$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: TAzXhrHCCeppL5KE98RKhM7bt5X4FrNIRc2VVRW+rO4= Subject key identifier: 20:A0:2B:D5:6B:56:9E:0B:70:C3:6D:E6:56:D3:E6:F4:76:4C:B2:A5 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 0197 Signing time: Tue 13 May 2025 02:41:01 +0000 Manifest this update: Tue 13 May 2025 02:41:00 +0000 Manifest next update: Tue 20 May 2025 02:41:00 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: J6IJh6T8ztpiPFa736VWKnoxNiNXA8oTcd7se9LlAc8=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: May 13 02:41:00 2025 GMT Not After : May 20 02:41:00 2025 GMT Subject: CN=6822b13c-272e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:26:de:a6:11:cd:36:ef:67:31:d6:65:4f:e5: b2:bb:33:9e:8f:a4:09:6f:aa:13:48:0d:e7:47:02: 56:a3:98:e1:2a:4a:35:95:e7:36:0d:db:f3:83:91: 8a:af:44:4f:94:11:85:19:bb:c3:97:c2:1f:62:fb: fc:8d:b3:26:6f:10:4d:6c:59:4f:36:10:81:11:78: 3d:bc:a2:c6:8f:86:37:50:fc:ee:93:71:0a:ff:07: b4:fb:6b:b3:cb:ec:1a:6c:29:89:0a:aa:69:f1:a2: d1:9c:4f:5e:d0:dc:6e:8e:27:26:11:cd:d4:ef:21: fd:71:2e:ff:4a:8b:34:45:d8:18:ce:ed:c9:84:0c: 29:5b:9d:32:17:16:8e:4f:4a:01:c0:ff:9c:4a:ad: 9a:56:bc:bb:2a:b9:ae:b0:de:15:50:4f:7b:f5:e7: 3f:a8:61:36:5b:a9:fc:d2:7a:ac:5e:7f:b7:8f:48: d0:44:4e:c1:82:72:87:4d:36:e3:63:e0:7c:dd:5e: e6:2f:2a:40:33:e7:c6:b7:f0:60:b1:84:33:9a:47: a5:cf:4a:3f:34:fc:71:89:02:6c:c3:73:cd:72:30: 89:00:b6:34:b6:1d:d4:50:b9:23:a2:e6:16:d1:53: 0f:62:ae:4b:7c:f2:4e:9b:41:d0:ff:64:f2:ca:07: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:2B:D5:6B:56:9E:0B:70:C3:6D:E6:56:D3:E6:F4:76:4C:B2:A5 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3c:fb:67:b4:e5:ca:4d:52:cb:4e:e0:a1:1c:4e:e6:5f:07: 58:1b:49:be:67:9c:c1:2d:c0:93:52:bd:df:ff:b6:4f:13:6e: 93:b0:7f:86:22:87:ca:7d:4b:86:6f:7e:86:30:ba:8e:71:78: 6d:bc:38:41:18:1a:c6:6e:76:85:fa:e1:77:da:9a:51:9f:19: 3f:65:68:52:00:0a:f9:2b:f6:3f:17:1c:60:6f:5d:6d:72:b3: 2a:76:cb:79:e1:26:c6:1c:7f:59:a2:33:36:27:0c:46:c6:e6: 90:31:3b:d3:0b:45:0b:d6:bd:45:6a:e7:e7:b0:90:16:16:bf: b7:4d:95:ec:75:61:13:ba:ce:b1:7a:d4:33:fa:aa:fb:7e:92: ce:4c:30:68:30:25:94:2d:4f:d8:99:e9:71:a4:e9:8d:40:a9: 73:ee:d3:dc:fd:39:c7:3d:a9:7b:39:23:c8:35:29:87:ca:fd: 7e:7b:f9:98:3a:35:a1:9c:c3:0c:e7:04:4a:07:c7:5a:65:cc: 44:cc:27:2d:a4:fb:e3:e1:e1:92:66:6c:15:a2:43:1b:0a:70: 28:97:fa:e3:f8:f2:8c:94:c5:1d:08:c0:95:8e:8a:82:03:8b: 9a:1f:17:97:7b:d9:da:fd:06:d2:c7:8b:4c:ec:ad:f8:ee:51: 3b:f0:64:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUwNTEzMDI0MTAwWhcNMjUwNTIwMDI0MTAwWjAYMRYwFAYD VQQDEw02ODIyYjEzYy0yNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ibephHNNu9nMdZlT+WyuzOej6QJb6oTSA3nRwJWo5jhKko1lec2Ddvzg5GK r0RPlBGFGbvDl8IfYvv8jbMmbxBNbFlPNhCBEXg9vKLGj4Y3UPzuk3EK/we0+2uz y+wabCmJCqpp8aLRnE9e0NxujicmEc3U7yH9cS7/Sos0RdgYzu3JhAwpW50yFxaO T0oBwP+cSq2aVry7KrmusN4VUE979ec/qGE2W6n80nqsXn+3j0jQRE7BgnKHTTbj Y+B83V7mLypAM+fGt/BgsYQzmkelz0o/NPxxiQJsw3PNcjCJALY0th3UULkjouYW 0VMPYq5LfPJOm0HQ/2TyygeyHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCgK9Vr Vp4LcMNt5lbT5vR2TLKlMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALPPtntOXKTVLLTuChHE7mXwdYG0m+Z5zBLcCTUr3f/7ZPE26TsH+G IofKfUuGb36GMLqOcXhtvDhBGBrGbnaF+uF32ppRnxk/ZWhSAAr5K/Y/Fxxgb11t crMqdst54SbGHH9ZojM2JwxGxuaQMTvTC0UL1r1FaufnsJAWFr+3TZXsdWETus6x etQz+qr7fpLOTDBoMCWULU/YmelxpOmNQKlz7tPc/TnHPal7OSPINSmHyv1+e/mY OjWhnMMM5wRKB8daZcxEzCctpPvj4eGSZmwVokMbCnAol/rj+PKMlMUdCMCVjoqC A4uaHxeXe9na/QbSx4tM7K347lE78GSn -----END CERTIFICATE-----Generated at Tue May 13 04:40:27 2025 by rpki-client