$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: OBbIGS+dSuDNiyOlFAZVZZ1DcsVnYq3MWrqyp5qkNQo= Subject key identifier: 04:88:53:91:88:33:DE:DA:B8:87:FA:14:21:8D:50:A2:28:FA:56:60 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: D6 Signing time: Sun 07 Sep 2025 07:00:57 +0000 Manifest this update: Sun 07 Sep 2025 07:00:57 +0000 Manifest next update: Sun 14 Sep 2025 07:00:57 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: rXX1lRlsdzjjsmtV6LAstj1iuTmuOR5VBddK8IUHsJc=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 388CE68A428611F092DAFA1EC4F9AE02.roa (hash: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y=) 5: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Sep 7 07:00:57 2025 GMT Not After : Sep 14 07:00:57 2025 GMT Subject: CN=68bd2da9-6ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:79:1b:49:44:a0:7d:02:f6:bc:7d:85:1b: 14:c2:80:1d:4b:f6:f5:78:3a:6e:ff:23:db:5e:3c: 08:b2:ca:2a:64:9d:0c:17:e9:45:f9:fa:ef:a8:ae: d5:18:86:0d:15:dd:c4:3e:33:53:e0:a9:db:b7:e2: 32:9d:86:77:b8:e2:9c:02:c2:8e:39:30:71:04:91: e2:be:cf:34:06:46:60:69:19:42:80:6b:45:da:2f: e7:f6:5b:cb:bb:bf:5e:7d:31:96:6d:ba:60:28:ad: 02:37:39:7c:b3:09:5d:3d:11:fa:d8:fa:3b:98:ac: 9a:53:19:d4:b4:12:c0:d5:a2:18:57:47:ab:7b:82: b2:81:82:3c:7f:2e:a0:88:d1:30:b2:de:59:7c:bb: cc:d5:1b:45:e9:b3:25:29:1e:80:41:23:00:cc:b2: ab:2b:35:15:f5:e2:b1:05:b6:29:21:e2:48:d9:4b: ef:1c:f3:61:5a:8d:7f:dd:d8:97:5c:c4:32:1f:b0: b0:dd:c9:6c:25:ef:fc:dd:9e:3f:72:7a:7f:ee:c8: f2:8a:bf:ab:46:55:df:b6:65:86:29:61:d4:ac:b7: 38:e2:13:5f:ad:ff:83:1e:77:03:ba:06:d4:dd:1b: 37:1f:72:5b:15:5e:12:8a:86:b2:5e:90:ca:44:c5: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:53:91:88:33:DE:DA:B8:87:FA:14:21:8D:50:A2:28:FA:56:60 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:bb:fd:7c:53:84:1a:ce:8e:91:3b:f4:c3:20:f8:cb:60:b8: 48:3a:27:6c:39:07:4a:66:7a:76:5d:db:57:0d:ee:b0:bf:b4: 02:2a:e6:49:b5:a2:05:f4:98:59:f8:64:16:57:19:ee:ee:70: f5:ab:e5:04:c7:8e:b5:06:49:d9:23:c1:96:31:e9:e8:90:e7: 01:f6:4f:5a:98:53:cb:36:fa:3d:20:29:90:80:fa:a0:58:7b: 44:3e:d2:9e:df:65:6a:32:c6:8c:fe:1b:ab:4a:22:77:df:a0: 2a:36:2f:1a:4f:c4:99:3e:a0:74:fb:a1:61:e4:1e:df:9a:cb: 9a:f1:44:18:f4:1b:3f:d7:1d:a9:87:01:e2:40:e9:8d:ca:98: 16:c1:20:72:dd:50:12:31:62:dc:00:62:ff:4b:dd:f8:e5:c1: 9d:ee:93:b0:d4:0d:c7:83:c2:e7:d1:c8:78:e3:11:a4:45:38: 72:44:14:83:3d:70:05:6e:18:4f:ed:b4:bb:f8:79:85:ff:0e: ed:fe:5b:51:88:e0:27:97:3d:49:82:e1:05:7f:4b:da:57:4e: db:96:2b:d9:02:15:be:5c:2f:c6:ae:4b:22:31:cf:fa:7d:6f: ea:2f:7b:e1:cf:41:15:9d:1e:78:35:b2:6e:ab:6e:2f:2f:ec: 11:53:fe:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwOTA3MDcwMDU3WhcNMjUwOTE0MDcwMDU3WjAYMRYwFAYD VQQDEw02OGJkMmRhOS02ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uZ5G0lEoH0C9rx9hRsUwoAdS/b1eDpu/yPbXjwIssoqZJ0MF+lF+frvqK7V GIYNFd3EPjNT4Knbt+IynYZ3uOKcAsKOOTBxBJHivs80BkZgaRlCgGtF2i/n9lvL u79efTGWbbpgKK0CNzl8swldPRH62Po7mKyaUxnUtBLA1aIYV0ere4KygYI8fy6g iNEwst5ZfLvM1RtF6bMlKR6AQSMAzLKrKzUV9eKxBbYpIeJI2UvvHPNhWo1/3diX XMQyH7Cw3clsJe/83Z4/cnp/7sjyir+rRlXftmWGKWHUrLc44hNfrf+DHncDugbU 3Rs3H3JbFV4SioayXpDKRMWMmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASIU5GI M97auIf6FCGNUKIo+lZgMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5u/18U4Qazo6RO/TDIPjLYLhIOidsOQdKZnp2XdtXDe6wv7QCKuZJ taIF9JhZ+GQWVxnu7nD1q+UEx461BknZI8GWMenokOcB9k9amFPLNvo9ICmQgPqg WHtEPtKe32VqMsaM/hurSiJ336AqNi8aT8SZPqB0+6Fh5B7fmsua8UQY9Bs/1x2p hwHiQOmNypgWwSBy3VASMWLcAGL/S9345cGd7pOw1A3Hg8Ln0ch44xGkRThyRBSD PXAFbhhP7bS7+HmF/w7t/ltRiOAnlz1JguEFf0vaV07blivZAhW+XC/GrksiMc/6 fW/qL3vhz0EVnR54NbJuq24vL+wRU/7C -----END CERTIFICATE-----Generated at Mon Sep 8 19:40:47 2025 by rpki-client