$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json) Hash identifier: KT+v/dsfx/eIA6uZI8+haVISETwV17xGom3amEHFy/w= Subject key identifier: 63:47:42:57:9C:99:73:F7:03:3A:27:A8:10:91:02:05:FD:7D:9A:2A Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Certificate serial: 11D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft Manifest number: 11CB Signing time: Sat 18 Oct 2025 17:43:33 +0000 Manifest this update: Sat 18 Oct 2025 17:43:32 +0000 Manifest next update: Sat 25 Oct 2025 17:43:32 +0000 Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: /Iw79vqSpGm8tnWyIrhG2qaOWCpmlYVjSZiKYZQtdT8=) 2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: 33z1F9RZ3yx55dZ5+rGpqQ7gwX1OExcujk8Oepxi/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4568 (0x11d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Validity Not Before: Oct 18 17:43:32 2025 GMT Not After : Oct 25 17:43:32 2025 GMT Subject: CN=68f3d1c5-9ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:bb:14:cb:dd:1f:7d:a7:e5:e7:43:dc:9a: 4f:7c:28:56:ed:2e:cc:f0:b1:62:5f:5c:9f:7f:1d: 71:2c:34:68:6b:d2:07:66:a9:fc:52:2c:47:34:69: 24:9a:5c:16:7d:78:c9:84:ce:76:29:79:7c:93:2d: fe:df:d1:32:40:ee:44:ef:4b:4a:83:12:3b:41:19: a8:b5:f8:08:f1:55:57:cc:99:7c:58:08:ed:11:51: 9a:60:4a:cb:de:9d:4e:16:1c:eb:43:95:42:5e:ce: 17:4b:b0:73:ca:07:b6:02:6b:c8:f5:6e:0a:6b:5d: a5:ac:46:b7:03:de:98:72:d5:5b:64:ce:de:a0:5d: e4:a4:2a:5c:1d:37:fe:91:c7:e0:63:6c:aa:0e:48: b2:d9:35:0e:13:d8:8a:86:78:b6:6a:37:58:7f:c7: 7c:45:40:bd:d3:b2:ca:8f:8c:fd:26:69:7d:8c:58: 35:80:dd:1c:97:e9:6d:dd:57:a1:e3:76:ec:c2:b7: 8b:fc:e1:bd:27:31:65:59:26:40:97:d5:bd:e0:76: ef:13:3e:33:0f:f5:7c:1d:bb:1a:5c:b1:56:f4:67: 3a:5d:78:e4:e0:d2:f6:45:4c:05:01:09:e4:c5:97: b8:21:cd:33:21:55:32:43:2b:2d:90:cc:52:38:ff: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:47:42:57:9C:99:73:F7:03:3A:27:A8:10:91:02:05:FD:7D:9A:2A X509v3 Authority Key Identifier: keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:fc:1d:bf:32:09:88:7b:74:72:32:28:10:60:e4:bf:ce:d8: 6e:2e:ae:d6:43:60:66:2c:18:1a:75:2b:f6:fe:72:6e:e5:b1: 0d:ca:ba:77:13:ac:80:68:cc:34:7d:c1:84:5b:85:d8:9d:fd: 3f:4c:95:4e:03:96:80:f1:47:b0:e3:68:2c:f4:81:79:20:7d: 99:86:5a:82:c9:34:d8:00:38:05:23:08:fb:ab:d6:b5:a2:b5: 0a:87:94:2f:c8:0a:81:00:3b:69:12:5d:ab:a3:8a:4d:6a:de: 08:a5:5b:2b:fe:9a:4a:21:01:e2:b0:d7:0a:6b:c8:6a:04:b0: fa:04:94:38:93:c7:45:88:1c:2b:5d:32:19:3b:bf:3b:3b:19: b7:48:9d:97:6d:50:8c:03:70:b5:68:eb:82:d5:ca:c2:00:7c: 01:fc:e2:8f:bc:6e:ad:6d:1a:b2:89:72:bd:36:07:45:f0:c5: cb:91:4c:ef:ea:c3:c1:e5:95:b4:31:bc:10:43:a3:a4:f3:2e: 66:ab:fe:3e:02:e9:79:4a:9e:99:46:bc:e1:35:1a:df:c5:92: a2:ca:49:6f:40:32:b4:f0:c2:82:fc:3a:88:a0:bd:83:a3:3c: 1a:f8:fb:ff:d2:54:90:0b:1f:1c:fd:06:df:34:c1:79:1b:5b: 31:c9:9f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBNEIxMTAvBgNVBAUTKDk2QTc5OUEyRjRCMzA4QjIyNTIyQkNFNDVFMzE4RDZB NzAyNjI5MkIwHhcNMjUxMDE4MTc0MzMyWhcNMjUxMDI1MTc0MzMyWjAYMRYwFAYD VQQDEw02OGYzZDFjNS05ZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx167FMvdH32n5edD3JpPfChW7S7M8LFiX1yffx1xLDRoa9IHZqn8UixHNGkk mlwWfXjJhM52KXl8ky3+39EyQO5E70tKgxI7QRmotfgI8VVXzJl8WAjtEVGaYErL 3p1OFhzrQ5VCXs4XS7Bzyge2AmvI9W4Ka12lrEa3A96YctVbZM7eoF3kpCpcHTf+ kcfgY2yqDkiy2TUOE9iKhni2ajdYf8d8RUC907LKj4z9Jml9jFg1gN0cl+lt3Veh 43bswreL/OG9JzFlWSZAl9W94HbvEz4zD/V8HbsaXLFW9Gc6XXjk4NL2RUwFAQnk xZe4Ic0zIVUyQystkMxSOP/tyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNHQlec mXP3AzonqBCRAgX9fZoqMB8GA1UdIwQYMBaAFJanmaL0swiyJSK85F4xjWpwJikr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE0Qi9FMzc3RkQ3QUZF QTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNMSWxJcnprWGpHTmFuQW1L U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxZVpvdlN6Q0xJbElyemtYakdOYW5BbUtTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkE0Qi9FMzc3RkQ3QUZFQTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNM SWxJcnprWGpHTmFuQW1LU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD/B2/MgmIe3RyMigQYOS/zthuLq7WQ2BmLBgadSv2/nJu5bENyrp3 E6yAaMw0fcGEW4XYnf0/TJVOA5aA8Uew42gs9IF5IH2ZhlqCyTTYADgFIwj7q9a1 orUKh5QvyAqBADtpEl2ro4pNat4IpVsr/ppKIQHisNcKa8hqBLD6BJQ4k8dFiBwr XTIZO787Oxm3SJ2XbVCMA3C1aOuC1crCAHwB/OKPvG6tbRqyiXK9NgdF8MXLkUzv 6sPB5ZW0MbwQQ6Ok8y5mq/4+Aul5Sp6ZRrzhNRrfxZKiyklvQDK08MKC/DqIoL2D ozwa+Pv/0lSQCx8c/QbfNMF5G1sxyZ/l -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:48 2025 by rpki-client