$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: zYGHHNZrtmTQ82MTePHwypj8ZJmabpaPCg8FkTX9ZHI= Subject key identifier: 05:1B:CB:EA:26:C4:FD:91:B6:BE:79:85:9D:B2:77:75:CC:23:FB:50 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 018E Signing time: Fri 25 Apr 2025 02:40:15 +0000 Manifest this update: Fri 25 Apr 2025 02:40:14 +0000 Manifest next update: Fri 02 May 2025 02:40:14 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: tdR9jiaR7/1Xt9xl4nfJA4yJghafTYhciC4OO8k8rmw=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Apr 25 02:40:14 2025 GMT Not After : May 2 02:40:14 2025 GMT Subject: CN=680af60f-d3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:29:4d:00:73:b6:36:67:c8:ec:7b:bd:b5: a8:d4:62:44:fa:91:d9:7e:96:6b:f9:63:21:f5:ad: 37:6d:5e:4e:6d:b4:84:7f:ed:ef:cf:c0:2b:e9:60: 8d:37:0c:99:28:cc:33:0d:53:fe:37:9a:d0:12:76: fa:e9:7c:2c:66:20:f4:c5:e5:69:f7:08:01:22:04: 22:85:0c:a4:a5:e2:9b:e6:80:03:9a:95:32:24:ee: f7:b9:3f:74:13:3a:50:83:54:49:59:b1:6d:2b:b3: 40:a2:eb:d4:77:01:b4:82:a3:54:93:9e:cf:89:a9: f9:80:f8:34:51:8b:3a:b5:37:91:d8:9b:e1:5f:c6: 75:8c:32:f8:f2:fc:b4:1d:b5:13:92:8b:91:a2:e9: 8a:47:33:ad:64:96:dd:91:39:b9:ea:77:e8:85:46: 2d:24:a3:7b:5b:9f:e4:6e:4f:21:9b:fd:33:31:05: fa:dd:8e:9b:37:0b:2c:a6:72:b6:c6:58:54:7e:6d: 76:c2:95:2a:f7:e5:11:72:4c:82:81:05:c7:61:74: 3f:70:24:dc:29:80:1c:e0:c0:a9:91:95:4a:cb:39: 5c:4b:5a:96:44:42:ab:91:7d:ed:a0:b2:49:05:d3: 57:6f:ec:14:54:c6:51:c0:d6:d5:45:ec:11:14:d1: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1B:CB:EA:26:C4:FD:91:B6:BE:79:85:9D:B2:77:75:CC:23:FB:50 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c5:bc:00:05:b2:62:f0:e3:6e:c6:e9:81:54:cb:76:aa:bd: a8:e6:d3:1f:47:1f:6e:0e:68:39:a4:f5:43:b2:29:1d:36:9d: 72:e5:2d:7f:63:d2:92:a3:cb:d8:97:4d:02:f0:46:b0:42:83: a8:b3:2d:5c:d0:60:8d:7f:fb:13:00:00:24:6e:8b:4c:95:01: c8:7c:f7:c1:cf:f0:ee:02:86:05:ec:4c:3d:e5:58:4c:0d:70: 16:2d:bb:ba:67:2b:62:0a:3d:f8:08:f4:be:41:55:60:b4:35: cb:c2:c1:45:ee:f8:2b:2e:91:e5:bb:2a:09:e2:cb:d8:66:af: 02:55:f5:55:68:bb:9e:56:a5:85:1a:57:09:01:16:9c:c0:44: ae:98:e9:70:ce:f4:b7:b8:c9:4b:67:4d:53:15:30:ee:cc:70: 71:cf:1b:21:04:0d:4e:23:64:3a:1f:80:d7:20:23:03:e4:ee: e3:62:d5:58:ca:70:32:9b:57:84:96:8d:e0:28:b2:7b:bd:a3: 12:62:cd:7e:c4:03:1a:2d:02:d3:99:66:05:90:38:5d:b4:74: ea:98:cb:cf:8f:6b:eb:8f:12:ce:5d:2f:bd:2e:fd:0c:03:bc: d4:dd:cb:3f:07:50:b1:2f:77:e2:c3:6a:49:c6:c7:40:d1:eb: 75:ef:aa:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUwNDI1MDI0MDE0WhcNMjUwNTAyMDI0MDE0WjAYMRYwFAYD VQQDEw02ODBhZjYwZi1kM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiQpTQBztjZnyOx7vbWo1GJE+pHZfpZr+WMh9a03bV5ObbSEf+3vz8Ar6WCN NwyZKMwzDVP+N5rQEnb66XwsZiD0xeVp9wgBIgQihQykpeKb5oADmpUyJO73uT90 EzpQg1RJWbFtK7NAouvUdwG0gqNUk57Pian5gPg0UYs6tTeR2JvhX8Z1jDL48vy0 HbUTkouRoumKRzOtZJbdkTm56nfohUYtJKN7W5/kbk8hm/0zMQX63Y6bNwsspnK2 xlhUfm12wpUq9+URckyCgQXHYXQ/cCTcKYAc4MCpkZVKyzlcS1qWREKrkX3toLJJ BdNXb+wUVMZRwNbVRewRFNEsZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUby+om xP2Rtr55hZ2yd3XMI/tQMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcxbwABbJi8ONuxumBVMt2qr2o5tMfRx9uDmg5pPVDsikdNp1y5S1/ Y9KSo8vYl00C8EawQoOosy1c0GCNf/sTAAAkbotMlQHIfPfBz/DuAoYF7Ew95VhM DXAWLbu6ZytiCj34CPS+QVVgtDXLwsFF7vgrLpHluyoJ4svYZq8CVfVVaLueVqWF GlcJARacwESumOlwzvS3uMlLZ01TFTDuzHBxzxshBA1OI2Q6H4DXICMD5O7jYtVY ynAym1eElo3gKLJ7vaMSYs1+xAMaLQLTmWYFkDhdtHTqmMvPj2vrjxLOXS+9Lv0M A7zU3cs/B1CxL3fiw2pJxsdA0et176og -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:49 2025 by rpki-client