$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: wdti6XNixnIru5u1EMNKg17PNVmxNnJMh8yP+hFOAJc= Subject key identifier: 13:D8:43:82:86:E0:BA:D4:F5:B6:9E:76:7E:74:7B:C6:57:09:3E:5A Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 01EE Signing time: Mon 03 Nov 2025 02:31:10 +0000 Manifest this update: Mon 03 Nov 2025 02:31:10 +0000 Manifest next update: Mon 10 Nov 2025 02:31:10 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: Mfjs4enbi1Lpg/lcCcCAqRJ3wb6uQcJpVjnQ/XVBTaQ=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Nov 3 02:31:10 2025 GMT Not After : Nov 10 02:31:10 2025 GMT Subject: CN=690813ee-d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:3f:88:f6:bc:97:de:8d:d7:bd:b8:c1:e7: 30:7f:29:ba:44:49:3c:35:2d:3d:ea:dd:36:be:49: 9e:66:d7:25:0a:4c:20:d3:a3:aa:2e:72:67:ab:72: b9:2c:d9:a8:e9:d8:c0:04:21:ad:63:d0:8a:81:e0: 4c:d6:37:aa:07:a8:b1:0f:ee:82:b1:4b:7c:4a:7b: c1:ea:48:30:49:90:06:82:b5:a5:84:b6:e9:7d:3b: f2:65:8e:e8:c1:e9:46:c6:d0:2c:d7:ea:ab:cb:1f: a2:c5:18:c4:cb:41:4b:8d:17:61:96:5b:c9:4a:14: f2:fc:9b:3a:57:49:ec:89:ef:d2:be:c0:1b:0d:a0: 09:5c:29:57:9e:69:39:2a:cf:47:cd:ca:d1:9c:f9: 24:9c:1a:38:13:54:34:d6:78:6d:a5:f3:9d:a0:3b: d4:9e:5b:f3:8d:cf:49:8c:c4:08:3a:ef:43:81:bd: 32:27:b0:0c:5f:18:fe:63:86:a8:d1:59:0a:93:f3: e9:d7:e0:ca:40:0f:d3:7e:90:a2:ee:30:44:76:bd: 20:85:ae:86:39:a4:37:91:08:3d:70:4b:c1:d8:ed: b9:78:3e:c9:e7:66:4f:26:c9:a5:76:7c:bf:48:66: 98:cb:c8:b9:6d:d6:12:3d:8c:5a:14:11:b3:77:b1: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D8:43:82:86:E0:BA:D4:F5:B6:9E:76:7E:74:7B:C6:57:09:3E:5A X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:83:ec:34:41:28:f4:99:96:a4:c5:fd:ec:bf:46:fa:2b:13: b0:55:24:55:a3:b3:bc:70:09:6e:1c:10:1c:56:29:08:d5:6d: 2b:b4:88:50:4d:67:2a:53:fc:cb:b3:77:7e:02:cc:9b:b2:9a: 94:25:45:cf:c6:0a:9e:a2:98:1f:7a:ee:ee:15:13:21:85:62: 37:f7:5b:fd:cc:3c:fd:4e:2d:0d:56:e3:41:fb:e5:76:6d:81: e7:07:9d:07:d5:85:c4:4f:25:6c:bf:8a:05:68:0b:2e:b4:33: 20:77:96:00:e3:ba:66:4e:ff:ee:f6:34:01:9b:a7:0d:9a:f8: 34:11:40:98:8a:10:32:44:1c:bf:bc:e4:24:f6:a8:5d:9f:d3: 00:61:03:1c:46:43:42:69:a3:84:a6:72:9f:e7:27:29:cf:bb: 8a:15:d0:40:26:4e:6e:f2:23:5a:19:07:fd:77:90:86:9c:55: 2b:54:64:90:71:48:8f:f9:aa:7e:21:b9:32:3a:35:47:0b:75: 20:93:22:24:3f:e4:93:e2:28:23:5c:d1:97:48:e0:bd:99:27: 8a:a9:a0:de:0e:f2:94:75:0b:7a:ba:41:db:8b:72:00:94:ea: 3b:8b:9d:46:f7:67:dc:e0:15:90:0a:97:bc:72:da:fe:b1:e2: 90:48:47:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUxMTAzMDIzMTEwWhcNMjUxMTEwMDIzMTEwWjAYMRYwFAYD VQQDEw02OTA4MTNlZS1kMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdg/iPa8l96N1724wecwfym6REk8NS096t02vkmeZtclCkwg06OqLnJnq3K5 LNmo6djABCGtY9CKgeBM1jeqB6ixD+6CsUt8SnvB6kgwSZAGgrWlhLbpfTvyZY7o welGxtAs1+qryx+ixRjEy0FLjRdhllvJShTy/Js6V0nsie/SvsAbDaAJXClXnmk5 Ks9HzcrRnPkknBo4E1Q01nhtpfOdoDvUnlvzjc9JjMQIOu9Dgb0yJ7AMXxj+Y4ao 0VkKk/Pp1+DKQA/TfpCi7jBEdr0gha6GOaQ3kQg9cEvB2O25eD7J52ZPJsmldny/ SGaYy8i5bdYSPYxaFBGzd7FfsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPYQ4KG 4LrU9baedn50e8ZXCT5aMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6g+w0QSj0mZakxf3sv0b6KxOwVSRVo7O8cAluHBAcVikI1W0rtIhQ TWcqU/zLs3d+AsybspqUJUXPxgqeopgfeu7uFRMhhWI391v9zDz9Ti0NVuNB++V2 bYHnB50H1YXETyVsv4oFaAsutDMgd5YA47pmTv/u9jQBm6cNmvg0EUCYihAyRBy/ vOQk9qhdn9MAYQMcRkNCaaOEpnKf5ycpz7uKFdBAJk5u8iNaGQf9d5CGnFUrVGSQ cUiP+ap+IbkyOjVHC3UgkyIkP+ST4igjXNGXSOC9mSeKqaDeDvKUdQt6ukHbi3IA lOo7i51G92fc4BWQCpe8ctr+seKQSEfO -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:17 2025 by rpki-client