$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: ElBpCqNBHnBIWhqDAi+TznNfjWdQQWn8ldy/XqPqsJ8= Subject key identifier: 40:81:3C:28:85:54:9A:D8:F4:5C:CE:6E:D6:FF:96:8F:DA:20:FE:02 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: 88 Signing time: Sun 11 May 2025 06:00:26 +0000 Manifest this update: Sun 11 May 2025 06:00:26 +0000 Manifest next update: Sun 18 May 2025 06:00:26 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: LdyUgItNhduaxY2/TrzM0B7+iWt0YH8M7/lQWk8/V5E=) 2: 7BA29070CD7211EFBB533C0DC4F9AE02.roa (hash: RO9PVHuysanL+FwkTH6uRwMIgQlql2WV/+8jAG5HfIw=) 3: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 4: 4F149B422C8C11F081F45F47C4F9AE02.roa (hash: svrXucTwdG4m95TLLKyOQfmk7bTRnAh51/V3QZQawYw=) 5: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 6: 3032F85ABECC11EF8992CD85C4F9AE02.roa (hash: rpMLyoZvQyb1ho+FopwPvoVgmXiLOFz0MQlXsd/Ou7U=) 7: 9E8803A0EB0D11EF99575976C4F9AE02.roa (hash: yaPteE4hejSxLkmWmY4xK2B059SLePJYwcPEvAeEGQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: May 11 06:00:26 2025 GMT Not After : May 18 06:00:26 2025 GMT Subject: CN=68203cfa-f805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:fd:3b:a9:b7:be:45:99:0e:a7:c6:e6:eb: 30:f9:e7:cf:88:38:0a:63:a3:fb:c6:a9:55:bb:5f: 8b:5e:9d:12:54:b9:9d:fe:92:f4:2f:a5:52:99:69: 12:25:88:0e:fb:b6:a1:ca:1d:5b:19:5c:67:0b:f1: c1:34:e2:5b:9c:3b:5d:e2:be:a2:69:29:e2:71:22: 5f:65:aa:24:3b:63:8b:8c:d5:bc:6c:33:d3:af:7e: f4:c0:e1:14:53:52:8b:9c:d8:bd:a3:42:98:a6:de: a2:b7:64:d6:36:5d:60:7c:10:09:b8:0a:f3:53:c9: 42:df:7e:2e:75:d6:1d:71:97:f4:2f:6c:6f:42:64: 37:6a:ff:3f:54:3e:dc:84:85:ac:8f:fe:79:de:41: f1:b5:26:06:9e:e8:08:d8:56:35:58:85:8e:3b:cd: 89:47:79:df:58:93:f7:d3:96:9a:87:cb:23:f9:c0: 9e:1d:49:cd:cf:61:b7:9f:9c:8d:67:67:ce:0f:85: 10:d6:9c:9b:72:cb:d9:fc:5f:8b:ac:b3:7f:07:bc: 9b:71:5b:1c:0e:18:d6:ac:45:1b:b4:39:28:04:b6: a4:c0:cf:09:d3:4a:3f:a4:05:58:0c:96:8c:1e:d8: 14:f7:4c:ef:5e:dd:85:da:54:d9:28:69:d2:86:4e: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:81:3C:28:85:54:9A:D8:F4:5C:CE:6E:D6:FF:96:8F:DA:20:FE:02 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:cc:e4:f2:83:89:a5:5d:03:8c:70:6c:a4:95:68:b1:f5:6a: 36:fb:ff:b4:c7:2d:65:a4:c0:a0:6b:cd:ef:3b:8a:dd:a0:72: 93:bd:17:b2:ce:19:04:54:7b:56:db:36:ce:35:5b:5b:0e:29: 22:95:8e:58:49:2c:a0:12:a7:b2:45:e8:93:4b:a5:52:95:dc: 93:fa:44:d0:72:4a:63:ff:26:eb:2b:c0:de:6b:ab:79:f3:24: 89:72:23:cd:fe:a4:45:2f:f4:45:6e:5c:e2:4f:c1:13:37:fc: fc:cc:45:b9:1c:01:51:51:48:f4:bb:38:38:7c:73:21:b6:29: f2:b8:88:62:74:c9:d6:17:c0:30:77:cf:16:79:c7:5d:b0:b1: af:36:ce:a1:9e:26:3d:db:7c:25:0b:45:9c:77:47:25:3a:35: e4:4e:c5:ca:4a:33:8a:d9:75:f2:1e:f1:19:eb:86:98:10:85: d2:93:14:02:05:5d:70:b7:70:95:38:bd:65:cb:24:47:05:4f: f9:aa:8b:6f:0d:37:77:b5:27:b0:db:bc:7f:92:b6:86:af:da: 02:54:3b:1c:5a:d0:c4:b6:63:7c:1c:16:e1:80:18:48:34:08: 69:f5:35:a2:c6:65:dc:95:58:d4:93:c0:72:c2:ed:c7:36:44: 55:4c:ec:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNTExMDYwMDI2WhcNMjUwNTE4MDYwMDI2WjAYMRYwFAYD VQQDEw02ODIwM2NmYS1mODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjv9O6m3vkWZDqfG5usw+efPiDgKY6P7xqlVu1+LXp0SVLmd/pL0L6VSmWkS JYgO+7ahyh1bGVxnC/HBNOJbnDtd4r6iaSnicSJfZaokO2OLjNW8bDPTr370wOEU U1KLnNi9o0KYpt6it2TWNl1gfBAJuArzU8lC334uddYdcZf0L2xvQmQ3av8/VD7c hIWsj/553kHxtSYGnugI2FY1WIWOO82JR3nfWJP305aah8sj+cCeHUnNz2G3n5yN Z2fOD4UQ1pybcsvZ/F+LrLN/B7ybcVscDhjWrEUbtDkoBLakwM8J00o/pAVYDJaM HtgU90zvXt2F2lTZKGnShk7lqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECBPCiF VJrY9FzObtb/lo/aIP4CMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjzOTyg4mlXQOMcGyklWix9Wo2+/+0xy1lpMCga83vO4rdoHKTvRey zhkEVHtW2zbONVtbDikilY5YSSygEqeyReiTS6VSldyT+kTQckpj/ybrK8Dea6t5 8ySJciPN/qRFL/RFblziT8ETN/z8zEW5HAFRUUj0uzg4fHMhtinyuIhidMnWF8Aw d88WecddsLGvNs6hniY923wlC0Wcd0clOjXkTsXKSjOK2XXyHvEZ64aYEIXSkxQC BV1wt3CVOL1lyyRHBU/5qotvDTd3tSew27x/kraGr9oCVDscWtDEtmN8HBbhgBhI NAhp9TWixmXclVjUk8Bywu3HNkRVTOzS -----END CERTIFICATE-----Generated at Tue May 13 02:20:16 2025 by rpki-client