$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: cSJOemw0QhD5UKTykYP7diTqiwfLGrW5Lb9t0QVXqks= Subject key identifier: 59:BA:38:66:4E:71:8D:D6:1A:53:F2:D5:3F:11:DD:CB:89:23:A1:5F Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: B8 Signing time: Sat 19 Jul 2025 07:04:43 +0000 Manifest this update: Sat 19 Jul 2025 07:04:42 +0000 Manifest next update: Sat 26 Jul 2025 07:04:42 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: JuZX1zyTNO9uQ1hFleknei7KdGgd6UNxSJnlvr9e95o=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Jul 19 07:04:42 2025 GMT Not After : Jul 26 07:04:42 2025 GMT Subject: CN=687b438a-7fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:89:0c:89:69:99:3e:2a:00:84:7b:70:d7: 3a:09:63:16:5d:ff:b7:0f:5a:fe:fa:d1:c5:eb:23: 8e:58:8b:7d:0b:9f:38:72:d8:c8:b5:5e:d7:b2:37: 46:89:9f:e0:50:29:18:8d:f2:30:4e:0c:8e:cf:69: ab:11:a1:ca:b6:eb:0d:0d:f9:82:9d:14:db:2f:61: c6:74:8a:00:cd:3b:83:32:6c:92:44:70:d6:8a:de: 80:68:bf:5f:61:5e:bb:4b:b2:4f:86:6c:79:af:bb: 0d:76:95:e2:ef:80:b4:5e:6e:48:14:b4:6e:c5:92: dd:bf:52:13:04:30:00:d7:a6:fe:ea:23:2d:ef:34: 5b:a1:d1:53:8c:fa:da:6a:bf:44:89:76:bc:02:54: 95:f6:62:1d:45:4e:e4:e2:f7:4d:b9:3f:70:98:71: 81:4c:3b:24:cb:24:fe:cf:aa:45:cc:26:e8:2a:80: 3f:6f:66:4f:0a:9f:54:be:20:bf:d9:8f:e5:67:9d: 60:ab:72:6e:86:8f:d6:5e:73:7a:17:07:43:ad:18: 07:6d:49:f3:e8:e7:4f:c0:97:27:40:cd:d5:46:11: ff:eb:ca:ed:48:b3:a0:2e:26:21:e1:74:63:42:88: df:6e:b5:9c:8f:32:95:15:81:8b:fe:1d:b7:40:61: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BA:38:66:4E:71:8D:D6:1A:53:F2:D5:3F:11:DD:CB:89:23:A1:5F X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ef:80:b2:36:46:e7:f7:32:33:91:7a:a8:69:25:b3:45:7f: ec:62:53:9b:c3:d5:d7:df:6e:98:6c:b9:db:07:40:d9:29:f9: 5c:89:ea:d9:e0:1c:8a:8f:f2:c5:cb:b2:e4:65:3e:a9:e3:85: dd:4f:67:69:1c:8f:bd:5a:2e:31:b6:cc:19:75:b5:15:11:c3: 37:26:9a:dc:63:80:7c:6a:0b:74:0f:11:24:e1:e7:aa:8d:5d: 15:de:d8:06:6f:6b:36:b6:03:3b:c4:20:ce:fd:cb:9a:5e:c5: e0:72:f4:7f:93:81:32:5f:e6:c8:0d:ae:eb:4e:ed:52:2b:eb: 27:ac:1e:4b:56:45:df:5e:82:13:3b:1f:b3:65:25:00:a2:1f: ea:1b:1f:76:ee:9d:08:c8:1a:58:b9:f1:7f:44:e0:ac:cd:8a: a8:0a:42:85:b4:8a:f9:5e:63:68:d1:08:7d:ad:47:03:07:1e: c0:f5:58:17:ae:2e:6f:16:40:39:9b:d3:4a:b0:b4:c4:40:7c: 4f:59:f4:49:60:d9:e2:38:61:cf:bb:02:e6:6e:14:c1:35:a2: 2e:11:49:b7:fe:d6:54:c3:7b:a3:3e:57:be:09:42:df:c2:3b: c9:76:db:14:0c:7a:2f:d1:ca:c4:76:cf:e5:d3:bb:d1:56:64: 22:33:4e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNzE5MDcwNDQyWhcNMjUwNzI2MDcwNDQyWjAYMRYwFAYD VQQDEw02ODdiNDM4YS03ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCWJDIlpmT4qAIR7cNc6CWMWXf+3D1r++tHF6yOOWIt9C584ctjItV7XsjdG iZ/gUCkYjfIwTgyOz2mrEaHKtusNDfmCnRTbL2HGdIoAzTuDMmySRHDWit6AaL9f YV67S7JPhmx5r7sNdpXi74C0Xm5IFLRuxZLdv1ITBDAA16b+6iMt7zRbodFTjPra ar9EiXa8AlSV9mIdRU7k4vdNuT9wmHGBTDskyyT+z6pFzCboKoA/b2ZPCp9UviC/ 2Y/lZ51gq3Juho/WXnN6FwdDrRgHbUnz6OdPwJcnQM3VRhH/68rtSLOgLiYh4XRj QojfbrWcjzKVFYGL/h23QGFsowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm6OGZO cY3WGlPy1T8R3cuJI6FfMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM74CyNkbn9zIzkXqoaSWzRX/sYlObw9XX326YbLnbB0DZKflcierZ 4ByKj/LFy7LkZT6p44XdT2dpHI+9Wi4xtswZdbUVEcM3JprcY4B8agt0DxEk4eeq jV0V3tgGb2s2tgM7xCDO/cuaXsXgcvR/k4EyX+bIDa7rTu1SK+snrB5LVkXfXoIT Ox+zZSUAoh/qGx927p0IyBpYufF/ROCszYqoCkKFtIr5XmNo0Qh9rUcDBx7A9VgX ri5vFkA5m9NKsLTEQHxPWfRJYNniOGHPuwLmbhTBNaIuEUm3/tZUw3ujPle+CULf wjvJdtsUDHov0crEds/l07vRVmQiM07M -----END CERTIFICATE-----Generated at Sun Jul 20 22:46:07 2025 by rpki-client