$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: hG6zsp0DQKNdaKY9zBt2Cj+RJWALsOUKEBiqL4+PsIg= Subject key identifier: FA:B3:B2:E4:2F:C3:C0:0D:C1:83:35:77:5C:EC:3B:3F:45:09:59:54 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: AD Signing time: Tue 01 Jul 2025 07:42:47 +0000 Manifest this update: Tue 01 Jul 2025 07:42:46 +0000 Manifest next update: Tue 08 Jul 2025 07:42:46 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: fS66kuT/vlv+145GB+65OGY4dusHn/BekB2rmmceupg=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Jul 1 07:42:46 2025 GMT Not After : Jul 8 07:42:46 2025 GMT Subject: CN=68639177-ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:74:c0:be:6a:22:cc:7a:d5:79:ad:35:c9: 92:bc:8f:e1:92:be:f5:c9:af:cd:61:83:0c:10:b9: 38:d4:14:47:74:80:e3:d8:99:5b:42:2f:30:fa:32: 20:d8:1f:70:a1:e8:32:bf:30:f3:d5:74:9e:54:5d: fb:ea:6a:b9:7c:0b:fb:8d:49:85:9a:bd:13:39:45: 55:5e:70:c6:36:b6:b1:20:e3:0c:a9:f4:d3:5f:f0: 4e:01:9a:8c:98:cb:f1:b5:3d:48:23:5b:46:8b:94: 0d:25:c2:97:f9:55:a7:db:14:76:39:b0:d0:4e:72: 06:f8:73:aa:3b:2c:71:bb:02:db:14:62:ab:19:e2: 0a:f8:3d:a7:d8:54:3b:9b:ac:82:3b:a1:ee:10:04: b7:58:45:84:e0:c3:d5:1c:09:79:3c:cb:bf:79:be: 15:eb:23:39:fa:e3:a0:9c:ce:30:fe:b5:af:00:60: 61:72:31:02:f0:3c:74:29:ad:9a:fc:6a:68:72:a1: 27:2b:8e:ed:a2:18:fe:34:cd:e7:e2:79:99:f2:d6: 05:d4:7e:fa:1a:17:0a:9a:0d:0f:52:c9:4f:b7:72: 6e:27:64:ab:0f:39:eb:5b:13:49:f6:ce:2f:e8:99: 85:6b:d9:48:61:e7:d2:7b:25:b6:72:21:6c:db:fc: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:B2:E4:2F:C3:C0:0D:C1:83:35:77:5C:EC:3B:3F:45:09:59:54 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d7:e5:0d:ab:d5:f2:ea:77:dc:a1:3d:d2:2b:c4:40:a7:37: e4:d4:17:1a:7e:39:a5:b2:a2:af:83:77:db:c0:aa:93:c4:b3: eb:04:c1:75:64:c1:11:80:56:a2:0a:b0:df:c9:31:b5:81:d3: a3:02:22:be:01:26:e3:5b:49:b4:2c:78:62:ee:03:37:10:65: 17:12:58:68:c1:41:2b:fb:b7:62:e9:01:02:dd:78:42:9e:84: d1:ec:d5:c7:3a:b5:65:11:2c:76:89:8e:17:fd:e4:39:bd:39: 3b:cb:71:47:19:a9:9b:92:73:c7:53:eb:61:94:d7:75:77:6d: 68:d9:7d:cf:24:12:55:f8:00:65:f0:d3:6b:b3:d0:0d:4d:cc: 03:10:85:c6:46:3e:ea:6f:0a:02:cd:cb:89:5e:84:78:b7:37: 1e:d5:fd:98:0c:cb:e4:ae:b3:0f:20:cb:e1:6a:96:c7:8a:02: aa:29:92:26:31:ee:0f:1e:40:28:9c:00:d2:9d:14:8e:be:49: 5d:7a:17:10:af:02:1e:a2:24:ed:4e:fe:68:40:78:6b:98:6b: e1:de:c8:56:2a:0b:c9:cd:30:ae:23:af:b5:5b:6b:e8:91:e5: 6a:09:46:4e:39:6f:39:69:58:a7:ba:0f:eb:65:34:33:df:60: 0e:67:5e:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNzAxMDc0MjQ2WhcNMjUwNzA4MDc0MjQ2WjAYMRYwFAYD VQQDEw02ODYzOTE3Ny1kZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPl0wL5qIsx61XmtNcmSvI/hkr71ya/NYYMMELk41BRHdIDj2JlbQi8w+jIg 2B9woegyvzDz1XSeVF376mq5fAv7jUmFmr0TOUVVXnDGNraxIOMMqfTTX/BOAZqM mMvxtT1II1tGi5QNJcKX+VWn2xR2ObDQTnIG+HOqOyxxuwLbFGKrGeIK+D2n2FQ7 m6yCO6HuEAS3WEWE4MPVHAl5PMu/eb4V6yM5+uOgnM4w/rWvAGBhcjEC8Dx0Ka2a /GpocqEnK47tohj+NM3n4nmZ8tYF1H76GhcKmg0PUslPt3JuJ2SrDznrWxNJ9s4v 6JmFa9lIYefSeyW2ciFs2/y6SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqzsuQv w8ANwYM1d1zsOz9FCVlUMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ1+UNq9Xy6nfcoT3SK8RApzfk1BcafjmlsqKvg3fbwKqTxLPrBMF1 ZMERgFaiCrDfyTG1gdOjAiK+ASbjW0m0LHhi7gM3EGUXElhowUEr+7di6QEC3XhC noTR7NXHOrVlESx2iY4X/eQ5vTk7y3FHGambknPHU+thlNd1d21o2X3PJBJV+ABl 8NNrs9ANTcwDEIXGRj7qbwoCzcuJXoR4tzce1f2YDMvkrrMPIMvhapbHigKqKZIm Me4PHkAonADSnRSOvkldehcQrwIeoiTtTv5oQHhrmGvh3shWKgvJzTCuI6+1W2vo keVqCUZOOW85aVinug/rZTQz32AOZ17b -----END CERTIFICATE-----Generated at Thu Jul 3 00:59:50 2025 by rpki-client