$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: MnGo328ImbogD1ZibEC34FruD/z4oawCZ2hA6Jpa4EM= Subject key identifier: 48:9F:55:72:B7:6A:A8:C9:CA:B7:E8:79:B9:D3:DB:F1:58:9D:3A:B0 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: F0 Signing time: Mon 27 Oct 2025 08:32:17 +0000 Manifest this update: Mon 27 Oct 2025 08:32:16 +0000 Manifest next update: Mon 03 Nov 2025 08:32:16 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: ZeoDCX/1J7NDz1zLD2OyR5F2BypQtQAmfTzJZomtGao=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Oct 27 08:32:16 2025 GMT Not After : Nov 3 08:32:16 2025 GMT Subject: CN=68ff2e10-d8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:e3:2d:1f:13:5d:e6:52:fd:d5:44:df:d5: ad:ec:45:00:89:14:09:a8:3e:d6:a0:ea:83:36:fe: 74:c4:0f:26:12:19:6e:ab:25:94:cb:51:1b:fd:2f: 37:5e:14:aa:fb:93:b6:a5:ff:43:07:65:13:30:1e: 15:b9:b1:c0:fb:34:0a:21:e3:e4:0f:3f:81:2a:44: 68:ef:cb:ee:fc:9f:b2:4f:e2:ff:ce:31:1a:a0:ae: b5:c3:92:2a:46:7c:e6:60:d0:48:a2:7c:36:f1:13: 1e:ff:42:47:ab:05:9f:83:90:25:dc:b8:73:71:b8: f6:ba:bb:dd:eb:69:3f:2d:a0:32:08:01:68:68:1d: 4e:ef:e4:a5:b6:d2:1f:d8:66:9a:45:be:34:e7:d8: 49:15:d0:66:0a:f3:77:ae:ca:5a:6a:3d:80:5c:79: 9a:b7:f1:34:73:51:8e:cd:5c:3a:10:25:58:52:6a: b2:97:b7:ff:1d:71:14:e2:5f:ca:1f:87:bb:1b:26: d8:56:6a:4b:11:c7:f8:ae:1d:c8:31:41:5a:23:7c: a1:33:ad:83:98:5a:eb:af:6a:a8:57:57:95:95:48: c1:8d:22:d3:68:47:0c:ac:7d:3e:ba:1e:b0:81:84: 98:ea:5f:be:7e:66:a1:33:01:5a:84:01:23:5a:79: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:55:72:B7:6A:A8:C9:CA:B7:E8:79:B9:D3:DB:F1:58:9D:3A:B0 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:43:52:1b:1f:20:8c:ad:57:0a:e2:ad:a2:db:c8:e7:5b: d6:31:7f:e0:af:44:45:f8:fa:f6:61:8b:6b:5c:9e:56:f4:77: 50:07:7a:68:10:ab:aa:42:49:02:85:a7:12:ad:b2:95:28:83: 72:76:ac:55:0e:30:9d:42:12:86:c1:b3:f1:c2:97:28:31:58: 17:36:5d:fc:6c:65:cc:2f:58:eb:b7:d4:1e:0e:3f:ca:0f:29: f9:93:d0:63:5c:d7:82:5f:b7:72:ca:5b:08:70:cb:9d:f7:d4: b3:28:4c:65:62:7f:9d:4e:d7:f9:d0:5e:9e:00:2d:2f:5b:51: 33:d7:52:14:03:c7:94:dd:ae:06:ae:50:4b:0d:ae:6f:dc:5f: eb:6b:ee:2d:d8:09:66:38:e0:e8:92:d1:1b:06:06:b4:a8:e6: 62:0c:fd:10:e8:a6:d4:a6:59:60:56:34:b8:f8:26:77:d6:6c: 66:e7:37:90:8c:39:6f:6f:d4:f2:85:e1:aa:37:de:4f:cd:54: a7:5b:bd:70:39:b2:21:66:61:a3:12:a6:c2:a3:5d:1f:8d:37: f1:b8:d9:7c:63:05:ee:c2:79:96:ee:f6:0f:72:7b:20:9b:d8: a5:74:44:d0:ea:f8:07:0a:aa:12:3e:e7:d8:12:74:45:9e:14: 62:8a:85:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUxMDI3MDgzMjE2WhcNMjUxMTAzMDgzMjE2WjAYMRYwFAYD VQQDEw02OGZmMmUxMC1kOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/7jLR8TXeZS/dVE39Wt7EUAiRQJqD7WoOqDNv50xA8mEhluqyWUy1Eb/S83 XhSq+5O2pf9DB2UTMB4VubHA+zQKIePkDz+BKkRo78vu/J+yT+L/zjEaoK61w5Iq RnzmYNBIonw28RMe/0JHqwWfg5Al3Lhzcbj2urvd62k/LaAyCAFoaB1O7+SlttIf 2GaaRb4059hJFdBmCvN3rspaaj2AXHmat/E0c1GOzVw6ECVYUmqyl7f/HXEU4l/K H4e7GybYVmpLEcf4rh3IMUFaI3yhM62DmFrrr2qoV1eVlUjBjSLTaEcMrH0+uh6w gYSY6l++fmahMwFahAEjWnnBHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEifVXK3 aqjJyrfoebnT2/FYnTqwMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIrkNSGx8gjK1XCuKtotvI51vWMX/gr0RF+Pr2YYtrXJ5W9HdQB3po EKuqQkkChacSrbKVKINydqxVDjCdQhKGwbPxwpcoMVgXNl38bGXML1jrt9QeDj/K Dyn5k9BjXNeCX7dyylsIcMud99SzKExlYn+dTtf50F6eAC0vW1Ez11IUA8eU3a4G rlBLDa5v3F/ra+4t2AlmOODoktEbBga0qOZiDP0Q6KbUpllgVjS4+CZ31mxm5zeQ jDlvb9TyheGqN95PzVSnW71wObIhZmGjEqbCo10fjTfxuNl8YwXuwnmW7vYPcnsg m9ildETQ6vgHCqoSPufYEnRFnhRiioXq -----END CERTIFICATE-----Generated at Mon Oct 27 14:31:03 2025 by rpki-client