$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: V2d9K3dFFGw80CzeLwQk2NZh6wkSZdLy5k2N1IiEXJs= Subject key identifier: 20:22:B9:AB:C6:77:93:F1:29:D8:1C:00:3F:96:DC:6D:72:04:83:B8 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 01EF Signing time: Wed 05 Nov 2025 02:39:33 +0000 Manifest this update: Wed 05 Nov 2025 02:39:32 +0000 Manifest next update: Wed 12 Nov 2025 02:39:32 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: D9crvbry+kvoYxM8/hkFAnTCsPc7MlH+AJAqEetql/0=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Nov 5 02:39:32 2025 GMT Not After : Nov 12 02:39:32 2025 GMT Subject: CN=690ab8e5-adc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:77:6b:4c:47:be:c8:8e:5a:0d:93:c8:cf: 94:38:50:63:62:c3:58:d1:5a:85:6d:f1:29:b1:3b: 33:e8:fa:13:b5:80:a1:df:43:03:9e:ce:35:f5:50: 76:3b:27:bb:09:27:b2:f4:49:75:a2:1c:68:e1:c2: 0f:09:ce:26:a1:10:33:26:a2:70:bb:4e:05:bb:94: cd:5a:12:d6:fb:19:2b:2c:9b:fa:a4:aa:2c:77:20: 0d:1b:1f:3e:ca:0d:e7:19:07:ee:ca:7e:e7:42:48: 67:9f:46:e6:9d:26:3f:31:1b:7b:11:f2:45:0f:4a: 53:23:e2:74:43:cb:f1:ca:4f:48:30:84:db:20:03: 55:9e:9e:8c:2b:be:4d:9c:d3:8e:11:f7:21:12:fc: 0a:cc:c7:6d:9b:8a:ab:c2:50:d2:0a:58:44:a7:2c: ef:61:8b:00:a9:d5:95:d4:ef:9d:94:00:55:cc:55: 64:ee:d8:90:31:23:36:91:df:b0:d6:d8:b4:fd:02: ad:35:33:04:61:85:57:0c:9a:a7:88:39:bc:55:03: 59:0a:5f:5c:09:6d:4d:af:bc:c2:b1:18:df:1b:7c: bf:ff:0e:68:6e:75:b4:b1:9b:17:9b:50:94:f3:59: d6:13:f6:59:66:f2:d8:52:6b:a2:b1:32:5d:ec:96: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:B9:AB:C6:77:93:F1:29:D8:1C:00:3F:96:DC:6D:72:04:83:B8 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:b4:5c:42:52:e7:c5:8f:d7:f0:f4:58:fb:b2:88:22:4a: 37:25:15:77:8d:09:90:f0:6d:06:65:aa:93:58:ac:7c:eb:c8: fd:7d:88:94:8f:21:7a:1d:de:92:08:97:04:f6:d4:79:46:5b: 64:3c:3d:f7:28:b6:a0:c2:5d:6c:41:84:d4:77:12:b6:8f:cf: ca:a3:b1:31:da:99:e6:83:eb:72:ac:dd:90:7a:e5:06:5c:30: f6:f6:9a:1a:02:4d:8b:1c:1b:47:d3:e8:2a:9a:be:0c:89:cb: d7:04:e0:48:c8:3a:55:66:a4:40:bb:f2:4a:b2:1b:cb:1d:c4: 72:b3:81:64:eb:3c:54:e0:52:20:ae:1e:de:7f:06:10:04:05: 54:8b:dd:f1:51:42:77:fe:97:8a:de:4d:cb:06:9d:d3:e4:06: 6d:95:09:fb:43:ec:20:6e:6a:cb:27:46:de:7f:66:df:58:39: 26:80:03:c4:31:87:45:e1:e1:8d:19:d5:5a:15:9d:60:dc:be: cb:9e:2e:12:ee:6d:73:c6:ad:b4:5c:1e:3e:b2:fc:9b:06:7a: 20:fa:e8:2e:c3:f8:87:7d:1f:d5:bf:cb:7b:bb:85:fe:32:c5: 15:a9:b7:34:bf:00:d8:79:30:57:97:6d:3c:82:fe:01:40:ee: b3:58:a0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUxMTA1MDIzOTMyWhcNMjUxMTEyMDIzOTMyWjAYMRYwFAYD VQQDEw02OTBhYjhlNS1hZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJF3a0xHvsiOWg2TyM+UOFBjYsNY0VqFbfEpsTsz6PoTtYCh30MDns419VB2 Oye7CSey9El1ohxo4cIPCc4moRAzJqJwu04Fu5TNWhLW+xkrLJv6pKosdyANGx8+ yg3nGQfuyn7nQkhnn0bmnSY/MRt7EfJFD0pTI+J0Q8vxyk9IMITbIANVnp6MK75N nNOOEfchEvwKzMdtm4qrwlDSClhEpyzvYYsAqdWV1O+dlABVzFVk7tiQMSM2kd+w 1ti0/QKtNTMEYYVXDJqniDm8VQNZCl9cCW1Nr7zCsRjfG3y//w5obnW0sZsXm1CU 81nWE/ZZZvLYUmuisTJd7Ja0eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAiuavG d5PxKdgcAD+W3G1yBIO4MB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHFrRcQlLnxY/X8PRY+7KIIko3JRV3jQmQ8G0GZaqTWKx868j9fYiU jyF6Hd6SCJcE9tR5RltkPD33KLagwl1sQYTUdxK2j8/Ko7Ex2pnmg+tyrN2QeuUG XDD29poaAk2LHBtH0+gqmr4MicvXBOBIyDpVZqRAu/JKshvLHcRys4Fk6zxU4FIg rh7efwYQBAVUi93xUUJ3/peK3k3LBp3T5AZtlQn7Q+wgbmrLJ0bef2bfWDkmgAPE MYdF4eGNGdVaFZ1g3L7Lni4S7m1zxq20XB4+svybBnog+uguw/iHfR/Vv8t7u4X+ MsUVqbc0vwDYeTBXl208gv4BQO6zWKBL -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:03 2025 by rpki-client