$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: foKhskWCxZiflRb/sFxRWe6vO4W1OdMD7Z9BylWuxF4= Subject key identifier: 89:37:12:B5:6E:0E:65:AE:B5:E3:4E:7C:2B:33:01:8E:57:EE:80:49 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 0714 Signing time: Sun 19 Oct 2025 01:00:10 +0000 Manifest this update: Sun 19 Oct 2025 01:00:09 +0000 Manifest next update: Sun 26 Oct 2025 01:00:09 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: nkwO+/0hR4WmtnBTiys5MPXoM1WVDShPh7+H2SuVtVA=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: hVEGhELX1A8z+OTyICUg8ehNwNYoGDS6osi29y06XSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Oct 19 01:00:09 2025 GMT Not After : Oct 26 01:00:09 2025 GMT Subject: CN=68f43819-ce3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:a0:80:1e:f2:81:f7:47:7e:e0:89:45:80: 7a:43:38:92:7b:84:c9:a7:e2:1e:0a:4a:b2:1f:77: 65:a5:9e:db:84:80:82:f2:56:f3:e3:db:44:4f:b0: 47:67:0b:ea:77:a8:e7:bd:0e:0b:ee:c3:fa:da:a8: 8b:1a:a3:bc:3f:89:f7:1f:ec:d4:f1:d0:a9:20:d4: 2f:7c:1e:71:fb:64:d6:b5:d5:0d:0f:19:82:86:18: c3:94:e2:59:cc:a4:53:2f:79:63:c6:33:41:6b:67: 82:4e:7d:26:ea:b0:11:2f:39:23:dc:90:45:b9:88: 1d:7d:37:79:7a:96:49:01:b4:47:5b:e7:65:5c:1b: 7f:7c:38:56:44:b7:d9:72:56:b5:91:b9:35:6d:81: b0:d3:49:34:b4:e8:43:43:98:08:1b:7d:c7:85:a9: ee:03:5f:fb:d8:17:67:ad:f0:bf:c3:50:ba:3f:46: 8e:d0:b6:39:aa:bb:17:f1:72:c3:2b:84:6f:33:cc: a9:c3:5d:9b:0d:2f:c6:ce:6a:93:2f:83:7d:e5:b3: a4:57:17:67:cf:e8:7f:55:0b:b0:c6:be:d2:7e:0c: 04:33:58:f7:ee:cc:10:ba:80:5e:3f:7a:1b:5a:1d: f3:5d:20:cd:22:c9:f4:54:80:b9:4b:e8:ee:67:1a: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:37:12:B5:6E:0E:65:AE:B5:E3:4E:7C:2B:33:01:8E:57:EE:80:49 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6c:20:1a:0f:bf:68:b2:43:5e:a4:b7:e3:ee:aa:4f:0c:83: 88:e2:86:c2:10:7f:07:fb:fe:d3:b6:73:5b:14:87:a6:03:41: 45:4b:6b:5c:1d:e2:6d:e6:da:ce:38:4d:9e:0a:8b:cc:07:3b: b4:f5:a6:2a:35:5d:56:a5:42:70:73:1a:6d:3e:ce:ad:24:61: 89:6e:a2:c7:4e:b2:80:c9:fa:24:84:17:8a:82:f7:05:76:53: 9a:b1:e0:b0:d4:49:61:b6:1d:e4:0f:36:68:69:eb:cd:cb:b0: e7:92:cc:df:af:f2:8b:dc:5b:a4:5a:78:18:36:b5:d1:99:4f: 4f:8d:4a:6e:5c:0f:9c:54:4f:2c:79:73:c7:64:41:c9:41:d8: 36:d6:a4:18:0c:ca:e8:68:c4:6d:5f:a6:3d:fd:29:05:84:10: 99:b7:f2:d1:89:75:ee:a8:50:92:61:05:34:7b:ca:6d:62:47: 13:7f:4b:16:5b:36:45:a1:b3:f4:4a:19:fe:2a:fd:85:c0:62: 35:f8:58:2b:46:78:8a:21:16:b7:b3:03:f8:f6:33:a6:cf:80: 25:39:96:cf:de:5c:ff:ef:f3:6b:d6:44:e7:ab:7b:60:5c:30: 88:ff:9d:9e:99:69:b7:43:40:fc:fa:f5:e0:46:00:d5:d0:27: a6:ff:c9:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUxMDE5MDEwMDA5WhcNMjUxMDI2MDEwMDA5WjAYMRYwFAYD VQQDEw02OGY0MzgxOS1jZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnASggB7ygfdHfuCJRYB6QziSe4TJp+IeCkqyH3dlpZ7bhICC8lbz49tET7BH Zwvqd6jnvQ4L7sP62qiLGqO8P4n3H+zU8dCpINQvfB5x+2TWtdUNDxmChhjDlOJZ zKRTL3ljxjNBa2eCTn0m6rARLzkj3JBFuYgdfTd5epZJAbRHW+dlXBt/fDhWRLfZ cla1kbk1bYGw00k0tOhDQ5gIG33HhanuA1/72BdnrfC/w1C6P0aO0LY5qrsX8XLD K4RvM8ypw12bDS/GzmqTL4N95bOkVxdnz+h/VQuwxr7SfgwEM1j37swQuoBeP3ob Wh3zXSDNIsn0VIC5S+juZxrDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk3ErVu DmWuteNOfCszAY5X7oBJMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcbCAaD79oskNepLfj7qpPDIOI4obCEH8H+/7TtnNbFIemA0FFS2tc HeJt5trOOE2eCovMBzu09aYqNV1WpUJwcxptPs6tJGGJbqLHTrKAyfokhBeKgvcF dlOaseCw1Elhth3kDzZoaevNy7Dnkszfr/KL3FukWngYNrXRmU9PjUpuXA+cVE8s eXPHZEHJQdg21qQYDMroaMRtX6Y9/SkFhBCZt/LRiXXuqFCSYQU0e8ptYkcTf0sW WzZFobP0Shn+Kv2FwGI1+FgrRniKIRa3swP49jOmz4AlOZbP3lz/7/Nr1kTnq3tg XDCI/52emWm3Q0D8+vXgRgDV0Cem/8mv -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:16 2025 by rpki-client