$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: b5wVBCpSFTVOwG8LYCygHfqDu7namz1YV4LhAklXZsE= Subject key identifier: 56:86:58:63:19:D0:D4:CB:74:8D:19:15:88:FF:66:42:27:B8:45:D2 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: C3 Signing time: Sat 09 Aug 2025 07:10:47 +0000 Manifest this update: Sat 09 Aug 2025 07:10:46 +0000 Manifest next update: Sat 16 Aug 2025 07:10:46 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: KRxTImhWIhWtz5DHPeTq5YigDiVE+9AMxjk4lXr8WZE=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Aug 9 07:10:46 2025 GMT Not After : Aug 16 07:10:46 2025 GMT Subject: CN=6896f477-d9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:96:ae:9b:eb:17:7c:7f:27:8d:22:08:6d: 48:23:ae:bb:99:b0:c8:15:bc:00:c4:6d:07:40:37: 29:69:0d:f5:b2:91:74:8d:19:bc:68:3b:cd:a6:74: e4:41:a5:76:04:e4:77:92:af:eb:fe:fe:21:42:f4: bd:7b:bc:f7:2d:62:99:78:be:d7:1a:b4:f4:4d:0c: ab:8c:c2:ae:13:aa:f7:da:da:1b:e9:4f:8c:a9:43: ef:8f:c2:e9:d7:d0:ca:87:2a:42:ae:fa:76:71:9c: 3e:e3:1d:e1:8a:93:5a:8c:a2:e7:33:70:2d:c7:05: 6f:28:ca:c6:a4:a5:6d:44:e9:50:f6:81:62:9b:cc: 1b:87:ca:39:7a:02:f2:1e:79:b3:a5:3a:21:cf:43: c0:ec:47:0d:a0:3a:c9:d8:0b:dd:07:c5:7e:45:fb: 84:2e:39:e4:d7:f5:a6:03:cd:96:21:4a:94:69:c3: 55:a3:af:97:ea:13:30:86:ef:42:55:9b:c1:14:f5: d8:63:c6:ff:46:3a:90:2f:eb:4d:59:eb:75:2f:09: 12:5f:61:f5:38:93:2c:11:82:2c:2d:ab:82:57:82: 2e:13:14:ae:fc:79:b6:42:bf:61:c2:0a:81:a4:93: f9:de:c5:00:f0:3a:7b:cf:11:cc:0c:f5:ca:41:0d: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:86:58:63:19:D0:D4:CB:74:8D:19:15:88:FF:66:42:27:B8:45:D2 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a2:ab:66:c9:c1:7f:20:de:9e:03:dd:63:c1:ad:51:5d:20: 60:84:de:a0:0c:fa:05:dd:9a:2e:5b:86:02:4c:3f:9e:54:8b: 8e:4e:a5:9a:fa:70:3e:0b:08:f9:6e:35:14:55:37:ff:82:a0: 98:f1:10:5d:38:76:fb:38:1e:11:a0:2d:02:b6:10:8f:d0:1b: 9f:83:1c:3f:64:2f:9e:3b:c7:54:8d:5d:2f:e3:6e:14:0e:cc: 8d:b6:8b:87:14:01:f7:2e:f3:60:8f:46:b6:d8:b3:19:a8:3d: 39:c6:7e:ce:dd:3a:98:7b:83:fd:55:a2:29:d6:c9:c4:e2:e2: 90:5e:b3:6c:60:0d:5a:c4:f8:8f:6e:0a:d9:14:88:e8:4c:c9: 3b:2d:a8:bd:67:9a:ca:79:2a:59:a5:21:3c:b9:51:8a:1b:62: 4d:2c:8e:3d:12:8a:e0:10:b5:84:52:aa:0f:c4:e2:a8:d5:4e: e7:90:75:54:32:61:75:4c:67:5f:87:19:19:c0:d9:42:70:7c: ea:0a:1f:de:e0:73:ea:cf:82:73:e4:e7:11:9f:68:27:e1:22: 08:22:b3:a1:4f:88:c2:6b:36:2c:63:82:b4:ca:79:95:54:a3: b5:8e:8a:3e:e8:e0:74:9f:04:d3:9b:06:90:3a:ce:20:45:7c: e1:51:7f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwODA5MDcxMDQ2WhcNMjUwODE2MDcxMDQ2WjAYMRYwFAYD VQQDEw02ODk2ZjQ3Ny1kOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAaWrpvrF3x/J40iCG1II667mbDIFbwAxG0HQDcpaQ31spF0jRm8aDvNpnTk QaV2BOR3kq/r/v4hQvS9e7z3LWKZeL7XGrT0TQyrjMKuE6r32tob6U+MqUPvj8Lp 19DKhypCrvp2cZw+4x3hipNajKLnM3AtxwVvKMrGpKVtROlQ9oFim8wbh8o5egLy HnmzpTohz0PA7EcNoDrJ2AvdB8V+RfuELjnk1/WmA82WIUqUacNVo6+X6hMwhu9C VZvBFPXYY8b/RjqQL+tNWet1LwkSX2H1OJMsEYIsLauCV4IuExSu/Hm2Qr9hwgqB pJP53sUA8Dp7zxHMDPXKQQ0e9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaGWGMZ 0NTLdI0ZFYj/ZkInuEXSMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBoqtmycF/IN6eA91jwa1RXSBghN6gDPoF3ZouW4YCTD+eVIuOTqWa +nA+Cwj5bjUUVTf/gqCY8RBdOHb7OB4RoC0CthCP0Bufgxw/ZC+eO8dUjV0v424U DsyNtouHFAH3LvNgj0a22LMZqD05xn7O3TqYe4P9VaIp1snE4uKQXrNsYA1axPiP bgrZFIjoTMk7Lai9Z5rKeSpZpSE8uVGKG2JNLI49EorgELWEUqoPxOKo1U7nkHVU MmF1TGdfhxkZwNlCcHzqCh/e4HPqz4Jz5OcRn2gn4SIIIrOhT4jCazYsY4K0ynmV VKO1joo+6OB0nwTTmwaQOs4gRXzhUX+E -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:55 2025 by rpki-client