$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: CPHOEM1iFsDUL1sdxyx5FVA7tGACcUxVcHwitHeLVlA= Subject key identifier: 68:7F:62:5B:6E:E6:B5:9B:38:A7:8B:D3:E2:0B:84:67:B4:A1:E2:27 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 01B0 Signing time: Thu 03 Jul 2025 03:14:44 +0000 Manifest this update: Thu 03 Jul 2025 03:14:43 +0000 Manifest next update: Thu 10 Jul 2025 03:14:43 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: cKxeO3EmyVsW4ZjNkTvSJgc/aisJnugZQbiRx+K9VOA=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Jul 3 03:14:43 2025 GMT Not After : Jul 10 03:14:43 2025 GMT Subject: CN=6865f5a3-2d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:8b:9e:55:1f:f4:a1:b6:55:9b:dd:14:d4: 66:f1:48:5a:03:65:74:1e:0d:09:a6:5c:04:88:16: fb:42:eb:b8:9c:f3:44:2b:7e:47:fd:f9:69:57:ac: 57:5a:5f:41:82:62:49:35:5b:8a:5f:28:6e:ba:25: fa:53:54:33:cd:fc:fa:19:6b:95:92:7c:30:47:64: 25:05:29:55:ff:65:8d:a5:ca:b4:54:d3:f0:9c:ce: 07:41:42:ff:a8:6b:29:31:c4:18:4a:68:8b:e2:13: dc:8a:58:78:48:02:01:21:9a:53:ec:19:cb:2d:cd: 5c:37:86:69:dc:dd:fc:81:5f:7c:e3:b8:0d:2e:90: 27:9f:c5:6e:a9:f7:68:2c:61:68:5f:de:2e:01:57: 6a:08:d8:66:5b:90:8e:3b:76:ff:17:f8:30:54:9a: 8f:e3:b4:cc:13:ea:fc:14:52:72:b7:48:5f:a0:ea: ba:64:26:23:55:8a:ae:09:a3:73:f1:ff:02:d5:49: 85:1b:5d:d1:3b:5d:5e:4d:f1:b7:59:f8:f8:e5:50: 20:55:c3:bd:b0:27:06:9e:f4:67:47:9a:54:34:39: 7d:8c:03:36:a0:76:f3:c5:71:65:26:8f:56:e4:6a: 51:3f:ff:16:2c:bf:de:24:73:7c:51:41:f6:1f:9e: 66:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7F:62:5B:6E:E6:B5:9B:38:A7:8B:D3:E2:0B:84:67:B4:A1:E2:27 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7f:08:af:e0:ab:66:cc:1a:33:29:0c:cc:ad:89:c0:5d:e1: d0:71:ea:d8:db:db:fb:5f:4c:25:b9:8a:ca:c1:64:07:de:75: aa:c5:10:61:70:9f:26:de:e3:90:f0:45:db:a0:f7:7b:5e:df: ef:6d:04:dc:d2:ec:70:0e:0c:25:3a:5d:ad:45:9d:e7:d8:6c: b1:40:57:44:bc:87:ce:e3:b3:f1:ea:57:1f:47:53:b1:16:d4: 10:26:9d:3a:4b:d2:53:d6:96:1e:65:22:4d:ac:1a:b9:b5:db: 25:78:64:35:c5:cc:e4:a8:28:27:20:9a:f7:a0:59:51:b8:b1: 9f:1d:68:3e:18:ba:c0:09:cd:08:4a:0c:e0:87:e0:1e:8a:ee: 23:6c:8b:e9:63:4c:d1:46:37:40:8d:e6:64:90:fd:71:43:9e: ad:bc:75:e7:07:77:18:c4:f2:6c:86:c8:02:b3:68:8b:43:73: 8c:20:41:11:a6:e8:52:d3:87:bb:9a:a3:45:52:a3:38:0c:67: c5:c8:83:d5:68:cf:f8:68:d2:3e:49:af:fc:be:f3:c3:cc:7e: 00:b0:d4:00:88:43:ba:50:e6:94:ff:4d:39:0b:2e:20:ca:ce: 65:57:ab:6c:ba:c1:b3:e1:6a:98:4c:37:0f:d7:f1:03:42:f5: 7b:13:49:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUwNzAzMDMxNDQzWhcNMjUwNzEwMDMxNDQzWjAYMRYwFAYD VQQDEw02ODY1ZjVhMy0yZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXGLnlUf9KG2VZvdFNRm8UhaA2V0Hg0JplwEiBb7Quu4nPNEK35H/flpV6xX Wl9BgmJJNVuKXyhuuiX6U1Qzzfz6GWuVknwwR2QlBSlV/2WNpcq0VNPwnM4HQUL/ qGspMcQYSmiL4hPcilh4SAIBIZpT7BnLLc1cN4Zp3N38gV9847gNLpAnn8Vuqfdo LGFoX94uAVdqCNhmW5COO3b/F/gwVJqP47TME+r8FFJyt0hfoOq6ZCYjVYquCaNz 8f8C1UmFG13RO11eTfG3Wfj45VAgVcO9sCcGnvRnR5pUNDl9jAM2oHbzxXFlJo9W 5GpRP/8WLL/eJHN8UUH2H55mewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh/Yltu 5rWbOKeL0+ILhGe0oeInMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACfwiv4KtmzBozKQzMrYnAXeHQcerY29v7X0wluYrKwWQH3nWqxRBh cJ8m3uOQ8EXboPd7Xt/vbQTc0uxwDgwlOl2tRZ3n2GyxQFdEvIfO47Px6lcfR1Ox FtQQJp06S9JT1pYeZSJNrBq5tdsleGQ1xczkqCgnIJr3oFlRuLGfHWg+GLrACc0I Sgzgh+Aeiu4jbIvpY0zRRjdAjeZkkP1xQ56tvHXnB3cYxPJshsgCs2iLQ3OMIEER puhS04e7mqNFUqM4DGfFyIPVaM/4aNI+Sa/8vvPDzH4AsNQAiEO6UOaU/005Cy4g ys5lV6tsusGz4WqYTDcP1/EDQvV7E0kl -----END CERTIFICATE-----Generated at Fri Jul 4 21:59:05 2025 by rpki-client