$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json) Hash identifier: 7hfu0XqIAvMF1BErQiEIsGPM5Ybw9+ct6z6OMXDTSWQ= Subject key identifier: DF:A2:94:7C:10:F4:A1:9D:C0:E5:B1:BB:88:69:D9:26:91:6A:C2:3C Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft Manifest number: EF Signing time: Sun 19 Oct 2025 08:15:48 +0000 Manifest this update: Sun 19 Oct 2025 08:15:47 +0000 Manifest next update: Sun 26 Oct 2025 08:15:47 +0000 Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: nAu1T2sspCc5n0Z3N1WvRCoVM3+lqhdeWVxs5EbviNs=) 2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 6fHZUduLlppKNeQyv7MyGz7d2EPeIy77Os8/ALcrrKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Validity Not Before: Oct 19 08:15:47 2025 GMT Not After : Oct 26 08:15:47 2025 GMT Subject: CN=68f49e34-5a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:df:c2:4c:c7:69:76:26:75:19:99:3d:56: 2c:c1:7c:23:af:72:b0:40:1a:2f:14:72:0b:71:2b: 25:11:5a:4b:a3:34:1b:05:bc:17:9d:7c:d1:5e:76: 61:ca:b1:dd:f4:51:20:50:02:fe:b7:61:ea:1b:33: bb:6a:2f:fe:7d:5f:05:99:35:80:cd:0f:2c:47:d5: 3f:5d:07:0a:af:f6:4c:e2:2d:e4:74:02:9a:84:bf: 2f:c9:38:be:38:c1:02:cd:fa:62:91:a5:5e:74:40: ed:c2:c0:54:4a:87:42:bb:70:c0:fd:2c:bd:cd:02: ce:a9:2f:0f:6a:dd:91:ca:17:0d:c8:ba:d0:6b:43: d9:d5:71:31:82:ac:92:b4:46:e9:f0:11:de:f3:ce: d7:e2:3f:41:19:a3:48:3e:92:57:2c:b6:ca:7f:fa: 35:e7:0f:36:b4:69:d0:2a:d5:33:8f:12:56:f2:c0: a4:4e:57:78:da:8b:5b:ad:3b:1c:17:92:8a:60:fb: de:b3:0e:61:33:62:2b:b7:0b:8f:4f:f8:31:96:6d: c1:29:ad:ee:b9:e2:37:73:b0:2b:9d:66:cc:72:63: cd:60:84:9c:51:03:3a:c4:3e:30:dd:61:3a:1a:ec: 04:96:29:9b:fe:a6:bb:b4:a1:4f:71:a8:3a:b5:72: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:94:7C:10:F4:A1:9D:C0:E5:B1:BB:88:69:D9:26:91:6A:C2:3C X509v3 Authority Key Identifier: keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ea:7c:14:3d:0c:09:7a:5c:a9:b5:47:5e:59:c4:35:de:5d: 6f:26:c8:57:43:68:5e:69:68:77:9a:04:e3:30:8a:fb:23:a3: 67:4a:4f:48:52:6c:c3:2d:e1:b6:ad:ef:41:a4:e9:08:8d:b8: b0:20:7a:3f:ff:55:db:0c:ca:34:09:b6:88:1f:31:ee:21:26: 62:ae:18:eb:06:68:e0:a1:8f:a6:86:17:54:4a:ec:50:fd:95: 4f:4a:79:5f:53:2c:bc:5b:8a:82:5e:b5:2c:3b:d9:85:90:95: 4e:3f:2f:a7:54:bf:fa:65:a1:dc:dd:ae:12:bc:c5:fc:5f:51: 0b:3a:47:9c:f8:68:e0:42:eb:f4:1b:a6:71:48:ee:86:dd:f1: c1:b1:54:79:b1:ff:31:60:9c:ab:f7:7b:0f:9d:51:f2:04:25: f0:62:6a:8a:74:b8:cc:de:db:76:77:54:27:1d:4a:bb:eb:ae: 41:92:a7:23:c0:69:7b:fc:92:78:9c:9b:bb:c8:ba:33:79:d5: 56:a5:39:88:48:3f:42:ee:c0:2d:5c:88:c1:2d:83:94:9d:04: 3e:01:59:12:ea:b2:c6:cf:a3:b7:5c:3c:52:43:83:4a:0c:45: 89:40:fc:4e:b1:81:5d:6f:1d:27:0a:c0:3d:5e:fb:8e:99:a4: 79:04:9e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDk2NTRBMkYwODQ1OTdBMkI5MUFDMDAyQTc2MDdFMTND MTVEMDk0OTEwHhcNMjUxMDE5MDgxNTQ3WhcNMjUxMDI2MDgxNTQ3WjAYMRYwFAYD VQQDEw02OGY0OWUzNC01YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+7fwkzHaXYmdRmZPVYswXwjr3KwQBovFHILcSslEVpLozQbBbwXnXzRXnZh yrHd9FEgUAL+t2HqGzO7ai/+fV8FmTWAzQ8sR9U/XQcKr/ZM4i3kdAKahL8vyTi+ OMECzfpikaVedEDtwsBUSodCu3DA/Sy9zQLOqS8Pat2RyhcNyLrQa0PZ1XExgqyS tEbp8BHe887X4j9BGaNIPpJXLLbKf/o15w82tGnQKtUzjxJW8sCkTld42otbrTsc F5KKYPvesw5hM2IrtwuPT/gxlm3BKa3uueI3c7ArnWbMcmPNYIScUQM6xD4w3WE6 GuwElimb/qa7tKFPcag6tXKehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+ilHwQ 9KGdwOWxu4hp2SaRasI8MB8GA1UdIwQYMBaAFJZUovCEWXorkawAKnYH4TwV0JSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy84MEJGMUE2MjNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVpdVJyQUFxZGdmaFBCWFFs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsU2k4SVJaZWl1UnJBQXFkZ2ZoUEJYUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy84MEJGMUE2MjNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVp dVJyQUFxZGdmaFBCWFFsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ6nwUPQwJelyptUdeWcQ13l1vJshXQ2heaWh3mgTjMIr7I6NnSk9I UmzDLeG2re9BpOkIjbiwIHo//1XbDMo0CbaIHzHuISZirhjrBmjgoY+mhhdUSuxQ /ZVPSnlfUyy8W4qCXrUsO9mFkJVOPy+nVL/6ZaHc3a4SvMX8X1ELOkec+GjgQuv0 G6ZxSO6G3fHBsVR5sf8xYJyr93sPnVHyBCXwYmqKdLjM3tt2d1QnHUq7665Bkqcj wGl7/JJ4nJu7yLozedVWpTmISD9C7sAtXIjBLYOUnQQ+AVkS6rLGz6O3XDxSQ4NK DEWJQPxOsYFdbx0nCsA9XvuOmaR5BJ5V -----END CERTIFICATE-----Generated at Mon Oct 20 05:50:29 2025 by rpki-client