$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: iThAWIi+hcZIkz6Vty9/mdXuot+5nf7Z/wgC/Hf7RdY= Subject key identifier: 0B:EC:BB:A3:23:1C:1B:2C:0F:18:7F:C3:81:84:08:11:0D:C6:CB:21 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: B1 Signing time: Sun 19 Oct 2025 11:14:00 +0000 Manifest this update: Sun 19 Oct 2025 11:13:59 +0000 Manifest next update: Sun 26 Oct 2025 11:13:59 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: 8aejObZ5Qrm2OIB0/BJch6sVtlXAIf+Tc3ATXwqZ+XQ=) 2: B3C1030CACDC11F0BA52705AC4F9AE02.roa (hash: rKqA3uQTl2K6WCyRtdt2sqBcSBeB7Hrkp/ESC7yZWKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Oct 19 11:13:59 2025 GMT Not After : Oct 26 11:13:59 2025 GMT Subject: CN=68f4c7f8-09f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:17:05:97:9d:67:8c:34:f7:a3:80:96:9e: fb:31:35:d7:4c:c9:d3:e0:b8:e6:ee:60:a7:f4:8f: 19:5b:f7:52:a5:e9:f7:36:a3:02:09:0a:5b:c6:7c: 88:3e:00:97:5d:ff:8e:c5:f0:e4:a3:c3:f4:f9:cc: d9:61:b3:fc:06:d3:80:10:09:16:08:53:2c:2d:c8: af:f0:17:fc:85:90:40:c3:4e:48:1f:50:b1:7f:9f: 54:85:d3:a0:e6:9f:84:36:e2:3d:32:70:db:56:36: 56:f7:08:e9:c7:9c:79:53:09:b7:9e:d9:75:51:7c: d0:36:e7:6a:7e:82:f4:09:62:3c:22:62:07:74:c0: b6:ea:6e:03:31:1f:34:29:04:12:82:11:bd:8c:fb: 7d:a1:38:e2:7d:e2:62:d6:31:3a:dd:61:77:9f:d6: 3e:49:aa:2d:23:ae:17:9d:47:5c:01:9b:bb:e2:8b: 7a:bd:1a:25:da:32:ac:31:eb:b6:88:02:a8:87:36: e2:17:aa:ef:97:a1:4c:45:6e:8d:0c:89:f2:86:ca: b4:f9:b8:7f:96:f1:0f:4b:e9:c2:fe:e2:0a:c2:1f: 50:6c:f0:ad:49:08:33:0e:13:f3:cb:30:88:f2:d4: 1b:22:ab:6d:32:ba:e5:cf:b2:21:43:68:c1:82:ca: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EC:BB:A3:23:1C:1B:2C:0F:18:7F:C3:81:84:08:11:0D:C6:CB:21 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:da:59:cc:82:c5:da:8d:14:28:0b:2e:49:7b:ef:4e:3a:70: 13:a1:2f:62:02:88:47:66:9b:d9:10:39:9a:2f:24:4d:58:07: 69:25:15:6d:dc:57:a1:3e:41:eb:7b:10:08:1d:e6:dc:3d:35: 15:ef:91:99:aa:46:43:2a:0d:de:f7:8a:17:f6:7f:89:bc:fb: cd:6b:ed:67:34:63:05:a8:4b:9f:bc:dd:07:11:1e:ac:12:d8: f0:18:1a:31:af:7e:3b:c4:49:c0:7c:e0:8b:c6:0a:8c:2e:64: 3f:dc:b6:c4:91:9b:e3:48:25:d3:eb:2a:4b:0f:59:8d:41:84: 40:7a:27:76:5e:5f:e5:6f:01:93:ba:de:2b:33:17:cc:fd:e8: af:ba:40:81:fe:7f:74:65:00:30:b5:bb:32:6d:6d:f4:75:d8: 07:10:3d:02:c2:a6:02:db:45:94:40:8a:ef:61:a2:4c:96:f3: 75:65:f9:08:e6:de:32:e1:b2:1c:e1:a7:da:a2:c9:e4:f4:e3: 02:29:3d:0c:42:b8:d7:bb:9a:58:4c:26:db:2f:54:49:c4:45: ac:2e:ea:16:83:99:eb:7c:aa:f5:11:72:b3:98:6a:6a:dd:e9: 6e:6d:33:9d:01:61:ff:36:99:8c:47:b4:50:64:02:1f:1e:52: bb:49:e8:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjUxMDE5MTExMzU5WhcNMjUxMDI2MTExMzU5WjAYMRYwFAYD VQQDEw02OGY0YzdmOC0wOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYcXBZedZ4w096OAlp77MTXXTMnT4Ljm7mCn9I8ZW/dSpen3NqMCCQpbxnyI PgCXXf+OxfDko8P0+czZYbP8BtOAEAkWCFMsLciv8Bf8hZBAw05IH1Cxf59UhdOg 5p+ENuI9MnDbVjZW9wjpx5x5Uwm3ntl1UXzQNudqfoL0CWI8ImIHdMC26m4DMR80 KQQSghG9jPt9oTjifeJi1jE63WF3n9Y+SaotI64XnUdcAZu74ot6vRol2jKsMeu2 iAKohzbiF6rvl6FMRW6NDInyhsq0+bh/lvEPS+nC/uIKwh9QbPCtSQgzDhPzyzCI 8tQbIqttMrrlz7IhQ2jBgsqGSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvsu6Mj HBssDxh/w4GECBENxsshMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe2lnMgsXajRQoCy5Je+9OOnAToS9iAohHZpvZEDmaLyRNWAdpJRVt 3FehPkHrexAIHebcPTUV75GZqkZDKg3e94oX9n+JvPvNa+1nNGMFqEufvN0HER6s EtjwGBoxr347xEnAfOCLxgqMLmQ/3LbEkZvjSCXT6ypLD1mNQYRAeid2Xl/lbwGT ut4rMxfM/eivukCB/n90ZQAwtbsybW30ddgHED0CwqYC20WUQIrvYaJMlvN1ZfkI 5t4y4bIc4afaosnk9OMCKT0MQrjXu5pYTCbbL1RJxEWsLuoWg5nrfKr1EXKzmGpq 3elubTOdAWH/NpmMR7RQZAIfHlK7SegG -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:50 2025 by rpki-client