$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: G7Xb8Hj4rFGUrNGy525SMDaomnNQfbLf2VJizA2KCTE= Subject key identifier: DB:CC:C8:A5:E4:C8:6B:97:2B:2A:C6:14:16:68:31:37:FB:6F:24:21 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: 7F Signing time: Fri 25 Apr 2025 06:21:18 +0000 Manifest this update: Fri 25 Apr 2025 06:21:17 +0000 Manifest next update: Fri 02 May 2025 06:21:17 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: obzCYnKzuCUTyvp1Z6xzjTrikt9XKrrafz2VNSJ1uDQ=) 2: 7BA29070CD7211EFBB533C0DC4F9AE02.roa (hash: RO9PVHuysanL+FwkTH6uRwMIgQlql2WV/+8jAG5HfIw=) 3: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 4: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 5: 3032F85ABECC11EF8992CD85C4F9AE02.roa (hash: rpMLyoZvQyb1ho+FopwPvoVgmXiLOFz0MQlXsd/Ou7U=) 6: 3C9DCE2ED6C511EFBF407577C4F9AE02.roa (hash: 96CXsA04scOaM1cbnErMDWbzyLO2tA6KbWztXUY7o2Y=) 7: 9E8803A0EB0D11EF99575976C4F9AE02.roa (hash: yaPteE4hejSxLkmWmY4xK2B059SLePJYwcPEvAeEGQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Apr 25 06:21:17 2025 GMT Not After : May 2 06:21:17 2025 GMT Subject: CN=680b29de-397b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:ef:5f:11:f0:8c:a3:42:0e:5e:76:53:0c: 4e:ca:3a:70:5f:fc:5d:7d:40:da:73:ed:9c:51:13: 37:dd:0d:cc:36:4c:1d:fc:23:4b:63:bd:34:d8:e5: 88:7f:e2:16:1f:e7:93:c8:64:06:a5:36:44:3e:42: 4a:3d:32:62:7f:12:19:f8:77:1e:03:0a:9d:09:43: 5e:4b:0e:e7:c9:3f:7f:e8:45:ea:ab:27:73:c2:3d: 6c:d0:5f:ce:47:29:4e:5a:5c:9f:78:a0:29:e5:f5: c7:1e:de:2e:64:33:9c:b0:97:a2:8f:95:b4:93:57: 00:30:06:56:5c:35:0d:31:9b:8c:ce:bb:2f:a5:8f: c2:5d:3c:a8:d3:d0:88:75:d6:cf:df:b4:13:c2:a8: 04:75:39:d1:77:a0:84:f2:27:81:b3:4d:18:76:db: c1:92:98:72:f6:1f:c3:33:f2:22:c2:b0:fd:b9:36: 17:dd:9d:c3:76:6b:5c:a4:02:cd:87:03:da:7b:8f: 02:d3:c5:c9:81:d5:39:ad:b4:31:68:f3:71:90:5f: e7:e1:f8:d4:f9:ec:e9:2e:71:2f:19:6a:3d:6e:11: f4:57:2d:99:25:20:c1:7e:8b:f9:af:f2:16:d9:4c: 5e:3b:5e:ae:c0:e1:68:ca:03:7b:28:ab:3d:0d:05: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CC:C8:A5:E4:C8:6B:97:2B:2A:C6:14:16:68:31:37:FB:6F:24:21 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b2:ea:c2:6a:3b:a3:59:68:44:e4:3c:02:7b:9c:bb:64:d2: 7d:c8:ad:aa:6c:00:43:ee:c6:de:8a:0f:04:46:af:a6:e9:46: 51:83:9f:a3:b7:44:2d:ed:0e:d4:2b:11:62:a3:5e:a7:99:3a: b8:ab:11:e3:bc:66:70:2b:10:c0:80:14:b4:0f:51:8a:96:ae: 02:49:e9:71:bd:f1:5e:11:ed:11:78:6b:f6:50:d3:77:2f:a5: ee:cb:a6:f8:31:9c:c3:08:35:4f:ac:9e:af:ac:f6:e9:08:4f: 87:69:e9:c6:71:0d:98:3a:3d:de:42:7c:bd:02:83:41:f4:9d: 34:e7:69:4a:e7:42:4d:b5:e3:49:11:8e:de:c0:49:6f:1d:71: 84:5c:5e:cb:42:81:1b:13:9f:19:90:ff:72:9e:21:2d:fd:fe: 22:f2:3b:f6:87:99:a8:37:93:45:9d:24:d4:6a:13:0a:fa:ec: c7:0c:0a:30:13:20:48:4d:78:bf:06:db:54:52:b8:e7:3b:94: 0c:c5:c8:5d:da:59:ce:c4:2f:5e:2d:5c:d4:8f:57:ea:a3:32: ef:9d:77:57:3c:3c:03:79:f8:cc:97:d9:e7:e9:ad:87:e9:7d: 40:05:3b:ac:11:8b:d9:0b:22:81:87:a8:bd:0f:51:41:d1:00: 2d:9d:f0:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNDI1MDYyMTE3WhcNMjUwNTAyMDYyMTE3WjAYMRYwFAYD VQQDEw02ODBiMjlkZS0zOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZTvXxHwjKNCDl52UwxOyjpwX/xdfUDac+2cURM33Q3MNkwd/CNLY7002OWI f+IWH+eTyGQGpTZEPkJKPTJifxIZ+HceAwqdCUNeSw7nyT9/6EXqqydzwj1s0F/O RylOWlyfeKAp5fXHHt4uZDOcsJeij5W0k1cAMAZWXDUNMZuMzrsvpY/CXTyo09CI ddbP37QTwqgEdTnRd6CE8ieBs00YdtvBkphy9h/DM/IiwrD9uTYX3Z3DdmtcpALN hwPae48C08XJgdU5rbQxaPNxkF/n4fjU+ezpLnEvGWo9bhH0Vy2ZJSDBfov5r/IW 2UxeO16uwOFoygN7KKs9DQWBswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvMyKXk yGuXKyrGFBZoMTf7byQhMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxsurCajujWWhE5DwCe5y7ZNJ9yK2qbABD7sbeig8ERq+m6UZRg5+j t0Qt7Q7UKxFio16nmTq4qxHjvGZwKxDAgBS0D1GKlq4CSelxvfFeEe0ReGv2UNN3 L6Xuy6b4MZzDCDVPrJ6vrPbpCE+HaenGcQ2YOj3eQny9AoNB9J0052lK50JNteNJ EY7ewElvHXGEXF7LQoEbE58ZkP9yniEt/f4i8jv2h5moN5NFnSTUahMK+uzHDAow EyBITXi/BttUUrjnO5QMxchd2lnOxC9eLVzUj1fqozLvnXdXPDwDefjMl9nn6a2H 6X1ABTusEYvZCyKBh6i9D1FB0QAtnfBV -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:14 2025 by rpki-client