$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: ClUfgzG41iD5epsv1NZZcBZH3jr9KTaNEe3LtXJUj78= Subject key identifier: D2:28:7C:B6:25:23:36:D5:DF:C8:4E:E4:AD:46:9D:91:F4:3C:E0:C3 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 01AC Signing time: Sun 19 Oct 2025 05:42:03 +0000 Manifest this update: Sun 19 Oct 2025 05:42:03 +0000 Manifest next update: Sun 26 Oct 2025 05:42:03 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: opflSRSCXUg9iur6ABud7fOjemXD+UHdJdLTv7cpZ/8=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: w2G6mnACs8k8ArQ9Khbqaqk7miaXJQo8wHP+q2xbHko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Oct 19 05:42:03 2025 GMT Not After : Oct 26 05:42:03 2025 GMT Subject: CN=68f47a2b-e377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:7c:2e:fc:f3:d1:fc:22:ef:30:97:97:c6: 44:cd:8c:e3:9e:13:eb:1d:a4:37:55:84:2f:dc:94: 8d:23:f5:ed:66:f9:1e:2a:ba:8c:2b:b4:03:fd:a6: 75:4c:54:10:d1:fa:e6:58:f7:03:98:3f:f7:5e:87: 09:81:65:ce:fa:ad:72:7d:d4:3f:53:36:a5:a8:0b: c0:0e:58:1c:ad:49:c8:f1:f7:89:2e:d6:93:5f:f8: a6:5c:ea:be:4c:aa:81:5a:6b:86:76:44:28:c4:8c: 7e:d7:9d:b0:7c:48:59:97:fc:f5:8c:d3:51:9a:63: f4:fb:04:1a:37:37:b6:02:73:52:01:3c:37:4f:04: c0:d7:cc:9c:fa:03:03:83:da:1f:cc:8c:c5:49:b0: 13:4f:fb:7c:28:2c:d8:e2:f0:01:eb:35:e5:ad:a0: 99:d9:27:54:43:a8:2e:41:f4:aa:f9:db:16:e0:e4: 4c:fe:7c:72:17:9e:9e:e1:64:43:35:9f:cd:96:7e: 89:37:1a:40:f4:31:fd:86:20:c6:26:c2:ab:8b:40: 08:df:e1:ab:9d:23:53:8b:12:27:6b:60:f4:ae:cf: 7e:42:f3:b6:ce:e0:e8:6b:3d:18:f9:fe:0d:f8:f0: bf:cc:0f:11:9b:7c:6c:a7:89:f2:ed:b3:3c:a4:30: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:28:7C:B6:25:23:36:D5:DF:C8:4E:E4:AD:46:9D:91:F4:3C:E0:C3 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6f:96:94:47:47:a3:d3:bc:9a:d8:6c:c7:ee:4f:1c:05:2e: 25:8e:c5:8a:5f:32:9a:f7:a5:6f:1c:39:2c:5f:b0:30:29:d8: 19:92:4e:33:6d:8b:e3:d5:64:01:08:87:6e:34:07:6e:53:1e: 0c:ad:18:4d:c2:08:48:32:b7:dc:d3:1c:7f:dc:e4:75:ef:e4: 53:ef:1d:1b:e2:1d:70:eb:71:a0:a9:49:eb:c1:6d:c3:d6:cc: a3:3f:03:22:86:09:64:62:91:ec:aa:59:94:7d:03:3f:c9:b8: 76:c3:fa:8f:c8:00:c9:9e:15:d6:40:3d:e6:a3:dd:37:fc:cb: 54:40:de:fd:bc:32:c7:08:79:ae:9e:90:0f:0b:b6:54:25:24: 56:3c:24:bd:c1:56:b7:25:dd:f3:d1:a1:bf:b4:54:81:f2:b0: 57:40:d1:ef:31:ee:4f:1c:bc:d2:27:95:f0:c9:95:81:b0:56: 81:53:9c:76:83:2e:67:9a:3d:7f:41:17:cf:c7:d9:ca:54:cc: 78:83:85:7b:f3:20:90:e8:4b:68:eb:79:b5:32:3a:5e:5f:a2: 8e:36:48:5b:7c:f4:5e:26:17:b7:d1:e7:7e:9c:03:3b:a7:1b: 2c:cf:65:dc:3f:93:43:c1:ad:79:a7:81:25:64:d7:72:1f:ce: 3f:97:cc:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjUxMDE5MDU0MjAzWhcNMjUxMDI2MDU0MjAzWjAYMRYwFAYD VQQDEw02OGY0N2EyYi1lMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xZ8Lvzz0fwi7zCXl8ZEzYzjnhPrHaQ3VYQv3JSNI/XtZvkeKrqMK7QD/aZ1 TFQQ0frmWPcDmD/3XocJgWXO+q1yfdQ/UzalqAvADlgcrUnI8feJLtaTX/imXOq+ TKqBWmuGdkQoxIx+152wfEhZl/z1jNNRmmP0+wQaNze2AnNSATw3TwTA18yc+gMD g9ofzIzFSbATT/t8KCzY4vAB6zXlraCZ2SdUQ6guQfSq+dsW4ORM/nxyF56e4WRD NZ/Nln6JNxpA9DH9hiDGJsKri0AI3+GrnSNTixIna2D0rs9+QvO2zuDoaz0Y+f4N +PC/zA8Rm3xsp4ny7bM8pDBrqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIofLYl IzbV38hO5K1GnZH0PODDMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbb5aUR0ej07ya2GzH7k8cBS4ljsWKXzKa96VvHDksX7AwKdgZkk4z bYvj1WQBCIduNAduUx4MrRhNwghIMrfc0xx/3OR17+RT7x0b4h1w63GgqUnrwW3D 1syjPwMihglkYpHsqlmUfQM/ybh2w/qPyADJnhXWQD3mo903/MtUQN79vDLHCHmu npAPC7ZUJSRWPCS9wVa3Jd3z0aG/tFSB8rBXQNHvMe5PHLzSJ5XwyZWBsFaBU5x2 gy5nmj1/QRfPx9nKVMx4g4V78yCQ6Eto63m1MjpeX6KONkhbfPReJhe30ed+nAM7 pxssz2XcP5NDwa15p4ElZNdyH84/l8w1 -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:49 2025 by rpki-client