$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: Q3IB1vcJHEpM0y6Lkqg9gCbMonDdCDqwXiscq6vG7tg= Subject key identifier: 26:F6:2C:55:27:87:43:78:08:E1:4D:08:05:CD:41:FC:2E:14:FA:F6 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 015D Signing time: Sun 19 Oct 2025 06:45:07 +0000 Manifest this update: Sun 19 Oct 2025 06:45:06 +0000 Manifest next update: Sun 26 Oct 2025 06:45:06 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: T8KZEWtxqNGB3+ZkL9ubkDOKBw01hcIgRiXgpi0PwK0=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Oct 19 06:45:06 2025 GMT Not After : Oct 26 06:45:06 2025 GMT Subject: CN=68f488f2-1b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:bf:b2:e0:8c:84:21:42:1d:99:7a:68:49: 88:de:28:2a:79:18:a8:3a:12:4d:6e:25:30:d3:3a: 5e:2d:db:53:78:8f:f9:80:8b:25:ba:2c:a9:8f:c8: 66:83:29:76:7a:76:4d:40:05:c1:13:74:dc:1d:b6: 6d:34:70:46:e8:6d:b7:0c:8c:a4:28:7e:57:24:af: 00:ad:f7:a1:51:fc:fa:b6:77:ab:4e:9e:f5:12:25: 5c:77:6c:f6:fe:40:9d:79:ab:ba:ba:16:53:53:5f: b6:e1:b8:e1:5d:eb:19:3c:e2:46:63:96:4f:fc:99: fb:2f:b3:a1:25:8b:3f:45:f6:c2:7d:3c:d7:f7:7a: 2b:0f:cc:8e:1b:d3:5b:64:32:48:78:45:e7:3f:f1: be:c4:ec:23:6f:ae:f5:1e:b6:6b:1c:64:a0:90:d4: 59:45:c4:e2:b9:c8:fd:65:ed:9b:00:cf:e8:47:ff: fb:00:0d:64:f4:81:14:aa:06:cf:be:9b:9d:db:0f: 54:87:c2:cd:86:79:d6:4a:a0:79:1e:c9:1a:d5:88: 70:7e:d5:1b:c2:12:ba:c6:8d:d5:e6:43:9d:bc:8b: 15:62:83:09:f4:2d:b7:86:55:5c:c0:ca:95:37:3f: 01:24:67:72:fb:e8:99:d5:f6:80:4a:c8:cc:4e:f9: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:2C:55:27:87:43:78:08:E1:4D:08:05:CD:41:FC:2E:14:FA:F6 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5d:b1:b0:10:3f:5b:07:3c:1e:0d:46:c4:47:99:a8:f6:8a: 39:53:40:99:98:a4:5b:54:0a:ad:29:4d:1b:c7:b7:4c:23:ab: d4:f3:12:79:41:fc:b0:9c:ed:6c:b2:e4:16:c2:ee:6a:8d:cc: 40:ee:b8:4c:dd:7a:66:26:46:1d:cb:f8:a8:d2:01:83:9a:11: 10:ef:3f:af:a0:68:b2:fa:43:da:08:ce:10:c0:e7:6e:82:91: 0f:f3:47:4f:3b:39:57:eb:2e:fa:ab:65:d4:58:ca:08:80:18: 20:07:0d:9a:94:36:ff:2f:6f:16:4c:a6:d0:fb:50:13:98:d5: 99:ab:ec:3f:d3:17:d9:4a:84:9e:fa:1b:37:92:1f:a9:ca:5e: 77:08:46:fb:c6:e7:d1:e8:67:9f:6c:ba:0a:d5:4a:56:80:46: 96:11:1d:42:8d:85:49:91:26:6f:48:12:cc:b6:ea:b4:4f:af: 7d:7d:09:b4:6e:ec:95:e9:e0:82:6b:a6:5e:c2:56:0b:aa:03: 83:b1:82:fc:4e:eb:3d:12:10:da:cc:2d:56:64:30:db:1d:c7: dd:f7:9d:8c:06:e0:b6:17:ba:4b:ce:21:b0:81:85:44:b3:26: ec:7c:e9:87:17:1d:ed:34:cf:be:77:f5:80:80:d1:77:0c:5b: 46:18:cb:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUxMDE5MDY0NTA2WhcNMjUxMDI2MDY0NTA2WjAYMRYwFAYD VQQDEw02OGY0ODhmMi0xYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tq/suCMhCFCHZl6aEmI3igqeRioOhJNbiUw0zpeLdtTeI/5gIsluiypj8hm gyl2enZNQAXBE3TcHbZtNHBG6G23DIykKH5XJK8ArfehUfz6tnerTp71EiVcd2z2 /kCdeau6uhZTU1+24bjhXesZPOJGY5ZP/Jn7L7OhJYs/RfbCfTzX93orD8yOG9Nb ZDJIeEXnP/G+xOwjb671HrZrHGSgkNRZRcTiucj9Ze2bAM/oR//7AA1k9IEUqgbP vpud2w9Uh8LNhnnWSqB5Hska1YhwftUbwhK6xo3V5kOdvIsVYoMJ9C23hlVcwMqV Nz8BJGdy++iZ1faASsjMTvnWnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb2LFUn h0N4COFNCAXNQfwuFPr2MB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArXbGwED9bBzweDUbER5mo9oo5U0CZmKRbVAqtKU0bx7dMI6vU8xJ5 QfywnO1ssuQWwu5qjcxA7rhM3XpmJkYdy/io0gGDmhEQ7z+voGiy+kPaCM4QwOdu gpEP80dPOzlX6y76q2XUWMoIgBggBw2alDb/L28WTKbQ+1ATmNWZq+w/0xfZSoSe +hs3kh+pyl53CEb7xufR6GefbLoK1UpWgEaWER1CjYVJkSZvSBLMtuq0T699fQm0 buyV6eCCa6ZewlYLqgODsYL8Tus9EhDazC1WZDDbHcfd952MBuC2F7pLziGwgYVE sybsfOmHFx3tNM++d/WAgNF3DFtGGMtl -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:04 2025 by rpki-client