$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft File: LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft (raw, json) Hash identifier: WPWPqxwvdHBvZAsh7X14zdx3K+jDuRyzxTwPl6+Of54= Subject key identifier: 2F:AB:B1:68:A6:84:C2:69:26:EA:9E:8F:DC:F1:6B:7A:25:3C:BE:D2 Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 Certificate issuer: /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft Manifest number: 027B Signing time: Sun 19 Oct 2025 03:52:18 +0000 Manifest this update: Sun 19 Oct 2025 03:52:18 +0000 Manifest next update: Sun 26 Oct 2025 03:52:18 +0000 Files and hashes: 1: LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl (hash: G3ExqQmLnF9OyYCV7PyhAZcniq4+ZD9lSv7ROPKCQsI=) 2: 49CEB44A28D111EDB364C870C4F9AE02.roa (hash: v8A7o/rziUd18ChafwKVVQdaKCqkH9AmkhbIbCG9hCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Validity Not Before: Oct 19 03:52:18 2025 GMT Not After : Oct 26 03:52:18 2025 GMT Subject: CN=68f46072-4288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:16:2a:67:f1:af:88:21:ca:4b:b0:ff:98: 69:c5:13:1c:2a:c6:4a:5f:cc:7d:ad:66:05:73:a8: 98:50:21:10:a0:f0:02:28:9f:59:64:f4:83:92:5a: 27:79:3a:05:66:76:5c:87:fd:39:79:ab:6d:0a:8e: 43:bd:8c:5f:d3:22:75:2b:55:59:c2:c2:45:58:cf: 5c:07:2d:b9:45:1e:54:ae:d1:c3:d3:f9:0c:13:57: 6b:6b:13:11:c2:4a:cb:d6:73:7b:80:8d:13:ab:d5: 9e:fb:fd:e6:90:69:1d:e1:4e:8f:97:04:fe:88:e0: 1f:31:e1:f6:a0:7f:12:e9:94:ec:c4:26:71:e5:61: 81:82:f3:ba:ad:cc:b2:66:65:e8:e8:b8:ee:b7:92: 00:95:b9:e1:60:30:cf:f2:56:a1:e3:2b:3d:77:e8: 58:97:be:9c:fd:93:c4:0e:a3:84:09:aa:8d:f4:78: f2:d7:a3:16:6e:42:ba:da:62:97:6e:42:0b:fb:62: 59:df:e5:d7:c5:2e:93:42:28:b5:b8:d8:91:0b:e0: 46:ff:98:e5:40:91:b0:66:60:7c:db:7b:15:49:db: 0b:4f:e7:18:05:a6:1a:1c:65:6e:f7:4f:8f:eb:71: 2a:68:93:f0:74:94:d3:81:20:d7:b5:8b:a6:1e:dd: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AB:B1:68:A6:84:C2:69:26:EA:9E:8F:DC:F1:6B:7A:25:3C:BE:D2 X509v3 Authority Key Identifier: keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7f:08:96:71:7b:07:d1:c8:ec:8c:2c:cf:3c:a7:35:51:cd: c8:74:ca:f9:98:3e:5c:c8:e0:eb:89:74:59:d7:a0:c5:db:76: db:f7:22:2c:f3:8c:8e:d7:6d:24:51:55:e2:26:ba:1f:80:71: 5c:3a:f0:65:c3:6d:f5:51:c9:7f:9d:3e:3a:79:93:45:d6:a0: eb:22:4c:dd:bd:ff:b1:a4:14:4f:6b:4a:40:66:ea:5a:e4:cc: 89:97:c0:c3:b8:43:16:64:1c:47:a4:6b:82:7c:bb:65:9f:eb: f8:27:e2:f3:fd:3b:0b:d4:2d:5e:85:86:99:6a:53:7b:27:37: 0a:56:94:c8:f7:39:3f:8a:86:9e:85:5c:d0:2e:2b:04:9f:d8: 1f:69:87:8a:68:e6:d6:aa:80:6c:77:3c:c8:4e:43:1f:38:dc: a9:a4:0e:90:11:90:4f:16:5c:22:27:b4:ed:84:78:b7:c3:c0: c9:c3:f7:ad:c5:ed:40:a3:6e:22:57:ef:4b:16:90:f0:b6:93: 1c:c7:1a:0c:49:be:07:26:d5:6d:88:45:9f:44:e2:b2:fc:54: 58:03:89:d6:83:7c:a4:f4:51:61:5f:19:94:44:a5:bb:91:56: d1:4f:57:84:dc:63:df:ee:94:4d:fb:85:3b:3f:da:59:96:02: 10:66:5a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMjgxMTAvBgNVBAUTKDJFMDZGMzA5MUFENThFRDA2MzNGRjk4OUIxRkQzMjk3 NzNFQzNBQTcwHhcNMjUxMDE5MDM1MjE4WhcNMjUxMDI2MDM1MjE4WjAYMRYwFAYD VQQDEw02OGY0NjA3Mi00Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2j0WKmfxr4ghykuw/5hpxRMcKsZKX8x9rWYFc6iYUCEQoPACKJ9ZZPSDklon eToFZnZch/05eattCo5DvYxf0yJ1K1VZwsJFWM9cBy25RR5UrtHD0/kME1draxMR wkrL1nN7gI0Tq9We+/3mkGkd4U6PlwT+iOAfMeH2oH8S6ZTsxCZx5WGBgvO6rcyy ZmXo6Ljut5IAlbnhYDDP8lah4ys9d+hYl76c/ZPEDqOECaqN9Hjy16MWbkK62mKX bkIL+2JZ3+XXxS6TQii1uNiRC+BG/5jlQJGwZmB823sVSdsLT+cYBaYaHGVu90+P 63EqaJPwdJTTgSDXtYumHt1niwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+rsWim hMJpJuqej9zxa3olPL7SMB8GA1UdIwQYMBaAFC4G8wka1Y7QYz/5ibH9Mpdz7Dqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QyOC80QkRBRUVEQzI4 Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0QmpQX21Kc2YweWwzUHNP cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnYnpDUnJWanRCalBfbUpzZjB5bDNQc09xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QyOC80QkRBRUVEQzI4Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0 QmpQX21Kc2YweWwzUHNPcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAfwiWcXsH0cjsjCzPPKc1Uc3IdMr5mD5cyODriXRZ16DF23bb9yIs 84yO120kUVXiJrofgHFcOvBlw231Ucl/nT46eZNF1qDrIkzdvf+xpBRPa0pAZupa 5MyJl8DDuEMWZBxHpGuCfLtln+v4J+Lz/TsL1C1ehYaZalN7JzcKVpTI9zk/ioae hVzQLisEn9gfaYeKaObWqoBsdzzITkMfONyppA6QEZBPFlwiJ7TthHi3w8DJw/et xe1Ao24iV+9LFpDwtpMcxxoMSb4HJtVtiEWfROKy/FRYA4nWg3yk9FFhXxmURKW7 kVbRT1eE3GPf7pRN+4U7P9pZlgIQZlp9 -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:07 2025 by rpki-client