$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json) Hash identifier: ektA/9WqCD7R/2iUcxv8YWM68acwysxaoJtaguFmjj8= Subject key identifier: 8B:13:3B:0D:3A:F3:D2:29:F2:EC:5F:B2:5E:DC:32:68:A6:6C:FE:6F Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft Manifest number: 07C2 Signing time: Sat 18 Oct 2025 22:33:18 +0000 Manifest this update: Sat 18 Oct 2025 22:33:17 +0000 Manifest next update: Sat 25 Oct 2025 22:33:17 +0000 Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: j0N16kWRvSYAkUhyBSfdVRwy8TrjSJllHVr5gFSlElk=) 2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: 2BrCNtIG6V0aTeNF5hAlLJ5D7nd2opyw1DNok89bW0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: Oct 18 22:33:17 2025 GMT Not After : Oct 25 22:33:17 2025 GMT Subject: CN=68f415ae-fbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:f0:1b:5f:ca:9c:36:b5:30:a0:dc:95:99: 90:84:9c:f3:a3:92:e3:06:2f:0d:2f:15:f8:81:6b: ab:9d:99:fb:be:d8:13:78:34:e7:a2:36:00:db:7d: 0a:f8:f4:58:70:8c:8d:38:90:6f:6e:6f:01:1c:87: ed:0b:78:61:b0:5d:1a:f7:bd:51:2f:51:a8:db:94: 54:c8:29:92:58:2e:c4:3d:a5:87:4e:0b:74:f6:c9: 0d:5a:a4:4e:01:7f:95:61:3c:00:61:f3:77:98:bb: 74:59:ad:61:72:e8:30:c2:d9:68:34:4e:26:a7:93: c6:10:00:de:cb:43:49:1b:a4:43:8b:f8:35:e8:6a: bd:32:95:60:b1:a2:e8:8e:8a:e0:65:bd:0e:18:32: f7:5e:6f:11:b6:85:88:c4:33:8c:99:56:5d:cc:f8: 8a:08:76:e5:33:34:56:c5:0a:94:2a:61:bd:80:88: 15:30:d6:a8:68:20:cd:0e:75:61:82:ce:bf:0f:2b: a6:17:62:2a:b9:c9:b2:7c:b2:90:96:a6:9e:cc:77: c4:20:a8:d8:c3:3a:08:09:4c:d1:a8:a4:ac:db:80: 56:76:63:d5:3a:0c:fe:49:85:25:31:5d:70:2e:90: 08:c6:d0:ff:a7:cc:35:4f:ab:9f:be:24:a2:b7:b9: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:3B:0D:3A:F3:D2:29:F2:EC:5F:B2:5E:DC:32:68:A6:6C:FE:6F X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:32:51:f2:40:85:6c:15:6b:00:1f:0d:b5:42:87:c1:6c:8f: 5e:11:e1:0d:0f:ac:8c:6e:aa:19:a6:ca:e2:6f:f5:88:87:86: d5:bd:62:05:52:80:f7:00:70:3a:c1:e9:57:a4:f3:44:fa:4a: 26:e9:ac:29:b0:4c:f8:ab:ea:53:ea:f0:21:35:f4:3b:f9:6d: 9f:01:5c:ec:e7:85:7d:10:6d:85:b1:26:dd:48:e6:9a:ab:29: e4:3f:ec:e7:4e:43:2e:eb:44:f4:72:fa:46:4e:41:7c:cf:8d: 94:14:c6:53:e9:f2:be:f7:30:55:eb:38:03:7e:e1:50:81:06: 0d:4f:83:d9:4e:8d:8d:4d:c5:d4:a9:9c:38:9b:b1:e7:58:d7: 1e:3f:85:cb:ca:09:4c:19:7c:c8:1e:8b:7b:14:38:4d:ce:e4: 13:79:40:43:17:80:d3:32:93:69:f2:0f:c6:07:35:38:73:e6: 11:f3:86:ec:bf:80:66:19:4d:c0:7c:4d:24:d2:b7:a7:bd:c7: 46:47:af:d0:c1:7b:5a:df:f8:f1:87:94:df:fb:d3:d9:9c:3f: 5c:c5:cd:a8:a5:2b:02:c0:1c:98:a4:d3:df:01:d8:5c:66:4e: 23:a5:9d:af:5d:24:6e:c1:fb:31:86:57:ba:2b:fe:4d:af:e0: c9:e0:bf:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjUxMDE4MjIzMzE3WhcNMjUxMDI1MjIzMzE3WjAYMRYwFAYD VQQDEw02OGY0MTVhZS1mYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0enwG1/KnDa1MKDclZmQhJzzo5LjBi8NLxX4gWurnZn7vtgTeDTnojYA230K +PRYcIyNOJBvbm8BHIftC3hhsF0a971RL1Go25RUyCmSWC7EPaWHTgt09skNWqRO AX+VYTwAYfN3mLt0Wa1hcugwwtloNE4mp5PGEADey0NJG6RDi/g16Gq9MpVgsaLo jorgZb0OGDL3Xm8RtoWIxDOMmVZdzPiKCHblMzRWxQqUKmG9gIgVMNaoaCDNDnVh gs6/DyumF2IqucmyfLKQlqaezHfEIKjYwzoICUzRqKSs24BWdmPVOgz+SYUlMV1w LpAIxtD/p8w1T6ufviSit7l/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsTOw06 89Ip8uxfsl7cMmimbP5vMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3 TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtMlHyQIVsFWsAHw21QofBbI9eEeEND6yMbqoZpsrib/WIh4bVvWIF UoD3AHA6welXpPNE+kom6awpsEz4q+pT6vAhNfQ7+W2fAVzs54V9EG2FsSbdSOaa qynkP+znTkMu60T0cvpGTkF8z42UFMZT6fK+9zBV6zgDfuFQgQYNT4PZTo2NTcXU qZw4m7HnWNceP4XLyglMGXzIHot7FDhNzuQTeUBDF4DTMpNp8g/GBzU4c+YR84bs v4BmGU3AfE0k0renvcdGR6/QwXta3/jxh5Tf+9PZnD9cxc2opSsCwByYpNPfAdhc Zk4jpZ2vXSRuwfsxhle6K/5Nr+DJ4L82 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:41 2025 by rpki-client