$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: RU5xwunUU2E2Y94avRcbFH6mq76HsSUE5fZjzzVoJno= Subject key identifier: C6:72:48:C2:53:BD:BE:42:B6:28:ED:31:23:FC:CE:F3:AE:72:45:E9 Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: 018A Signing time: Sun 19 Oct 2025 06:07:26 +0000 Manifest this update: Sun 19 Oct 2025 06:07:25 +0000 Manifest next update: Sun 26 Oct 2025 06:07:25 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: 9LlfCUKdD2oNRCQ3Ot8nHJrTLqhkFtjlNc/OfV7BwtE=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: 5LGDu0CCi6DfJNCRARsLcv5edhJaqrMRVu8YSoKbd1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: Oct 19 06:07:25 2025 GMT Not After : Oct 26 06:07:25 2025 GMT Subject: CN=68f4801d-1585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:ef:72:24:ea:3d:dc:3d:72:7a:87:47:83: c9:8f:ea:97:60:ad:74:93:52:67:0f:d6:ee:c9:50: ed:a9:15:37:d7:e4:fb:80:af:b5:18:a2:89:a1:8e: 82:d2:c2:ee:03:a5:85:56:a0:ea:53:99:11:54:73: bd:c7:bf:51:72:ac:c1:80:aa:1a:f8:7c:96:10:05: d3:26:f6:94:13:c7:b2:f9:6b:61:b2:9e:41:de:06: 75:1f:c9:08:07:39:d6:4f:6d:f2:58:8e:9f:a2:a9: 81:9e:c2:3f:0d:d2:5d:be:fb:c3:34:09:30:b8:16: bd:14:69:1d:4f:7b:71:67:09:59:22:fa:cc:cf:bb: 61:46:c4:bd:51:c2:ce:55:2d:73:3f:43:e8:3b:07: a8:21:9d:99:b2:d3:c7:74:f0:27:b7:39:43:f5:90: 56:cd:f3:34:89:cf:dd:9d:d1:55:e3:54:e9:07:f1: 74:67:02:24:ee:5b:46:88:92:46:17:75:1d:31:0d: 78:1f:f0:65:19:3b:b7:84:6e:d8:06:ff:5f:2e:31: 9c:8e:85:e4:20:eb:51:1c:12:ce:6b:c1:7c:30:98: 35:6c:1e:f7:f6:2c:ff:9b:1f:36:9d:40:42:fe:51: aa:9c:64:f4:77:d3:0d:40:be:64:c3:43:d5:77:4f: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:72:48:C2:53:BD:BE:42:B6:28:ED:31:23:FC:CE:F3:AE:72:45:E9 X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:87:7e:b6:e8:16:52:ea:21:9f:95:47:5a:48:5d:64:4f:c5: 60:53:22:1d:9e:83:b4:20:a1:df:40:fd:f7:10:c3:45:07:b8: b6:15:f1:c8:94:44:ad:d8:6f:1c:2c:cf:88:25:3d:17:04:47: 8b:6c:4f:df:f9:36:a8:1c:19:8c:56:b9:0f:3e:5e:34:af:51: ea:a4:2d:2e:ee:f9:5e:60:ca:43:84:70:8c:ac:cb:1e:7d:3c: 18:c5:4c:5f:ae:ea:9b:7a:3b:37:ba:a2:f6:d5:2f:a5:55:e1: d3:d6:09:b6:88:ef:be:d4:e6:f0:43:f5:4d:45:82:f7:31:ce: 52:69:4f:1e:9d:85:29:c0:e2:fb:80:bc:60:d3:64:18:5a:f7: 1e:39:4b:c7:f8:8c:31:52:ca:61:20:03:5b:02:d0:89:b6:6c: f0:f7:c6:8a:59:10:12:03:ee:00:60:4c:f8:de:92:e3:35:59: 67:fa:67:4b:1c:b7:f4:6c:c6:e8:b8:d7:b3:1c:37:02:86:be: 95:1f:70:37:54:f2:9f:69:b5:8f:b6:de:e2:3b:a0:cf:c7:1d: 04:8a:81:a4:a8:25:af:38:02:b5:83:cb:2f:ca:72:59:26:69: 6a:80:51:1f:2b:64:93:a9:20:50:6b:df:dd:9d:43:97:ad:16: db:6c:a7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjUxMDE5MDYwNzI1WhcNMjUxMDI2MDYwNzI1WjAYMRYwFAYD VQQDEw02OGY0ODAxZC0xNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zvvciTqPdw9cnqHR4PJj+qXYK10k1JnD9buyVDtqRU31+T7gK+1GKKJoY6C 0sLuA6WFVqDqU5kRVHO9x79RcqzBgKoa+HyWEAXTJvaUE8ey+Wthsp5B3gZ1H8kI BznWT23yWI6foqmBnsI/DdJdvvvDNAkwuBa9FGkdT3txZwlZIvrMz7thRsS9UcLO VS1zP0PoOweoIZ2ZstPHdPAntzlD9ZBWzfM0ic/dndFV41TpB/F0ZwIk7ltGiJJG F3UdMQ14H/BlGTu3hG7YBv9fLjGcjoXkIOtRHBLOa8F8MJg1bB739iz/mx82nUBC /lGqnGT0d9MNQL5kw0PVd0/eewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZySMJT vb5CtijtMSP8zvOuckXpMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYh3626BZS6iGflUdaSF1kT8VgUyIdnoO0IKHfQP33EMNFB7i2FfHI lESt2G8cLM+IJT0XBEeLbE/f+TaoHBmMVrkPPl40r1HqpC0u7vleYMpDhHCMrMse fTwYxUxfruqbejs3uqL21S+lVeHT1gm2iO++1ObwQ/VNRYL3Mc5SaU8enYUpwOL7 gLxg02QYWvceOUvH+IwxUsphIANbAtCJtmzw98aKWRASA+4AYEz43pLjNVln+mdL HLf0bMbouNezHDcChr6VH3A3VPKfabWPtt7iO6DPxx0EioGkqCWvOAK1g8svynJZ JmlqgFEfK2STqSBQa9/dnUOXrRbbbKfx -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:51 2025 by rpki-client