$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: PPVprQbt/6Ez6AGjL8IGGEmr9eAIfmap5p+jUd9v0z4= Subject key identifier: 17:2E:BE:9C:72:08:B0:57:26:3A:29:DF:86:4D:5C:D0:7C:C4:A4:23 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: C7 Signing time: Sun 19 Oct 2025 09:00:44 +0000 Manifest this update: Sun 19 Oct 2025 09:00:44 +0000 Manifest next update: Sun 26 Oct 2025 09:00:44 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: grg2596SbRihEtrZXTfK6mY8Be2wo4+zqg/7n/oiGE8=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Oct 19 09:00:44 2025 GMT Not After : Oct 26 09:00:44 2025 GMT Subject: CN=68f4a8bc-6b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d9:f5:f0:e3:e9:40:f4:88:5c:b3:25:91:f9: 4c:f6:a0:9b:89:6a:52:5c:84:fc:cd:d3:85:75:c3: df:00:2d:e2:76:fe:0f:33:e7:0f:c6:65:5e:b8:51: 4a:4d:8e:b3:4d:f5:1a:01:18:ab:94:df:cd:c8:ee: 5c:1a:22:0c:4c:88:e0:3e:8f:b9:24:b9:32:7c:bd: 17:93:ab:2e:61:1e:a2:32:1a:98:7a:f1:31:ba:36: 1b:82:01:64:eb:2c:cd:75:6e:44:7b:0f:eb:14:12: e7:93:34:58:96:2d:bb:72:25:c2:6b:b1:a2:e0:1d: f4:60:f8:0a:17:e5:43:bc:ce:fa:df:60:4a:3a:e7: d5:df:95:d3:0f:05:9e:57:4d:1e:f5:28:9b:a0:58: 12:eb:3d:c6:10:c4:bb:35:06:5b:5d:c8:a0:6a:bb: 0f:4d:9f:64:6e:2d:6f:fc:c0:6a:a4:6f:22:f3:11: 43:34:52:de:24:d0:91:69:65:a0:f3:ce:db:d9:49: 89:bd:33:b7:ca:bf:64:50:c4:30:be:43:5f:85:90: c2:4f:b4:e4:7b:af:4d:6e:a0:ab:bd:25:49:58:37: 32:f0:da:3e:22:4a:93:4c:1e:50:cf:01:b3:d1:80: 76:68:f5:13:f2:c5:89:d3:58:bf:6a:a1:81:7f:4f: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:BE:9C:72:08:B0:57:26:3A:29:DF:86:4D:5C:D0:7C:C4:A4:23 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:63:21:15:bb:d0:78:08:cb:ce:67:90:d3:fa:fc:ed:dd:7f: cb:cc:a1:91:ab:50:87:91:98:55:b8:85:f1:3a:4f:24:d9:1f: a2:ea:d1:f2:20:f7:d4:a9:1c:c9:7b:64:1a:d0:56:6a:68:56: 73:be:8f:f9:10:e0:d3:19:7d:ab:89:4e:bc:d0:12:b2:a5:9b: 71:c3:12:7f:10:58:2a:ea:1e:30:d8:d8:92:3a:9c:77:59:6a: 45:c8:8b:50:fc:be:53:5e:2b:59:2e:3b:cd:e8:9a:20:74:e5: 08:a2:48:a1:36:81:85:ad:fd:86:7a:24:70:de:44:52:69:31: b6:1a:38:bd:9b:91:72:90:d9:cc:02:7c:e1:66:67:71:dd:4f: 6f:e3:e7:3b:aa:3d:5f:1d:ee:1a:8f:f0:84:a1:b3:50:23:2e: 4a:45:74:e0:ee:a0:8b:fb:4a:85:ae:e6:d0:cc:c5:d5:62:81: 90:83:24:77:43:04:ab:4d:e2:eb:d5:7c:1e:29:50:8d:17:a8: 8c:9b:01:7a:26:53:32:33:50:ec:da:14:58:d5:6c:24:d9:69: be:c7:21:27:65:27:7f:02:97:84:5a:ab:ff:44:06:f8:6c:d8: eb:94:5b:00:09:19:3f:71:79:b5:9c:e5:32:4b:19:92:d5:eb: 34:ac:bf:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5 OTAyNzBFQkYwHhcNMjUxMDE5MDkwMDQ0WhcNMjUxMDI2MDkwMDQ0WjAYMRYwFAYD VQQDEw02OGY0YThiYy02Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Nn18OPpQPSIXLMlkflM9qCbiWpSXIT8zdOFdcPfAC3idv4PM+cPxmVeuFFK TY6zTfUaARirlN/NyO5cGiIMTIjgPo+5JLkyfL0Xk6suYR6iMhqYevExujYbggFk 6yzNdW5Eew/rFBLnkzRYli27ciXCa7Gi4B30YPgKF+VDvM7632BKOufV35XTDwWe V00e9SiboFgS6z3GEMS7NQZbXcigarsPTZ9kbi1v/MBqpG8i8xFDNFLeJNCRaWWg 887b2UmJvTO3yr9kUMQwvkNfhZDCT7Tke69NbqCrvSVJWDcy8No+IkqTTB5QzwGz 0YB2aPUT8sWJ01i/aqGBf0/NnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcuvpxy CLBXJjop34ZNXNB8xKQjMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5 RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwYyEVu9B4CMvOZ5DT+vzt3X/LzKGRq1CHkZhVuIXxOk8k2R+i6tHy IPfUqRzJe2Qa0FZqaFZzvo/5EODTGX2riU680BKypZtxwxJ/EFgq6h4w2NiSOpx3 WWpFyItQ/L5TXitZLjvN6JogdOUIokihNoGFrf2GeiRw3kRSaTG2Gji9m5FykNnM AnzhZmdx3U9v4+c7qj1fHe4aj/CEobNQIy5KRXTg7qCL+0qFrubQzMXVYoGQgyR3 QwSrTeLr1XweKVCNF6iMmwF6JlMyM1Ds2hRY1Wwk2Wm+xyEnZSd/ApeEWqv/RAb4 bNjrlFsACRk/cXm1nOUySxmS1es0rL/l -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:00 2025 by rpki-client