$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: uaNA4SDH2aRwr3Vjb4pA0MdWkXFJX8FJMjUOIbNTcjA= Subject key identifier: 78:9A:2A:AD:B8:10:1A:8E:95:8A:79:82:F4:74:A6:D9:5A:9E:7E:47 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: CE Signing time: Sat 23 Aug 2025 06:51:31 +0000 Manifest this update: Sat 23 Aug 2025 06:51:30 +0000 Manifest next update: Sat 30 Aug 2025 06:51:30 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: il15fUHgzxBKM0ADLgkXPcKjwFB7pyUqUx+3UCdtgiw=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Aug 23 06:51:30 2025 GMT Not After : Aug 30 06:51:30 2025 GMT Subject: CN=68a964f2-7c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:90:c9:7b:01:ad:5d:1e:5a:61:15:37:c9: 10:24:94:d4:d7:ed:4f:18:ef:0f:85:02:73:82:7e: 4b:06:36:13:41:b7:51:03:13:d6:3b:08:82:be:cc: eb:76:4a:7e:51:11:36:4f:f9:4a:dd:b6:02:53:84: 3e:61:f3:01:a0:7a:59:64:37:b9:69:43:1b:6b:52: 12:35:0d:ed:2b:48:11:07:97:a8:9c:07:4c:3f:b4: 73:96:86:07:f5:49:54:ea:8d:1a:8f:2d:7e:da:9a: 38:75:3a:91:58:2d:6a:28:71:83:d7:08:a9:dd:36: b8:10:1d:82:1f:ea:8b:af:38:f8:26:ed:30:cf:50: 6d:18:41:3a:47:5e:b3:ad:47:70:84:14:4f:ae:8c: 43:7b:11:fd:cb:c8:f0:3a:30:85:88:d4:6c:db:be: 5b:fc:74:eb:fe:ec:fd:b6:65:d6:c7:70:d5:8a:9f: 94:83:8f:ee:b2:f0:81:89:a4:fc:48:6d:07:a9:11: cb:f1:23:41:5e:fc:c1:fa:f2:e4:73:0d:ab:1f:bf: cb:5a:9d:53:80:64:6d:df:3a:a9:88:87:83:cf:06: b5:c3:82:63:a2:33:bb:5c:c9:18:85:58:6f:bc:f4: bb:90:7f:37:68:ed:c7:2f:87:bd:8d:1b:28:95:60: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9A:2A:AD:B8:10:1A:8E:95:8A:79:82:F4:74:A6:D9:5A:9E:7E:47 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ec:85:b2:26:19:e1:26:0e:76:69:ec:b1:22:4b:35:1c:15: 1a:af:f0:5e:a9:c0:bc:52:7c:94:a0:d9:a5:5b:9f:fe:e2:c2: bf:de:54:29:a2:1b:41:8e:d0:7d:05:b0:6f:65:25:89:08:e6: 35:4e:78:85:62:95:b7:1c:75:b5:2f:7a:91:04:0d:02:a5:ce: 8c:72:07:4b:82:22:95:94:ae:b9:18:1f:74:6f:2f:67:85:e1: 9f:42:d3:01:ff:0e:e5:0a:1f:77:4f:a3:e2:32:19:43:dd:89: 3a:18:ba:b8:fb:c9:1c:52:6e:99:90:47:ed:d0:99:12:91:5d: 8e:38:5c:83:49:1b:69:89:cb:e0:73:e0:10:97:8c:b7:66:43: 73:b7:a7:61:52:74:53:8a:02:6c:45:2d:ac:ae:2b:7e:4c:6c: dd:ad:1f:fa:57:8c:15:90:ab:a0:d3:17:94:cc:e5:34:e0:d1: f3:ca:8b:aa:63:a5:f5:36:98:f8:21:bc:12:ea:8a:a3:74:16: 12:fd:4b:1a:97:79:fd:44:e3:f2:7c:c4:e0:82:16:10:69:7f: 19:f6:14:ab:54:ba:6d:b7:bf:ea:36:23:01:ff:69:d0:3a:f9: b3:b9:be:7b:fb:a6:c7:31:03:90:f9:93:b3:92:c8:be:8a:e0: 47:e8:36:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwODIzMDY1MTMwWhcNMjUwODMwMDY1MTMwWjAYMRYwFAYD VQQDEw02OGE5NjRmMi03YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u2QyXsBrV0eWmEVN8kQJJTU1+1PGO8PhQJzgn5LBjYTQbdRAxPWOwiCvszr dkp+URE2T/lK3bYCU4Q+YfMBoHpZZDe5aUMba1ISNQ3tK0gRB5eonAdMP7RzloYH 9UlU6o0ajy1+2po4dTqRWC1qKHGD1wip3Ta4EB2CH+qLrzj4Ju0wz1BtGEE6R16z rUdwhBRProxDexH9y8jwOjCFiNRs275b/HTr/uz9tmXWx3DVip+Ug4/usvCBiaT8 SG0HqRHL8SNBXvzB+vLkcw2rH7/LWp1TgGRt3zqpiIeDzwa1w4JjojO7XMkYhVhv vPS7kH83aO3HL4e9jRsolWA6owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiaKq24 EBqOlYp5gvR0ptlann5HMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN7IWyJhnhJg52aeyxIks1HBUar/BeqcC8UnyUoNmlW5/+4sK/3lQp ohtBjtB9BbBvZSWJCOY1TniFYpW3HHW1L3qRBA0Cpc6McgdLgiKVlK65GB90by9n heGfQtMB/w7lCh93T6PiMhlD3Yk6GLq4+8kcUm6ZkEft0JkSkV2OOFyDSRtpicvg c+AQl4y3ZkNzt6dhUnRTigJsRS2srit+TGzdrR/6V4wVkKug0xeUzOU04NHzyouq Y6X1Npj4IbwS6oqjdBYS/Usal3n9ROPyfMTgghYQaX8Z9hSrVLptt7/qNiMB/2nQ Ovmzub57+6bHMQOQ+ZOzksi+iuBH6DZ8 -----END CERTIFICATE-----Generated at Sat Aug 23 21:25:54 2025 by rpki-client