1a:3c:79:7e:64:d8:63: 38:a7:20:b3:2f:85:8e:ad:ef:8f:2d:22:6d:66:c6: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D7:19:A7:ED:46:72:6E:41:34:B0:F1:55:D4:09:78:38:09:C5:C9 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:de:e7:5d:6e:07:58:e1:cb:11:f5:a0:e1:e4:6c:52:dd:4c: f7:91:97:4d:6c:76:7f:bc:1b:11:09:90:46:de:d6:0f:7c:6e: a5:61:c5:b6:4b:a6:c8:a6:62:5d:c2:4b:b3:d4:7d:27:43:01: bb:88:3f:a4:8e:90:9f:e9:db:be:f0:39:be:43:b7:b8:4f:0f: a5:e6:9b:85:1b:2a:10:dd:79:09:f0:cb:a0:c6:f7:14:0d:b2: b7:87:e8:45:c7:96:2b:06:48:ab:0b:f2:09:ff:b9:37:01:95: 7b:69:c9:21:7c:01:ab:dc:e8:fe:eb:f6:d4:6e:66:a7:e7:25: a1:90:9a:c1:7e:4f:5e:19:b9:15:04:7f:69:0f:9d:4a:22:39: 4b:9a:28:ed:9e:66:31:80:43:1b:b8:d1:67:71:f5:bb:82:b1: 0d:c7:4a:69:87:c6:75:de:c2:23:30:a2:7d:c6:5e:62:e6:9a: f1:b9:53:28:fc:62:23:83:bf:10:e6:fc:1c:b5:49:e4:fd:22: e7:fe:cc:ad:b4:81:9c:f7:65:ef:da:58:f0:27:97:58:63:7c: 6c:b8:bb:c1:14:00:33:79:49:e6:4c:e5:6d:2c:d4:ad:41:79: f9:c7:0f:9d:fc:cd:d9:eb:04:55:04:18:ba:b1:91:c5:2c:21: 83:7f:e7:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUxMDE5MDUwMDQwWhcNMjUxMDI2MDUwMDQwWjAYMRYwFAYD VQQDEw02OGY0NzA3OC1iNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/O/4tVIyvNwzMn9470pFHBJmwiIfO8Bz4uIPDPiMmsincdt9D8S5BPZ4xZq AIe45qcOm3lL7vW+tD0WV6iBt0yXOLFKokTvopjZSWfdEo/2Z0O0XTZi6ZlKLWoU uAyihaIMMXOj1pg522ODmyX6+36C2T5SPXSaJeHDBMNmzSoD4vRYDcm4x0UgSLNv ERnCHr5hNb4IxTQIPczlv1FQPRpQzv8z/56Khh933KiEc4zLCYk3Md7TEgLFBJm2 UnN0PTcQl/AfzsZAw4oVl1IJAKnqTLImn25wp8nTez8uA4klcH3zLZ7Iuho8eX5k 2GM4pyCzL4WOre+PLSJtZsaXhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbXGaft RnJuQTSw8VXUCXg4CcXJMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd3uddbgdY4csR9aDh5GxS3Uz3kZdNbHZ/vBsRCZBG3tYPfG6lYcW2 S6bIpmJdwkuz1H0nQwG7iD+kjpCf6du+8Dm+Q7e4Tw+l5puFGyoQ3XkJ8MugxvcU DbK3h+hFx5YrBkirC/IJ/7k3AZV7ackhfAGr3Oj+6/bUbman5yWhkJrBfk9eGbkV BH9pD51KIjlLmijtnmYxgEMbuNFncfW7grENx0pph8Z13sIjMKJ9xl5i5prxuVMo /GIjg78Q5vwctUnk/SLn/syttIGc92Xv2ljwJ5dYY3xsuLvBFAAzeUnmTOVtLNSt QXn5xw+d/M3Z6wRVBBi6sZHFLCGDf+dQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:27 2025 by rpki-client