$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json) Hash identifier: tjPdlxG5n+qlYYPYwbBdK+3cVrFDfHuNzOTcngRss98= Subject key identifier: E8:65:BA:7C:2F:F2:E1:60:01:69:4A:C8:C9:71:DF:4F:82:C8:06:A5 Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Certificate serial: 0B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft Manifest number: 0B71 Signing time: Sat 18 Oct 2025 19:56:06 +0000 Manifest this update: Sat 18 Oct 2025 19:56:04 +0000 Manifest next update: Sat 25 Oct 2025 19:56:04 +0000 Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: k/c48JWuTXPrQZ8sQN0/ssBnEg+dSpCll1Q9/JVzw50=) 2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: U5r4SWMbZzX6cEmOkEoVm3P+a9O6vlGibQIW9uT8u/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Validity Not Before: Oct 18 19:56:04 2025 GMT Not After : Oct 25 19:56:04 2025 GMT Subject: CN=68f3f0d5-47cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:fa:ac:8a:a2:0f:7a:2d:c3:f2:51:00:a5: 81:57:f9:53:e9:e3:cf:e9:ba:61:f7:e1:e6:58:6e: be:f8:8c:92:de:7e:0d:8b:1a:9a:86:f2:57:51:0f: 26:e2:99:a5:91:35:3a:46:99:a1:0c:f1:5c:b0:0a: f9:18:6c:e8:a6:ee:0e:d8:cf:94:41:99:09:a8:99: 69:53:c4:c6:fe:88:d5:d2:d4:98:c7:e7:ac:40:d8: 91:3e:8a:82:cd:9f:1a:ec:48:02:a5:bb:e7:7a:e5: 2f:56:9c:12:61:2d:49:6e:21:29:eb:75:f7:72:a1: 50:5f:53:f9:d7:39:11:49:b2:76:63:3c:55:5b:08: e5:a8:52:41:c5:8b:2c:79:54:9f:46:19:b1:2c:09: ae:b5:c5:00:90:5d:ef:b6:b9:46:19:09:de:d2:11: 58:b1:84:c0:2b:dc:5f:14:0f:78:6c:09:83:32:c9: c2:cc:d7:85:2d:c6:6a:82:69:5d:fe:51:83:0f:12: 62:5a:5a:82:05:41:ac:df:9f:f6:3e:f4:55:b1:23: 2b:f1:67:76:43:23:4c:c8:12:e7:6e:b1:4e:df:20: 9b:b4:63:e1:59:cf:22:91:14:85:ff:fb:bd:df:82: 92:0d:ea:ad:cc:d9:a5:40:dd:53:53:1a:03:16:a7: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:65:BA:7C:2F:F2:E1:60:01:69:4A:C8:C9:71:DF:4F:82:C8:06:A5 X509v3 Authority Key Identifier: keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:3a:76:0f:d5:73:ef:06:ca:99:fc:d3:88:72:d5:0e:61: 9f:2b:9c:2d:e5:f7:27:76:f0:5e:97:b6:91:a5:43:8b:eb:e6: 92:e2:fa:38:b2:b5:bf:af:2f:c3:44:52:14:04:9c:c4:5b:17: a2:08:df:0b:a0:37:4f:32:f4:02:3f:27:cf:95:ab:67:a1:a8: 4b:9b:29:77:73:83:4f:2c:9f:92:18:d6:21:07:7e:51:da:04: cc:1a:d7:a7:f3:63:47:20:c2:70:e0:26:fe:fc:65:0c:92:b0: 7d:2d:8c:c2:bc:a0:27:2f:45:02:6a:b2:39:ec:91:73:23:5f: 73:f7:db:d0:ec:c6:24:28:6b:4f:e4:eb:99:5c:e0:09:79:0c: 08:37:cd:5d:17:6f:44:98:74:21:bd:fe:13:c7:39:9a:04:f0: 99:79:18:1f:c8:8c:bf:43:3e:72:9f:60:45:1e:b9:e8:58:54: a7:09:32:d3:22:09:88:59:96:f7:fb:74:a4:d5:61:46:86:d5: f3:7b:4e:3b:db:b8:da:ec:58:99:f8:0d:f1:95:0c:e2:7f:7b: 02:f2:da:c5:33:b1:fb:d8:2d:4e:d2:7e:cf:a5:0d:ee:5e:df: c1:3d:2c:ff:31:03:eb:10:b7:d3:f3:bb:bd:d1:50:b4:ac:ee: 2a:d7:ad:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzNDAxMTAvBgNVBAUTKDJFNzM1MzkyQzY4NkI4RDhEQzg4QzBDQ0Q1OUJGMkFF RkJBN0U4QjAwHhcNMjUxMDE4MTk1NjA0WhcNMjUxMDI1MTk1NjA0WjAYMRYwFAYD VQQDEw02OGYzZjBkNS00N2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20/6rIqiD3otw/JRAKWBV/lT6ePP6bph9+HmWG6++IyS3n4NixqahvJXUQ8m 4pmlkTU6RpmhDPFcsAr5GGzopu4O2M+UQZkJqJlpU8TG/ojV0tSYx+esQNiRPoqC zZ8a7EgCpbvneuUvVpwSYS1JbiEp63X3cqFQX1P51zkRSbJ2YzxVWwjlqFJBxYss eVSfRhmxLAmutcUAkF3vtrlGGQne0hFYsYTAK9xfFA94bAmDMsnCzNeFLcZqgmld /lGDDxJiWlqCBUGs35/2PvRVsSMr8Wd2QyNMyBLnbrFO3yCbtGPhWc8ikRSF//u9 34KSDeqtzNmlQN1TUxoDFqc2BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhlunwv 8uFgAWlKyMlx30+CyAalMB8GA1UdIwQYMBaAFC5zU5LGhrjY3IjAzNWb8q77p+iw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDM0MC8wNDY4Mzk3QTND NEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VOamNpTURNMVp2eXJ2dW42 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTlRrc2FHdU5qY2lNRE0xWnZ5cnZ1bjZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDM0MC8wNDY4Mzk3QTNDNEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VO amNpTURNMVp2eXJ2dW42TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcqjp2D9Vz7wbKmfzTiHLVDmGfK5wt5fcndvBel7aRpUOL6+aS4vo4 srW/ry/DRFIUBJzEWxeiCN8LoDdPMvQCPyfPlatnoahLmyl3c4NPLJ+SGNYhB35R 2gTMGten82NHIMJw4Cb+/GUMkrB9LYzCvKAnL0UCarI57JFzI19z99vQ7MYkKGtP 5OuZXOAJeQwIN81dF29EmHQhvf4TxzmaBPCZeRgfyIy/Qz5yn2BFHrnoWFSnCTLT IgmIWZb3+3Sk1WFGhtXze04727ja7FiZ+A3xlQzif3sC8trFM7H72C1O0n7PpQ3u Xt/BPSz/MQPrELfT87u90VC0rO4q162q -----END CERTIFICATE-----Generated at Mon Oct 20 04:21:03 2025 by rpki-client