$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: DXk9kmVcZX6zGF6iJoThbC0sqOBv4RRGjRuNkCg/YmI= Subject key identifier: F7:8D:31:C0:69:DE:81:13:3B:B7:FE:02:4D:B6:32:D8:AD:F0:56:55 Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: 01DB Signing time: Sun 19 Oct 2025 05:11:25 +0000 Manifest this update: Sun 19 Oct 2025 05:11:24 +0000 Manifest next update: Sun 26 Oct 2025 05:11:24 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: TM3E5ADEHayb3ZcaO6YoNbYDu1sC2XEswXOaZHKJ4P4=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: 8k36pvGImmVckUyl9Af0a0wGsrxQEwJI0duKzhrmqDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: Oct 19 05:11:24 2025 GMT Not After : Oct 26 05:11:24 2025 GMT Subject: CN=68f472fc-a7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:da:6d:02:c1:e6:c1:30:b8:a0:96:01:b7: 02:4e:21:c2:5b:2e:af:f1:e4:85:10:1d:dd:55:ed: 4e:9b:7c:77:72:a6:fc:dc:10:46:a4:8b:c7:b9:ea: c2:34:a8:70:7b:06:18:83:c3:9e:0e:0b:56:f0:2a: 3c:06:6e:cb:fe:9d:0b:f4:a6:72:38:a2:f6:2b:0f: 1c:2a:3c:0d:c6:20:0c:76:f2:48:aa:60:32:25:ee: ab:1e:24:7f:96:4e:65:ca:4f:f7:00:30:1f:88:34: f8:62:dd:33:37:31:5c:e6:00:2a:b4:56:b4:15:c3: 0e:b5:0d:b1:49:99:3d:77:16:9a:83:18:fe:97:1c: ce:52:81:59:0b:94:9e:ae:d3:7f:91:f7:f7:6b:94: 0f:0f:52:ec:e5:43:45:cf:de:10:e9:33:5d:2f:0d: 7c:36:2b:4f:6e:d6:23:44:bb:bd:ba:d2:2a:b2:5e: 88:62:9a:f2:cb:e6:a2:1b:5b:c0:d4:86:28:d1:1d: 5f:22:27:b1:73:2c:da:26:88:0b:d7:c9:8d:21:8a: 6d:7e:5b:24:5e:d6:e8:2d:22:7c:39:b9:61:d3:b2: 8d:f0:a8:e3:13:8b:26:ea:38:65:1c:b1:80:ee:da: 79:38:83:35:0a:1e:39:10:68:bf:f8:34:91:0f:b1: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8D:31:C0:69:DE:81:13:3B:B7:FE:02:4D:B6:32:D8:AD:F0:56:55 X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:4d:02:e3:f3:87:ad:9d:c9:f6:51:70:f8:32:04:ef:c3: fa:b6:cd:1a:28:dd:27:81:7f:d5:3e:67:5c:b7:80:f4:be:63: 83:33:cd:fa:e4:7a:94:ab:79:b1:37:6c:47:42:13:7d:57:36: ad:e2:2c:b6:2c:ee:66:43:57:3b:9d:e3:a2:bf:36:d1:dc:bf: b4:11:9b:aa:3f:78:f8:cc:a0:15:63:7e:ca:f4:2c:70:9c:82: 54:76:f9:ce:bf:f3:91:09:c6:32:1c:1a:dd:96:be:f2:f9:b7: 8c:23:73:66:17:12:0f:f6:ad:a3:1d:6e:5e:e6:fe:7d:8b:76: 43:7e:1a:79:93:c6:f9:58:76:6f:d8:22:c8:a8:10:a2:3e:ae: 8c:33:b4:35:e7:a7:1c:d5:e7:1c:13:07:87:2a:87:4f:80:ac: 93:8b:56:75:5f:fe:86:ba:d3:05:a8:85:dc:92:cb:b0:c6:be: ce:25:f0:8d:8f:69:54:ce:01:b4:3d:cc:9b:95:47:53:65:1c: 60:13:56:13:70:d6:51:d2:b1:f6:9b:cb:78:25:a6:38:8a:71: 24:d5:4e:f1:e3:47:e7:1e:47:f9:2f:8a:67:96:e2:7d:18:ee: 0d:d8:21:d4:10:6d:af:60:5a:cc:d3:c3:e4:9e:da:c3:0c:fa: 9f:06:21:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjUxMDE5MDUxMTI0WhcNMjUxMDI2MDUxMTI0WjAYMRYwFAYD VQQDEw02OGY0NzJmYy1hN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ajabQLB5sEwuKCWAbcCTiHCWy6v8eSFEB3dVe1Om3x3cqb83BBGpIvHuerC NKhwewYYg8OeDgtW8Co8Bm7L/p0L9KZyOKL2Kw8cKjwNxiAMdvJIqmAyJe6rHiR/ lk5lyk/3ADAfiDT4Yt0zNzFc5gAqtFa0FcMOtQ2xSZk9dxaagxj+lxzOUoFZC5Se rtN/kff3a5QPD1Ls5UNFz94Q6TNdLw18NitPbtYjRLu9utIqsl6IYpryy+aiG1vA 1IYo0R1fIiexcyzaJogL18mNIYptflskXtboLSJ8Oblh07KN8KjjE4sm6jhlHLGA 7tp5OIM1Ch45EGi/+DSRD7HSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeNMcBp 3oETO7f+Ak22Mtit8FZVMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUpU0C4/OHrZ3J9lFw+DIE78P6ts0aKN0ngX/VPmdct4D0vmODM836 5HqUq3mxN2xHQhN9Vzat4iy2LO5mQ1c7neOivzbR3L+0EZuqP3j4zKAVY37K9Cxw nIJUdvnOv/ORCcYyHBrdlr7y+beMI3NmFxIP9q2jHW5e5v59i3ZDfhp5k8b5WHZv 2CLIqBCiPq6MM7Q156cc1eccEweHKodPgKyTi1Z1X/6GutMFqIXcksuwxr7OJfCN j2lUzgG0PcyblUdTZRxgE1YTcNZR0rH2m8t4JaY4inEk1U7x40fnHkf5L4pnluJ9 GO4N2CHUEG2vYFrM08PkntrDDPqfBiEh -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:48 2025 by rpki-client