$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json) Hash identifier: dgmAU/jNyTiMxjj8M0NQyCeBzxFDqYvLgjyjgyZc1Cc= Subject key identifier: 8D:A6:8B:F1:2C:BF:DC:A7:01:87:FA:9F:C1:DB:DD:F5:AC:F0:1F:FA Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft Manifest number: 0682 Signing time: Sat 18 Oct 2025 23:57:48 +0000 Manifest this update: Sat 18 Oct 2025 23:57:47 +0000 Manifest next update: Sat 25 Oct 2025 23:57:47 +0000 Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: swrEDl6+mGmyVOs5NCwvtEpNNsarel27vTbz5EzRFWA=) 2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: av33nLUX0GDrb2SC++ABulsmTvMJTYGoXhRNYXEv87I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Validity Not Before: Oct 18 23:57:47 2025 GMT Not After : Oct 25 23:57:47 2025 GMT Subject: CN=68f4297c-93ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:e5:96:6f:9b:d1:5d:2f:2f:eb:25:2e:02: 8d:4d:be:94:e5:cd:f4:1b:d8:1d:a3:d3:69:b9:ec: b6:f6:4c:8c:0f:56:d3:74:16:57:5f:0d:94:83:07: 09:3d:a0:3d:47:38:aa:9d:29:42:2a:34:18:9c:51: 66:8a:b3:88:c0:42:32:c1:69:1b:51:1c:24:e8:e2: bb:63:e5:c6:95:77:dd:6e:9c:0e:e1:7d:90:34:ab: 91:64:f1:e2:3c:05:ba:c8:03:24:34:87:56:13:90: ec:fe:a8:65:ca:b2:c7:c1:57:87:1d:69:bf:95:49: 89:a3:65:2e:ad:27:c0:14:f7:a9:a4:7a:90:e6:da: 84:0a:e5:4e:e0:25:d7:7e:71:17:b9:08:8a:da:b3: 12:bb:96:9a:9b:ab:fa:1b:52:4a:d2:46:99:2d:f7: 67:2c:11:c8:f6:fc:5c:0f:25:00:2f:80:32:bc:0e: ec:10:51:09:a7:f4:8d:65:82:3f:0d:fa:b2:42:29: b1:ec:53:8c:35:38:41:73:ac:21:86:fc:a7:24:ae: e8:42:66:4d:74:07:0b:c8:c6:25:de:24:c0:83:f9: d1:a8:40:19:83:08:f2:39:ab:2a:0b:36:27:0f:95: ff:8a:8a:8a:6b:cf:10:3a:87:02:5e:aa:9f:68:53: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A6:8B:F1:2C:BF:DC:A7:01:87:FA:9F:C1:DB:DD:F5:AC:F0:1F:FA X509v3 Authority Key Identifier: keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:50:f6:0b:70:0d:6a:43:db:3c:d5:4a:ce:08:57:8e:82:b1: 69:25:2e:07:ef:a9:a1:ee:9e:53:37:b4:7a:92:6c:02:6d:42: ee:ad:d6:b9:68:d1:15:bd:3a:6e:73:26:a7:16:87:88:e9:85: d9:bb:f1:98:16:87:d6:aa:89:1b:ec:e2:85:76:8e:fd:c3:78: bc:da:4b:a8:0d:bc:8c:96:eb:92:58:75:b9:0f:c6:71:d5:4b: ec:71:38:5d:13:d3:de:95:39:e8:cf:6c:b5:65:93:49:06:fc: d6:84:c9:d9:64:02:63:cb:75:b6:cc:f9:6f:39:b1:96:91:0e: 66:8f:ff:6f:0e:37:96:23:26:98:be:a8:cc:3d:83:70:cd:93: e8:0a:f9:83:4e:62:ae:be:31:8e:29:da:d3:e0:79:6c:b8:c8: c6:74:fe:5c:83:3e:70:29:02:87:71:13:be:c9:70:6b:99:07: b8:a8:9e:cd:ef:6f:b0:4b:00:4b:eb:93:60:ea:6f:41:5a:73: f9:a4:01:c7:9c:a0:93:42:aa:e3:47:93:a2:e2:b9:86:31:57: 0c:b2:11:8e:f3:89:54:de:15:9b:ff:b9:ea:88:21:95:8f:f4: ae:e7:5d:4d:1a:3b:61:b2:5f:22:cd:16:bc:d1:d1:4e:fc:d8: 33:96:ff:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MzUxMTAvBgNVBAUTKDJDRDk0MUJBN0NFQjUxRkU2RTE2NUUzRkM5ODA2NkQ1 QTk5OUU0RkUwHhcNMjUxMDE4MjM1NzQ3WhcNMjUxMDI1MjM1NzQ3WjAYMRYwFAYD VQQDEw02OGY0Mjk3Yy05M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9fllm+b0V0vL+slLgKNTb6U5c30G9gdo9Npuey29kyMD1bTdBZXXw2UgwcJ PaA9RziqnSlCKjQYnFFmirOIwEIywWkbURwk6OK7Y+XGlXfdbpwO4X2QNKuRZPHi PAW6yAMkNIdWE5Ds/qhlyrLHwVeHHWm/lUmJo2UurSfAFPeppHqQ5tqECuVO4CXX fnEXuQiK2rMSu5aam6v6G1JK0kaZLfdnLBHI9vxcDyUAL4AyvA7sEFEJp/SNZYI/ DfqyQimx7FOMNThBc6whhvynJK7oQmZNdAcLyMYl3iTAg/nRqEAZgwjyOasqCzYn D5X/ioqKa88QOocCXqqfaFPR2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2mi/Es v9ynAYf6n8Hb3fWs8B/6MB8GA1UdIwQYMBaAFCzZQbp861H+bhZeP8mAZtWpmeT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYzNS81RDA3N0Q0QTkx RDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVmNXVGbDRfeVlCbTFhbVo1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xObEJ1bnpyVWY1dUZsNF95WUJtMWFtWjVQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYzNS81RDA3N0Q0QTkxRDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVm NXVGbDRfeVlCbTFhbVo1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUPYLcA1qQ9s81UrOCFeOgrFpJS4H76mh7p5TN7R6kmwCbULurda5 aNEVvTpucyanFoeI6YXZu/GYFofWqokb7OKFdo79w3i82kuoDbyMluuSWHW5D8Zx 1UvscThdE9PelTnoz2y1ZZNJBvzWhMnZZAJjy3W2zPlvObGWkQ5mj/9vDjeWIyaY vqjMPYNwzZPoCvmDTmKuvjGOKdrT4HlsuMjGdP5cgz5wKQKHcRO+yXBrmQe4qJ7N 72+wSwBL65Ng6m9BWnP5pAHHnKCTQqrjR5Oi4rmGMVcMshGO84lU3hWb/7nqiCGV j/Su511NGjthsl8izRa80dFO/Ngzlv9K -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:37 2025 by rpki-client