$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: JVI1KRv7sy9in1bSGFVGPM3ZNlbQkGWXwzoRIRoGITk= Subject key identifier: 82:CA:A4:AC:BD:A8:E0:B3:94:98:56:8F:D2:FB:AE:48:A7:A6:33:57 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 019F Signing time: Sat 31 May 2025 03:02:23 +0000 Manifest this update: Sat 31 May 2025 03:02:22 +0000 Manifest next update: Sat 07 Jun 2025 03:02:22 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: MJWVKgLyi0/axwvPQvENMA7CjWp689yYGtMenWI1UrU=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: May 31 03:02:22 2025 GMT Not After : Jun 7 03:02:22 2025 GMT Subject: CN=683a713e-a03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:9b:14:59:24:c3:a8:3f:a0:5e:56:75:2e: 67:58:ae:f3:de:a2:13:1f:59:2a:77:c5:e5:1b:83: e2:17:ca:9f:0f:56:a9:11:db:c9:71:79:97:a4:84: b7:97:02:0a:cd:6e:19:31:ad:aa:ce:f2:4e:d9:40: 42:4a:cf:29:ca:49:1d:7e:1a:b3:fa:40:a5:7a:b8: 47:df:d5:1a:6f:8c:90:b1:78:8b:bf:ae:d9:5a:66: 10:fe:f6:c7:84:0b:3e:e5:80:96:0b:c3:e2:52:e8: 73:92:e3:0b:42:6f:ed:04:1f:36:57:1a:f1:d7:f0: 57:d0:42:58:a8:34:2b:ec:f3:36:ab:59:f7:a6:70: 82:9e:77:2b:1a:96:92:95:b2:b4:b3:ec:f6:4f:31: 3f:7f:26:3f:f4:39:cc:38:09:0f:46:3d:a1:78:81: dc:24:02:be:62:d5:f4:ad:44:0e:d6:2c:57:74:c8: 7e:8b:88:9f:b1:d6:c8:2d:57:90:33:a2:13:ba:12: c5:be:cb:82:13:e0:fe:12:19:81:52:5c:8a:57:4b: 4f:76:3e:cd:ec:37:03:34:2a:17:fa:43:be:32:38: 60:7e:c9:dc:ee:a0:0f:4e:b8:9b:e1:6a:05:93:05: 04:a9:aa:70:a1:a3:51:35:3d:ae:68:2f:53:94:4d: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CA:A4:AC:BD:A8:E0:B3:94:98:56:8F:D2:FB:AE:48:A7:A6:33:57 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:07:2a:92:e6:a3:c2:76:61:a0:8c:cd:64:3a:10:ed:f1: 44:3a:6b:39:4d:76:46:3f:96:ff:0e:af:bc:0c:32:f6:95:60: 84:6b:c1:84:b1:69:9a:ae:35:29:0d:43:15:ed:de:84:8b:2c: e0:62:7b:9e:bf:8e:3e:b5:6a:f8:5c:2e:aa:19:de:a6:f3:09: 3b:a7:a8:c5:91:86:48:94:00:09:1d:c3:d1:9f:52:9a:d4:91: de:50:58:6e:26:ce:a9:bd:cf:bd:16:8b:9e:3d:6e:0d:c3:50: e8:ef:9a:d4:39:d7:2b:b6:62:bb:45:b8:37:3b:95:46:d3:ef: ff:e5:f8:df:48:e9:3b:dc:8a:e7:7a:0c:aa:03:d3:20:3a:7b: 2a:d5:01:71:d9:10:e1:1a:e7:78:75:a3:39:b5:bc:68:89:d8: ba:76:8c:25:7a:c8:c5:ed:4c:c1:c8:98:bc:f5:cd:09:7c:47: dd:5a:2a:6c:8e:04:93:18:73:8d:99:38:ee:b0:aa:3b:f9:4b: 92:1e:d0:c2:8a:50:d8:fe:93:e9:29:e8:63:1a:48:27:fb:47: 96:66:7c:05:33:c0:dd:78:95:75:43:a4:96:75:ac:c5:a1:7b: b4:d8:e4:3c:7d:a9:11:be:de:9c:f3:4f:23:b8:cb:da:51:4a: d4:5b:74:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjUwNTMxMDMwMjIyWhcNMjUwNjA3MDMwMjIyWjAYMRYwFAYD VQQDEw02ODNhNzEzZS1hMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR6bFFkkw6g/oF5WdS5nWK7z3qITH1kqd8XlG4PiF8qfD1apEdvJcXmXpIS3 lwIKzW4ZMa2qzvJO2UBCSs8pykkdfhqz+kClerhH39Uab4yQsXiLv67ZWmYQ/vbH hAs+5YCWC8PiUuhzkuMLQm/tBB82Vxrx1/BX0EJYqDQr7PM2q1n3pnCCnncrGpaS lbK0s+z2TzE/fyY/9DnMOAkPRj2heIHcJAK+YtX0rUQO1ixXdMh+i4ifsdbILVeQ M6ITuhLFvsuCE+D+EhmBUlyKV0tPdj7N7DcDNCoX+kO+Mjhgfsnc7qAPTrib4WoF kwUEqapwoaNRNT2uaC9TlE1+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILKpKy9 qOCzlJhWj9L7rkinpjNXMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbGgcqkuajwnZhoIzNZDoQ7fFEOms5TXZGP5b/Dq+8DDL2lWCEa8GE sWmarjUpDUMV7d6EiyzgYnuev44+tWr4XC6qGd6m8wk7p6jFkYZIlAAJHcPRn1Ka 1JHeUFhuJs6pvc+9FouePW4Nw1Do75rUOdcrtmK7Rbg3O5VG0+//5fjfSOk73Irn egyqA9MgOnsq1QFx2RDhGud4daM5tbxoidi6dowlesjF7UzByJi89c0JfEfdWips jgSTGHONmTjusKo7+UuSHtDCilDY/pPpKehjGkgn+0eWZnwFM8DdeJV1Q6SWdazF oXu02OQ8fakRvt6c808juMvaUUrUW3Tb -----END CERTIFICATE-----Generated at Sat May 31 17:04:49 2025 by rpki-client