$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: m31uwoc59v3X1WRRqe/K9O+lNQ6J1PYZ0fUuOOSFcXo= Subject key identifier: 21:1F:7B:0B:75:EA:FB:B7:D7:9F:82:AC:62:8D:D1:10:B1:3E:94:DF Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: A2 Signing time: Fri 13 Jun 2025 05:58:24 +0000 Manifest this update: Fri 13 Jun 2025 05:58:23 +0000 Manifest next update: Fri 20 Jun 2025 05:58:23 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: KfKtU82wlISOZ9XpnbaeTDcqw75AqCc+rw5d8OYtNaY=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: 9E8803A0EB0D11EF99575976C4F9AE02.roa (hash: yaPteE4hejSxLkmWmY4xK2B059SLePJYwcPEvAeEGQM=) 6: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) 7: C938B71A36D111F08978402AC4F9AE02.roa (hash: 2vdOG2CDZK8XXa5ZZUJb2iPTHBE4kukRxZjYZ3BrXCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Jun 13 05:58:23 2025 GMT Not After : Jun 20 05:58:23 2025 GMT Subject: CN=684bbe00-dc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:8d:09:1f:d3:09:55:d6:dd:42:d9:a3:c3: a7:a0:23:51:92:d6:f2:24:e4:a9:a2:c9:7a:dc:d3: ec:a7:64:1b:83:ad:b5:5f:f3:3e:ad:c7:9e:96:f1: 27:ce:32:c2:7d:98:9e:ea:cc:54:9a:0d:c2:dd:6d: d6:9f:c2:80:95:eb:af:93:68:7e:70:68:dd:92:0f: 58:2e:36:b6:31:14:50:9f:d0:e4:8d:4e:09:c4:d3: da:3d:f0:c1:11:ad:f6:eb:f4:a8:da:9a:28:2a:9b: 1d:fd:bb:be:98:1e:d5:36:2b:d1:93:d6:c2:6f:57: 27:c8:ed:65:49:b8:8a:fd:00:6b:db:b7:60:b0:f2: bd:8c:42:12:88:2f:e9:21:bc:0d:d5:73:91:ed:bc: c3:26:53:20:09:96:b5:ad:b0:ab:9a:30:86:8d:fb: 11:7c:6c:80:48:a3:5c:fc:70:a4:a9:a1:95:b5:d1: a9:40:65:51:45:89:da:79:fd:49:0f:d2:d9:3a:be: 7b:59:e1:4a:09:d6:3c:57:aa:76:40:f4:50:1f:90: 93:7f:49:86:36:8b:79:9f:25:df:33:6e:ed:cc:3e: c1:25:8f:c9:47:83:d4:aa:d8:82:0f:1e:fb:65:91: 77:11:7a:60:a3:67:b7:86:77:b1:67:f3:d6:3e:59: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1F:7B:0B:75:EA:FB:B7:D7:9F:82:AC:62:8D:D1:10:B1:3E:94:DF X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f9:d8:a6:84:fe:09:8a:ee:5c:51:03:76:95:3c:90:a7:81: c4:88:c9:c1:65:b7:b0:49:f3:66:1d:6a:58:15:ae:95:e3:ca: ff:04:9e:d9:6a:32:e2:b2:f5:e3:f0:35:60:d0:a6:3e:14:8a: 7c:cb:95:2b:03:57:a1:06:5e:ca:62:14:60:18:ff:2f:34:3b: 2a:b8:9f:f1:fb:c4:c5:b7:a4:45:89:e0:08:4c:91:14:1c:36: 3b:08:a3:6a:ff:d0:6a:ad:06:c7:45:60:da:6d:e2:8d:b1:d4: 60:37:b9:48:30:b8:e9:c8:56:df:6c:ea:ce:1f:2b:5b:3f:26: 1c:6e:0a:e4:ea:84:25:89:0c:b4:40:8a:18:77:17:38:35:6d: c2:b1:0d:e5:e1:9e:d2:6a:2b:c8:5f:da:09:7b:9a:07:4c:4e: 4f:51:9b:17:1d:f4:bf:96:84:b1:ce:96:a7:93:17:cb:16:ab: a5:d7:cd:07:c9:ab:b8:f1:66:c7:b5:a4:53:26:4a:a5:90:1b: 71:92:c6:bc:aa:ab:c5:0a:bc:1e:ac:8b:94:3d:32:40:b4:7e: 49:44:75:49:aa:5d:b7:42:2e:76:93:b6:9a:95:f0:27:d6:a0: d4:fc:a1:f6:b5:e5:68:18:9f:a5:65:52:18:aa:c7:c3:09:35: 37:84:07:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNjEzMDU1ODIzWhcNMjUwNjIwMDU1ODIzWjAYMRYwFAYD VQQDEw02ODRiYmUwMC1kYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaONCR/TCVXW3ULZo8OnoCNRktbyJOSposl63NPsp2Qbg621X/M+rceelvEn zjLCfZie6sxUmg3C3W3Wn8KAleuvk2h+cGjdkg9YLja2MRRQn9DkjU4JxNPaPfDB Ea326/So2pooKpsd/bu+mB7VNivRk9bCb1cnyO1lSbiK/QBr27dgsPK9jEISiC/p IbwN1XOR7bzDJlMgCZa1rbCrmjCGjfsRfGyASKNc/HCkqaGVtdGpQGVRRYnaef1J D9LZOr57WeFKCdY8V6p2QPRQH5CTf0mGNot5nyXfM27tzD7BJY/JR4PUqtiCDx77 ZZF3EXpgo2e3hnexZ/PWPlnMKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEfewt1 6vu315+CrGKN0RCxPpTfMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY+dimhP4Jiu5cUQN2lTyQp4HEiMnBZbewSfNmHWpYFa6V48r/BJ7Z ajLisvXj8DVg0KY+FIp8y5UrA1ehBl7KYhRgGP8vNDsquJ/x+8TFt6RFieAITJEU HDY7CKNq/9BqrQbHRWDabeKNsdRgN7lIMLjpyFbfbOrOHytbPyYcbgrk6oQliQy0 QIoYdxc4NW3CsQ3l4Z7SaivIX9oJe5oHTE5PUZsXHfS/loSxzpankxfLFqul180H yau48WbHtaRTJkqlkBtxksa8qqvFCrwerIuUPTJAtH5JRHVJql23Qi52k7aalfAn 1qDU/KH2teVoGJ+lZVIYqsfDCTU3hAdR -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:52 2025 by rpki-client