$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: hZsN7D5ZMStv/RZ7V1UYYKeilvvS1+MC4cDl/Mr+GEA= Subject key identifier: CE:94:C5:42:BD:B6:68:51:08:B2:EF:9D:5B:90:17:E4:92:0E:7D:D7 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 01A7 Signing time: Sun 15 Jun 2025 02:30:24 +0000 Manifest this update: Sun 15 Jun 2025 02:30:23 +0000 Manifest next update: Sun 22 Jun 2025 02:30:23 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: ppdPC8/uar7sTKOAZre5MbwvENII/fnNjY6Ba88gQ/s=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Jun 15 02:30:23 2025 GMT Not After : Jun 22 02:30:23 2025 GMT Subject: CN=684e303f-eebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:c8:ae:7a:84:43:20:48:29:10:96:14:86: 0b:27:05:4b:c3:ea:09:65:aa:70:11:73:00:2a:e5: 3a:87:0b:73:47:6e:ed:0a:be:5c:48:31:3b:c7:c3: 3b:37:84:8a:75:8a:53:ca:80:c4:b7:be:f9:19:52: 9c:15:7a:ba:b8:6d:84:25:1f:a7:c2:c8:a9:59:bf: 16:10:52:61:ac:41:9f:d6:45:33:2e:fe:40:0b:58: f9:8c:22:91:94:fe:ce:b3:25:6e:3b:5f:44:45:05: 2c:cb:62:30:d1:4a:7d:cd:22:ee:28:ab:3b:1e:12: 8e:a4:cf:95:fb:15:95:bb:c8:ad:95:0b:50:07:69: a1:1b:c3:5e:07:5b:fa:59:32:8e:7e:6e:c6:04:f2: 5d:e8:73:5d:7a:7c:40:f4:80:5f:8a:70:47:a8:1a: 65:bd:fd:28:8d:37:6d:68:b4:35:86:62:40:1c:e7: eb:dc:41:44:54:ad:c9:52:b4:6c:7a:eb:a8:6f:9d: 93:eb:4e:7e:d1:dd:50:c6:18:61:29:ba:ef:a5:d3: 03:d0:84:0d:81:d8:9f:94:e0:c1:0f:4a:03:c5:b6: 15:86:d1:49:c4:0d:40:c6:08:0c:76:67:92:31:23: 15:6a:96:4d:c2:80:23:f8:e8:80:46:7d:ef:69:dc: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:94:C5:42:BD:B6:68:51:08:B2:EF:9D:5B:90:17:E4:92:0E:7D:D7 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:fe:18:54:c9:f6:4b:b0:54:5c:f8:75:bb:ca:0b:df:71:8e: f4:78:3a:04:07:64:48:37:86:b5:75:e5:26:d4:2c:c2:f8:f1: b5:98:ae:5e:e0:ac:ed:38:bc:d5:c5:44:f2:94:80:5e:05:39: 46:74:86:e3:5e:c6:31:cf:47:9c:44:83:79:71:23:5e:ba:91: 8a:f7:ce:2b:74:3a:6a:cf:33:69:7c:40:18:c5:79:f4:3a:fa: 0c:fa:81:62:d0:d2:0e:c6:41:5d:68:de:03:dd:da:65:9a:10: 03:2c:4d:aa:c3:92:ab:15:2b:b4:27:0f:a5:4e:1e:aa:09:b2: 71:24:49:79:a4:e3:f4:d2:43:f9:cb:d7:f6:9b:a6:02:75:50: e6:35:97:b8:b1:38:7b:a4:60:a6:ef:96:58:49:92:59:6c:9f: 82:bd:18:42:ee:d5:3a:42:38:b4:13:a5:70:a2:ad:fc:3d:db: 4b:62:38:ff:df:9b:66:c2:6c:27:d6:13:cb:70:49:0b:b8:61: f7:bd:25:35:55:cd:b4:80:f3:e2:a8:5f:c6:26:08:ac:bc:eb: 6c:cb:40:09:04:81:d8:0d:6a:9e:44:5f:65:af:e8:02:4e:e6: a3:37:df:e3:32:b6:5c:c4:7b:63:0f:c1:f2:43:41:2a:d8:f3: f7:cc:e2:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUwNjE1MDIzMDIzWhcNMjUwNjIyMDIzMDIzWjAYMRYwFAYD VQQDEw02ODRlMzAzZi1lZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6s/IrnqEQyBIKRCWFIYLJwVLw+oJZapwEXMAKuU6hwtzR27tCr5cSDE7x8M7 N4SKdYpTyoDEt775GVKcFXq6uG2EJR+nwsipWb8WEFJhrEGf1kUzLv5AC1j5jCKR lP7OsyVuO19ERQUsy2Iw0Up9zSLuKKs7HhKOpM+V+xWVu8itlQtQB2mhG8NeB1v6 WTKOfm7GBPJd6HNdenxA9IBfinBHqBplvf0ojTdtaLQ1hmJAHOfr3EFEVK3JUrRs euuob52T605+0d1QxhhhKbrvpdMD0IQNgdiflODBD0oDxbYVhtFJxA1AxggMdmeS MSMVapZNwoAj+OiARn3vadxueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6UxUK9 tmhRCLLvnVuQF+SSDn3XMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj/hhUyfZLsFRc+HW7ygvfcY70eDoEB2RIN4a1deUm1CzC+PG1mK5e 4KztOLzVxUTylIBeBTlGdIbjXsYxz0ecRIN5cSNeupGK984rdDpqzzNpfEAYxXn0 OvoM+oFi0NIOxkFdaN4D3dplmhADLE2qw5KrFSu0Jw+lTh6qCbJxJEl5pOP00kP5 y9f2m6YCdVDmNZe4sTh7pGCm75ZYSZJZbJ+CvRhC7tU6Qji0E6Vwoq38PdtLYjj/ 35tmwmwn1hPLcEkLuGH3vSU1Vc20gPPiqF/GJgisvOtsy0AJBIHYDWqeRF9lr+gC TuajN9/jMrZcxHtjD8HyQ0Eq2PP3zOIF -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:51 2025 by rpki-client