$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: xw6iK7FZl7D1Kss7+hOtAhI9L3rY1g9QZL9QNB8rkK0= Subject key identifier: BE:96:58:7D:BF:1F:39:5C:33:8B:0E:26:8D:3C:1F:74:28:57:4E:F1 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 0561 Signing time: Sun 19 Oct 2025 01:07:15 +0000 Manifest this update: Sun 19 Oct 2025 01:07:14 +0000 Manifest next update: Sun 26 Oct 2025 01:07:14 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: cFcMIm5Xjysu92tjKs8HHE6de5AtLZVa6ZYeZmSiVyk=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: nbAwbUJb6JF/EVgcBuo6b8RRtXcpwDWvIQu43r6H87s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Oct 19 01:07:14 2025 GMT Not After : Oct 26 01:07:14 2025 GMT Subject: CN=68f439c2-38dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:fe:be:ee:a5:07:74:12:93:7f:71:48:70: a7:31:a1:41:1c:00:42:4c:9f:92:83:6d:43:52:cd: 84:f3:06:31:a5:e1:e7:71:d8:81:d8:cd:03:62:88: 4d:b3:68:77:c2:2a:d9:b5:3a:28:81:14:50:51:99: 53:0f:b9:70:41:7b:d9:46:b9:c8:81:27:ad:49:7a: eb:d9:be:31:7c:e2:96:3a:31:0c:d4:d2:ce:23:1d: 95:8e:5d:4b:1a:6e:dc:bc:97:43:22:be:f9:5f:80: c4:9b:ed:26:2f:d1:68:c5:b2:35:1c:e4:7e:a3:6f: 9e:c9:dc:0c:88:dd:2d:c9:d8:21:01:17:cd:aa:39: 89:23:10:4b:87:4b:c8:6e:e1:c9:dc:82:cf:97:36: a6:3d:93:6e:85:35:1f:4f:56:a9:37:d8:83:af:ad: a5:2a:f7:8b:d5:0f:2f:8b:ef:73:75:42:72:1a:18: e4:3d:67:8f:5e:70:ae:15:73:e0:3f:a9:77:60:77: e9:c3:6a:28:ba:35:7d:02:f4:5b:b9:e0:cc:c5:d1: bd:f6:b0:dc:14:92:ab:20:28:35:ed:83:bb:3e:2b: cc:3c:8e:fa:aa:b6:9c:ad:a5:9c:83:85:46:4a:18: 75:5d:53:e6:84:af:ac:35:83:75:5e:f4:31:27:a2: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:96:58:7D:BF:1F:39:5C:33:8B:0E:26:8D:3C:1F:74:28:57:4E:F1 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:73:18:07:af:cb:0b:42:50:15:91:53:43:71:02:e2:dc: 5e:ac:e2:0b:9f:ad:65:4d:23:f4:db:5a:6b:7d:21:3f:45:a5: b1:7a:e2:68:2c:bf:37:c4:7d:14:9a:96:2a:12:a1:fd:76:b1: 73:0a:a5:a7:48:c9:30:c8:f0:2a:7a:8b:46:e6:fb:f0:49:be: 65:6b:7d:39:33:66:b9:59:d8:d7:3a:b8:f2:3a:9d:44:27:d9: 85:d9:b5:36:55:ee:53:e9:9b:d9:7d:93:a7:dc:36:12:1d:e2: 3a:48:13:b8:87:cf:6d:c6:48:56:62:d7:79:f4:6d:6a:2b:d3: 14:7c:a7:ae:b0:dd:bf:c2:c8:19:2e:5a:58:d4:af:26:42:67: 8b:7b:97:fb:7c:a1:9e:07:04:2e:a9:30:7b:ae:c3:41:93:e0: 58:8d:6c:e4:79:88:82:c8:43:8f:24:55:07:6c:50:56:62:18: 34:d0:50:18:09:88:89:4d:4f:8f:29:d2:e6:55:0b:34:1a:25: 2f:fa:80:cc:bf:eb:ff:da:7b:6c:7f:53:8c:8d:b8:1e:60:81: d0:eb:dc:31:7a:d7:05:81:56:4b:91:38:25:dd:ab:dc:9d:1b: 85:68:bb:63:b4:31:55:3d:d1:cb:56:4e:d7:1e:b8:98:e0:c1: 16:31:e9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUxMDE5MDEwNzE0WhcNMjUxMDI2MDEwNzE0WjAYMRYwFAYD VQQDEw02OGY0MzljMi0zOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPz+vu6lB3QSk39xSHCnMaFBHABCTJ+Sg21DUs2E8wYxpeHncdiB2M0DYohN s2h3wirZtToogRRQUZlTD7lwQXvZRrnIgSetSXrr2b4xfOKWOjEM1NLOIx2Vjl1L Gm7cvJdDIr75X4DEm+0mL9FoxbI1HOR+o2+eydwMiN0tydghARfNqjmJIxBLh0vI buHJ3ILPlzamPZNuhTUfT1apN9iDr62lKveL1Q8vi+9zdUJyGhjkPWePXnCuFXPg P6l3YHfpw2ooujV9AvRbueDMxdG99rDcFJKrICg17YO7PivMPI76qracraWcg4VG Shh1XVPmhK+sNYN1XvQxJ6L1kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6WWH2/ HzlcM4sOJo08H3QoV07xMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMFHMYB6/LC0JQFZFTQ3EC4txerOILn61lTSP021prfSE/RaWxeuJo LL83xH0UmpYqEqH9drFzCqWnSMkwyPAqeotG5vvwSb5la305M2a5WdjXOrjyOp1E J9mF2bU2Ve5T6ZvZfZOn3DYSHeI6SBO4h89txkhWYtd59G1qK9MUfKeusN2/wsgZ LlpY1K8mQmeLe5f7fKGeBwQuqTB7rsNBk+BYjWzkeYiCyEOPJFUHbFBWYhg00FAY CYiJTU+PKdLmVQs0GiUv+oDMv+v/2ntsf1OMjbgeYIHQ69wxetcFgVZLkTgl3avc nRuFaLtjtDFVPdHLVk7XHriY4MEWMenA -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:07 2025 by rpki-client