$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: WRecI9DnDZZY2Lk5hN3Jd/xoNEMzGWB2NSQq5s5xXxQ= Subject key identifier: E8:02:0F:A1:19:29:0F:74:54:D3:90:43:90:19:3A:6E:1F:90:AF:E2 Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 0220 Signing time: Sun 19 Oct 2025 04:20:39 +0000 Manifest this update: Sun 19 Oct 2025 04:20:39 +0000 Manifest next update: Sun 26 Oct 2025 04:20:39 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: jQ8ADm7sL8WncR0su8iPg+nC6DDUwqTWT5CZKdcsHMc=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: Oct 19 04:20:39 2025 GMT Not After : Oct 26 04:20:39 2025 GMT Subject: CN=68f46717-43e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:a1:e6:8b:52:a2:d4:3f:e7:47:bf:85:96: 86:6a:66:f5:e7:e9:e0:e3:be:da:1e:41:9f:25:35: 62:1f:6c:a6:da:58:0e:17:1a:2b:42:19:a4:0a:51: 47:6d:cc:8d:4b:74:41:4d:fc:06:8b:e9:82:19:d0: 80:b6:ce:8c:e1:dd:e1:8c:cc:c2:8d:db:f6:bd:ea: f1:bb:3b:6f:2a:00:9d:0a:bb:15:53:ae:c2:4d:94: ee:5b:a4:ec:4e:93:97:66:1b:32:45:7d:ee:59:40: 61:ef:d5:9d:e7:f8:c7:62:0b:70:b1:fc:34:da:ab: 5e:5f:a4:b6:e7:44:25:32:c9:8f:d6:cc:25:40:ea: 23:8f:5e:09:e8:48:85:d2:81:aa:36:49:56:01:cb: 0b:a0:ed:32:f7:01:b9:f0:4d:42:9b:94:51:7b:9a: 77:3b:48:7d:7f:d3:85:58:5e:cc:45:d5:6a:6f:a9: 57:d6:73:c5:c0:59:e6:2e:ca:54:94:6e:c0:e5:cb: 3c:c5:ed:27:02:58:75:3b:cd:56:4a:c4:74:e0:82: c9:bd:54:2d:56:5b:15:90:8c:8f:b6:be:f8:1b:b4: 7c:02:dd:ff:43:75:86:70:ec:db:be:3d:7b:f2:5e: 64:e6:db:41:86:47:1d:81:49:8f:e1:d8:2d:db:cb: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:0F:A1:19:29:0F:74:54:D3:90:43:90:19:3A:6E:1F:90:AF:E2 X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:37:7a:25:48:6b:44:41:35:89:49:41:eb:b7:2f:13:39:c8: bb:80:79:a3:0d:56:4a:a0:31:65:8a:a4:a4:9c:51:38:db:e5: 7b:a5:36:f7:f9:92:db:9d:bc:c1:ef:ae:cb:d1:0c:b1:5a:84: 9b:e5:50:ab:15:f2:5e:de:96:d3:c8:31:33:cb:e3:e1:ff:ab: d5:98:93:5f:5e:5c:43:e1:15:c7:bb:84:e8:89:a5:5a:7d:62: dc:b3:73:1c:30:6c:9e:10:ea:e2:1c:dc:4b:dc:4d:b6:7e:db: 7a:03:ec:a8:ce:68:76:b7:8f:73:1c:18:15:39:52:0d:33:bc: 1b:8b:a4:48:70:28:e0:e4:c0:62:14:5d:ce:47:85:e9:32:ed: 05:3d:81:01:5d:30:9e:6b:25:91:c6:42:65:47:58:fc:40:56: 7f:39:ae:3d:21:4f:ea:1f:8d:b7:15:9d:91:67:0a:f3:d9:74: 8a:87:07:c6:60:56:80:a7:64:02:52:25:09:d9:21:41:6b:58: 55:79:87:79:c2:25:13:b9:80:47:cb:5b:9a:fa:2f:49:6a:59: 59:66:de:22:e3:8c:79:98:f0:47:ae:1b:66:b2:a6:db:9a:50: de:87:97:af:79:35:29:86:a2:f6:95:34:63:32:ac:0d:40:0d: c4:ea:c2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjUxMDE5MDQyMDM5WhcNMjUxMDI2MDQyMDM5WjAYMRYwFAYD VQQDEw02OGY0NjcxNy00M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwduh5otSotQ/50e/hZaGamb15+ng477aHkGfJTViH2ym2lgOFxorQhmkClFH bcyNS3RBTfwGi+mCGdCAts6M4d3hjMzCjdv2verxuztvKgCdCrsVU67CTZTuW6Ts TpOXZhsyRX3uWUBh79Wd5/jHYgtwsfw02qteX6S250QlMsmP1swlQOojj14J6EiF 0oGqNklWAcsLoO0y9wG58E1Cm5RRe5p3O0h9f9OFWF7MRdVqb6lX1nPFwFnmLspU lG7A5cs8xe0nAlh1O81WSsR04ILJvVQtVlsVkIyPtr74G7R8At3/Q3WGcOzbvj17 8l5k5ttBhkcdgUmP4dgt28vqMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgCD6EZ KQ90VNOQQ5AZOm4fkK/iMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7N3olSGtEQTWJSUHrty8TOci7gHmjDVZKoDFliqSknFE42+V7pTb3 +ZLbnbzB767L0QyxWoSb5VCrFfJe3pbTyDEzy+Ph/6vVmJNfXlxD4RXHu4ToiaVa fWLcs3McMGyeEOriHNxL3E22ftt6A+yozmh2t49zHBgVOVINM7wbi6RIcCjg5MBi FF3OR4XpMu0FPYEBXTCeayWRxkJlR1j8QFZ/Oa49IU/qH423FZ2RZwrz2XSKhwfG YFaAp2QCUiUJ2SFBa1hVeYd5wiUTuYBHy1ua+i9JallZZt4i44x5mPBHrhtmsqbb mlDeh5eveTUphqL2lTRjMqwNQA3E6sLE -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:55 2025 by rpki-client