$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: dTfwYHQjYWUreS/dd3yWf9I1dPSSJhruxK+WB4nMx/I= Subject key identifier: 69:C2:00:0D:9B:51:FF:45:28:8C:BE:29:8F:6C:EA:3F:A4:9F:D9:F2 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 092C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 0923 Signing time: Sat 18 Oct 2025 21:22:36 +0000 Manifest this update: Sat 18 Oct 2025 21:22:35 +0000 Manifest next update: Sat 25 Oct 2025 21:22:35 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: aBZujGKqRZ6mS/AezVx/67uJRtQPkGvjw3ZeixCQTZs=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: 4NqH+CTlAXcxsKUUu0JoB2lmVEYgLTqKdl4anKNbgT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Oct 18 21:22:35 2025 GMT Not After : Oct 25 21:22:35 2025 GMT Subject: CN=68f4051c-8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:75:0d:b1:90:28:80:1c:3d:4e:6a:52:1f: 4a:ce:6a:3d:b5:bc:d7:b5:53:33:12:f6:a9:de:7b: e8:01:9e:b8:31:24:0a:11:d0:94:82:5f:96:53:10: b2:0d:34:38:93:49:b3:a1:a6:32:df:4e:a5:73:77: 8d:0e:bd:bf:5f:46:eb:9c:10:2f:5e:f8:16:d6:7a: b8:99:f5:ca:df:9d:aa:3a:b0:82:83:b6:ff:2a:b5: 2a:dc:2e:11:85:0e:0b:8c:71:14:37:e1:14:07:7c: da:c4:2f:9b:2d:6a:e1:b6:cf:09:73:d4:51:54:70: f7:37:64:35:1c:6f:eb:46:49:33:f9:f3:72:d7:b0: 47:0a:eb:d9:c3:b6:eb:2e:4a:66:18:c8:15:b9:ef: b3:6a:65:d8:27:dc:2b:4a:48:9d:0e:33:e8:03:df: c2:79:e8:d9:d3:06:a9:d5:aa:57:76:2c:6f:6c:8d: af:bd:48:0e:04:fe:99:f7:a2:31:37:b3:f0:6e:43: 51:d9:8a:9e:92:da:ba:a0:3e:ee:b2:11:64:d8:e9: 80:c6:57:3c:d2:03:9e:97:49:c7:ed:23:69:cc:80: da:47:37:65:14:fb:99:5a:a6:b7:6e:4d:01:99:3b: 4d:68:18:b2:91:aa:58:4a:f6:2d:93:5f:4a:e3:c2: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:00:0D:9B:51:FF:45:28:8C:BE:29:8F:6C:EA:3F:A4:9F:D9:F2 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b7:85:1b:e1:10:ff:4d:60:f7:00:c9:46:bb:29:85:c0:c0: eb:86:38:8f:c6:7d:5d:8f:02:df:a6:aa:40:f8:4f:98:d6:c9: 45:e9:41:87:39:95:14:99:b2:bf:a8:b4:75:e4:87:a2:2c:06: 6e:73:3c:1b:97:e0:a5:79:75:55:22:94:64:54:9b:9a:67:f1: 28:ac:ba:f0:59:cd:af:9c:1c:b5:34:35:f9:96:8f:95:96:2a: e2:8a:f8:ce:79:c0:ba:5b:15:29:6e:17:d0:c3:2f:88:79:fe: 98:8d:69:33:45:92:b4:f6:cd:eb:84:78:5f:0f:69:9a:7e:7b: 41:4e:4d:25:f9:80:b7:cc:28:97:69:d8:73:aa:ad:47:38:c7: 41:58:93:4b:cf:cf:a7:71:4a:9f:ba:fb:21:84:f3:d8:ef:19: 1b:a8:a2:df:c4:55:d4:c2:ba:f9:33:e8:54:b8:be:47:8c:c3: 8c:65:6f:99:b9:6f:fe:30:69:14:fa:ff:bb:0f:b3:f0:d9:8f: 27:4a:ba:3b:1b:18:74:10:51:c4:bd:c2:3c:85:4a:c6:75:3b: ab:33:1d:2c:62:db:f3:2f:22:7c:e5:5a:86:f0:84:f1:95:1c: a3:99:4d:41:c9:45:49:8c:3f:f4:25:75:85:f1:cc:9e:91:cd: e0:f4:d5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUxMDE4MjEyMjM1WhcNMjUxMDI1MjEyMjM1WjAYMRYwFAYD VQQDEw02OGY0MDUxYy04OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPl1DbGQKIAcPU5qUh9Kzmo9tbzXtVMzEvap3nvoAZ64MSQKEdCUgl+WUxCy DTQ4k0mzoaYy306lc3eNDr2/X0brnBAvXvgW1nq4mfXK352qOrCCg7b/KrUq3C4R hQ4LjHEUN+EUB3zaxC+bLWrhts8Jc9RRVHD3N2Q1HG/rRkkz+fNy17BHCuvZw7br LkpmGMgVue+zamXYJ9wrSkidDjPoA9/CeejZ0wap1apXdixvbI2vvUgOBP6Z96Ix N7PwbkNR2Yqektq6oD7ushFk2OmAxlc80gOel0nH7SNpzIDaRzdlFPuZWqa3bk0B mTtNaBiykapYSvYtk19K48LkrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnCAA2b Uf9FKIy+KY9s6j+kn9nyMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUt4Ub4RD/TWD3AMlGuymFwMDrhjiPxn1djwLfpqpA+E+Y1slF6UGH OZUUmbK/qLR15IeiLAZuczwbl+CleXVVIpRkVJuaZ/EorLrwWc2vnBy1NDX5lo+V liriivjOecC6WxUpbhfQwy+Ief6YjWkzRZK09s3rhHhfD2mafntBTk0l+YC3zCiX adhzqq1HOMdBWJNLz8+ncUqfuvshhPPY7xkbqKLfxFXUwrr5M+hUuL5HjMOMZW+Z uW/+MGkU+v+7D7Pw2Y8nSro7Gxh0EFHEvcI8hUrGdTurMx0sYtvzLyJ85VqG8ITx lRyjmU1ByUVJjD/0JXWF8cyekc3g9NWT -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:35 2025 by rpki-client