$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: Bq83Li9rfPbgkGbBLEDsiRSt+eQPugvM5SXFOuIOaXQ= Subject key identifier: 64:2C:9D:3C:98:E1:93:02:38:56:20:39:4F:52:CB:E2:5F:F1:85:D0 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: F5 Signing time: Wed 05 Nov 2025 06:23:12 +0000 Manifest this update: Wed 05 Nov 2025 06:23:11 +0000 Manifest next update: Wed 12 Nov 2025 06:23:11 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: vwLOtpwtmR5Li64Ni8Hvl4qzptgeka4hePcvVVsh5Yo=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Nov 5 06:23:11 2025 GMT Not After : Nov 12 06:23:11 2025 GMT Subject: CN=690aed50-d49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:b6:cc:e9:bf:23:41:92:a7:7b:ea:b1:ad: 06:46:b2:58:9e:12:f1:1e:e8:2c:69:71:cd:64:69: d1:b5:bb:a9:26:5c:66:5f:c5:24:74:cd:1c:68:d1: 82:16:f8:08:a5:01:d2:61:13:a1:a8:ec:2a:40:34: 1f:6f:ab:83:4c:17:65:3d:fd:9d:02:0c:49:7e:fa: 31:9e:86:df:ba:4e:62:79:fa:6c:f9:ce:b0:6f:1e: e4:67:c1:06:e2:20:6b:88:54:63:7e:72:5a:e1:5f: da:4d:c1:29:9e:94:b3:d9:48:a5:69:2f:fc:30:4d: a4:fc:96:77:b7:be:3b:ff:54:d1:bb:c7:d1:08:e9: e3:f3:55:86:7b:65:49:be:5b:ab:1c:17:97:53:c4: fd:8c:7e:f6:50:9b:63:07:d5:24:14:de:ed:bc:cc: 00:b1:a9:fe:e3:0f:e8:29:61:7e:68:5d:b4:cb:bc: e1:02:e3:eb:06:8b:2a:0e:09:03:35:bd:8b:10:ab: 8c:78:37:dd:02:54:0f:37:70:e5:04:96:ba:9b:cf: 65:4c:86:45:1d:35:bd:19:a9:00:57:76:86:1f:ee: 2a:86:c8:fc:8d:27:9f:c8:12:11:75:b8:9e:3e:03: 50:91:39:68:a2:47:17:d7:f7:ed:f8:eb:f3:3a:21: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:9D:3C:98:E1:93:02:38:56:20:39:4F:52:CB:E2:5F:F1:85:D0 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d2:b1:01:1d:f5:c7:86:ee:6b:dc:fe:75:39:8d:a8:76:3d: 83:08:3c:37:4c:80:44:57:7e:20:18:58:07:31:dc:be:a8:e0: 0e:e9:d4:5d:4c:ce:66:be:de:4c:48:d2:08:4a:80:fb:42:25: 0c:3d:4b:ad:25:dd:11:68:e5:9b:22:19:1b:c2:be:e8:1c:8d: f2:64:df:75:3a:43:90:bc:d4:a2:11:a1:dc:73:c5:5d:f3:d6: d1:96:e8:31:4b:52:4c:df:58:2a:0d:1f:04:61:b6:d7:ad:da: ea:bb:68:aa:4d:2a:0a:4e:e4:d6:2e:70:fa:56:db:8f:b7:39: e9:2c:2b:4b:29:e1:5b:1c:bb:c5:1f:ab:0f:55:6a:fe:07:b3: 3b:89:11:fb:1b:8a:55:be:40:5a:3e:c7:5f:06:e9:5b:0f:7f: e4:a9:7d:e4:b5:68:32:c6:e9:3b:0b:fb:53:70:d9:ba:ac:cf: 10:ba:ff:e2:5b:85:1e:54:07:a4:c5:42:aa:84:2e:f5:0d:3b: 13:b6:30:09:ae:a7:06:4a:9d:2b:e4:aa:49:aa:b0:36:57:41: ed:c3:e2:42:ec:92:0e:58:0a:78:6a:7c:bb:c5:d4:e3:5e:52: 41:12:e9:3c:cf:bd:c4:ea:e9:25:86:6c:9e:dd:88:13:46:1f: 9c:d5:2d:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUxMTA1MDYyMzExWhcNMjUxMTEyMDYyMzExWjAYMRYwFAYD VQQDEw02OTBhZWQ1MC1kNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwh62zOm/I0GSp3vqsa0GRrJYnhLxHugsaXHNZGnRtbupJlxmX8UkdM0caNGC FvgIpQHSYROhqOwqQDQfb6uDTBdlPf2dAgxJfvoxnobfuk5iefps+c6wbx7kZ8EG 4iBriFRjfnJa4V/aTcEpnpSz2UilaS/8ME2k/JZ3t747/1TRu8fRCOnj81WGe2VJ vlurHBeXU8T9jH72UJtjB9UkFN7tvMwAsan+4w/oKWF+aF20y7zhAuPrBosqDgkD Nb2LEKuMeDfdAlQPN3DlBJa6m89lTIZFHTW9GakAV3aGH+4qhsj8jSefyBIRdbie PgNQkTlookcX1/ft+OvzOiEuiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQsnTyY 4ZMCOFYgOU9Sy+Jf8YXQMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ0rEBHfXHhu5r3P51OY2odj2DCDw3TIBEV34gGFgHMdy+qOAO6dRd TM5mvt5MSNIISoD7QiUMPUutJd0RaOWbIhkbwr7oHI3yZN91OkOQvNSiEaHcc8Vd 89bRlugxS1JM31gqDR8EYbbXrdrqu2iqTSoKTuTWLnD6VtuPtznpLCtLKeFbHLvF H6sPVWr+B7M7iRH7G4pVvkBaPsdfBulbD3/kqX3ktWgyxuk7C/tTcNm6rM8Quv/i W4UeVAekxUKqhC71DTsTtjAJrqcGSp0r5KpJqrA2V0Htw+JC7JIOWAp4any7xdTj XlJBEuk8z73E6uklhmye3YgTRh+c1S3k -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:34 2025 by rpki-client