$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: crEYwIqbzKV5FoFqNP/fB6s6gu2b3eUzYGDMpNPEgPc= Subject key identifier: BA:3C:34:46:4E:F2:D8:F1:82:82:65:46:FB:E9:D2:8E:9B:8C:5F:98 Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: A7 Signing time: Sun 19 Oct 2025 09:33:27 +0000 Manifest this update: Sun 19 Oct 2025 09:33:26 +0000 Manifest next update: Sun 26 Oct 2025 09:33:26 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: 08nmhnqJOJF4nSOpxmwyTtnodjjIMVpxiEX2DSdSoqU=) 2: E941D4F2A4FD11F090BC8576C4F9AE02.roa (hash: duEUr4kKsrDJuBz+0GVZgBqKhdqXHVgsZ+uYpS7Bds4=) 3: FEF58B2CA4FD11F0B44CA476C4F9AE02.roa (hash: iGhDBnOxWhw1jSJu/LLfS77DST3/2+GFITpYk8hPiGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Oct 19 09:33:26 2025 GMT Not After : Oct 26 09:33:26 2025 GMT Subject: CN=68f4b067-078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f5:fd:b5:ba:50:6f:8e:fc:df:c2:65:a0:dd: 19:ae:78:34:be:f4:ab:d1:64:17:94:a5:7d:0c:0d: e4:a9:2b:d0:05:ee:84:4f:ba:b3:94:58:d2:c3:5a: 6c:05:c4:ad:75:fa:17:30:d3:bf:ba:5c:09:65:8b: ef:a7:bd:da:f9:72:b2:ef:f5:7f:27:a5:e8:f9:b8: 81:d5:c7:dd:01:8f:35:1f:bb:d9:e2:67:a3:b1:e4: ae:70:33:79:47:2f:c3:78:88:f3:0b:51:db:81:36: 4d:d4:d5:b0:fd:d9:67:b5:26:a2:2b:55:0b:d6:89: fc:51:d4:29:c6:41:aa:10:83:d4:47:a2:da:65:e5: 42:88:84:d3:07:25:26:52:28:e2:03:23:f9:a8:52: 65:98:60:87:7f:41:34:08:2e:5c:5e:92:a1:b2:10: 09:6c:79:df:e6:0f:2a:57:0d:93:d0:e7:4a:d8:a7: 95:24:54:44:a0:ae:b0:42:6d:d1:b5:b1:6a:02:07: f6:31:33:af:ed:2b:ac:a0:52:c0:d0:96:57:54:7d: a3:39:d9:85:45:23:89:db:75:15:74:49:b0:dd:86: 77:eb:13:89:b6:aa:3f:5c:ec:2d:1c:bb:8d:fb:d0: d2:55:6a:dd:fb:ce:f3:73:57:bc:e8:9f:e4:cc:fd: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3C:34:46:4E:F2:D8:F1:82:82:65:46:FB:E9:D2:8E:9B:8C:5F:98 X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:6c:1d:ea:0a:59:9b:ba:19:28:7e:fc:5b:e6:6b:8c:0c:24: 20:ed:c4:b7:d2:f5:1f:b5:77:98:58:d2:6e:e4:f5:53:67:96: 7d:cc:15:bb:4e:23:35:da:11:2c:18:7b:64:1c:ce:54:53:15: 3b:92:a1:a2:1d:a8:89:e3:a9:97:17:d4:8e:d4:ae:c1:04:11: 1c:f4:2e:64:43:9e:33:37:88:c8:d0:2b:86:67:21:39:c0:4f: c3:d7:16:cc:de:a4:f1:aa:ab:99:e8:97:49:59:85:45:3a:25: fa:ae:18:48:14:4b:5f:e6:38:f9:c9:52:fe:8d:ae:a3:ec:c2: d0:4d:de:af:9b:cf:ac:1f:0f:fe:e3:9e:d1:3a:7e:10:7c:c2: a6:95:60:d6:c1:3b:8c:f7:e3:d8:ad:3a:a7:e9:35:eb:e7:83: 95:69:ae:41:d9:0e:57:00:db:50:43:ec:58:a2:fc:0a:81:31: b6:cf:b6:2d:5b:76:54:2c:0a:6b:ee:59:cc:da:b4:d7:42:d0: eb:d7:8c:d6:bc:55:33:01:49:78:90:58:67:f7:64:25:73:d1: a9:86:8c:99:71:f7:7a:87:6b:d9:c4:29:60:07:24:af:4a:4f: 11:f0:b5:2f:1b:be:3e:52:b3:00:b4:2a:c1:56:95:c6:0b:e3: a7:14:11:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjUxMDE5MDkzMzI2WhcNMjUxMDI2MDkzMzI2WjAYMRYwFAYD VQQDEw02OGY0YjA2Ny0wNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vX9tbpQb47838JloN0Zrng0vvSr0WQXlKV9DA3kqSvQBe6ET7qzlFjSw1ps BcStdfoXMNO/ulwJZYvvp73a+XKy7/V/J6Xo+biB1cfdAY81H7vZ4mejseSucDN5 Ry/DeIjzC1HbgTZN1NWw/dlntSaiK1UL1on8UdQpxkGqEIPUR6LaZeVCiITTByUm UijiAyP5qFJlmGCHf0E0CC5cXpKhshAJbHnf5g8qVw2T0OdK2KeVJFREoK6wQm3R tbFqAgf2MTOv7SusoFLA0JZXVH2jOdmFRSOJ23UVdEmw3YZ36xOJtqo/XOwtHLuN +9DSVWrd+87zc1e86J/kzP36UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo8NEZO 8tjxgoJlRvvp0o6bjF+YMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky TkdTakYzcXpJUUdVTG1wUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLbB3qClmbuhkofvxb5muMDCQg7cS30vUftXeYWNJu5PVTZ5Z9zBW7 TiM12hEsGHtkHM5UUxU7kqGiHaiJ46mXF9SO1K7BBBEc9C5kQ54zN4jI0CuGZyE5 wE/D1xbM3qTxqquZ6JdJWYVFOiX6rhhIFEtf5jj5yVL+ja6j7MLQTd6vm8+sHw/+ 457ROn4QfMKmlWDWwTuM9+PYrTqn6TXr54OVaa5B2Q5XANtQQ+xYovwKgTG2z7Yt W3ZULApr7lnM2rTXQtDr14zWvFUzAUl4kFhn92Qlc9GphoyZcfd6h2vZxClgBySv Sk8R8LUvG74+UrMAtCrBVpXGC+OnFBEs -----END CERTIFICATE-----Generated at Mon Oct 20 21:46:38 2025 by rpki-client