$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft File: 2LHiOJulkf15uaUEr1pE2uCm6Cg.mft (raw, json) Hash identifier: yaMzG0E4azD/rLuK+V9cKfx4jRco9p3NilPqKF+duI8= Subject key identifier: 14:BF:0B:13:7C:28:D4:AD:F1:F8:AC:1B:4A:16:10:14:46:DB:30:AC Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft Manifest number: 98 Signing time: Sat 31 May 2025 06:43:18 +0000 Manifest this update: Sat 31 May 2025 06:43:17 +0000 Manifest next update: Sat 07 Jun 2025 06:43:17 +0000 Files and hashes: 1: 2LHiOJulkf15uaUEr1pE2uCm6Cg.crl (hash: Qk/8WVCaxNAEC7K6nnsMAj4A4C/N5TACifcuFLbTMiw=) 2: 46F07DE2BECC11EF8B106213C4F9AE02.roa (hash: G0jMrMH21eAUA/cjp2WPKqbHaywt2Ep3opCnxDMVRXs=) 3: 0D73D29E0DDC11F0B78D5A68C4F9AE02.roa (hash: cDoM5IMp1RVEZcbuIT/nXNre619WWcYGHnTE2Hy4AEg=) 4: 3032F85ABECC11EF8992CD85C4F9AE02.roa (hash: rpMLyoZvQyb1ho+FopwPvoVgmXiLOFz0MQlXsd/Ou7U=) 5: 9E8803A0EB0D11EF99575976C4F9AE02.roa (hash: yaPteE4hejSxLkmWmY4xK2B059SLePJYwcPEvAeEGQM=) 6: C85D817E3C4711F0AFDE9245C4F9AE02.roa (hash: I/B7AGWyw1/RmN+cyUcawyFJOy5RTeqibeslM6vZhvY=) 7: C938B71A36D111F08978402AC4F9AE02.roa (hash: 2vdOG2CDZK8XXa5ZZUJb2iPTHBE4kukRxZjYZ3BrXCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: May 31 06:43:17 2025 GMT Not After : Jun 7 06:43:17 2025 GMT Subject: CN=683aa506-051d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:cd:c0:77:c6:da:66:09:10:bd:93:c6:6e: 16:a9:ba:02:73:e4:8c:92:f3:95:0d:bc:a3:1a:d0: cf:fd:fa:8e:d2:8f:1b:84:c7:bc:2f:58:4b:bf:3f: 79:f0:f7:2b:8d:4c:11:b0:7d:2b:70:51:ab:22:a4: fb:cd:1a:d1:e2:fd:36:83:9f:e0:1e:61:7d:b4:1f: f9:eb:ae:76:87:69:ca:53:db:47:ce:8d:6a:f2:b2: 96:ab:be:12:07:97:c8:55:53:f9:4c:f9:7d:66:68: fb:de:7f:8d:f6:c0:89:81:5c:96:a8:7e:1e:94:2b: af:53:44:09:de:aa:d5:9a:53:62:9a:b5:20:61:93: e0:9f:23:db:78:6a:ea:35:fa:59:8a:0f:50:6f:45: 8f:80:f4:20:05:06:66:b3:a7:93:60:87:12:38:01: 4d:b8:d0:a6:4a:65:40:b1:15:52:7b:82:4b:a1:ca: 79:ed:5e:35:ad:d8:be:de:d2:3f:5c:cc:a7:bd:84: 9d:14:16:ea:ea:1b:2d:68:83:dd:b5:10:d1:09:2e: 35:12:3d:52:84:e1:76:d8:eb:de:8d:c8:69:af:dd: be:08:55:0d:ea:67:c9:47:a2:01:59:fc:d9:3d:16: 1b:68:8b:0f:2f:fc:1e:83:9e:c7:d0:9e:4e:51:82: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:0B:13:7C:28:D4:AD:F1:F8:AC:1B:4A:16:10:14:46:DB:30:AC X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:15:61:4c:5b:9f:16:ca:0c:4e:a2:bb:61:3c:ac:b2:9a:82: 11:09:cd:ce:fc:41:b5:66:fb:0b:11:40:15:54:7c:e4:61:86: 45:df:d2:8e:74:9c:5b:3e:50:4f:61:06:9e:16:ec:4e:b1:cf: b8:98:cf:da:ee:01:f5:fd:10:81:bb:0e:90:08:20:6b:41:a6: be:4c:10:3f:9d:62:77:ea:a3:28:a1:45:a7:90:ad:ac:49:75: 89:65:d7:3e:67:1c:35:dd:e4:c5:de:ae:c8:be:c2:b8:64:84: 00:0b:ec:7a:28:be:71:44:e1:79:e0:a7:05:bd:b2:eb:e7:b0: 1c:05:fb:b9:a1:b9:5d:33:5a:0b:9d:b0:15:d7:93:43:0e:72: e3:82:9c:fc:46:97:1c:c1:99:ab:32:f5:ef:b8:7a:f3:5e:2d: ed:b8:0d:9a:c3:fd:a2:de:8c:2a:30:6b:13:f6:01:20:5b:60: c5:f7:61:61:69:c5:cb:d9:f6:9a:89:c2:1c:9e:c1:7f:c4:a7: df:0b:6e:40:ae:5c:b0:65:89:8f:e5:c4:6c:67:68:3c:17:ad: 8c:41:93:21:e0:cd:f1:c5:bc:e9:4c:35:4c:bd:31:fb:5c:67: 1a:0a:88:c1:85:39:54:ad:30:39:7f:76:d2:dc:c0:bb:08:e9: ab:51:5a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNTMxMDY0MzE3WhcNMjUwNjA3MDY0MzE3WjAYMRYwFAYD VQQDEw02ODNhYTUwNi0wNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12XNwHfG2mYJEL2Txm4WqboCc+SMkvOVDbyjGtDP/fqO0o8bhMe8L1hLvz95 8PcrjUwRsH0rcFGrIqT7zRrR4v02g5/gHmF9tB/56652h2nKU9tHzo1q8rKWq74S B5fIVVP5TPl9Zmj73n+N9sCJgVyWqH4elCuvU0QJ3qrVmlNimrUgYZPgnyPbeGrq NfpZig9Qb0WPgPQgBQZms6eTYIcSOAFNuNCmSmVAsRVSe4JLocp57V41rdi+3tI/ XMynvYSdFBbq6hstaIPdtRDRCS41Ej1ShOF22Ovejchpr92+CFUN6mfJR6IBWfzZ PRYbaIsPL/weg57H0J5OUYJp4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS/CxN8 KNSt8fisG0oWEBRG2zCsMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtm MTV1YVVFcjFwRTJ1Q202Q2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkFWFMW58WygxOorthPKyymoIRCc3O/EG1ZvsLEUAVVHzkYYZF39KO dJxbPlBPYQaeFuxOsc+4mM/a7gH1/RCBuw6QCCBrQaa+TBA/nWJ36qMooUWnkK2s SXWJZdc+Zxw13eTF3q7IvsK4ZIQAC+x6KL5xROF54KcFvbLr57AcBfu5obldM1oL nbAV15NDDnLjgpz8RpccwZmrMvXvuHrzXi3tuA2aw/2i3owqMGsT9gEgW2DF92Fh acXL2faaicIcnsF/xKffC25ArlywZYmP5cRsZ2g8F62MQZMh4M3xxbzpTDVMvTH7 XGcaCojBhTlUrTA5f3bS3MC7COmrUVrz -----END CERTIFICATE-----Generated at Sat May 31 15:42:06 2025 by rpki-client