$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: agKm26ebyWCFum6/fp2YsawJehfnZaNVYTf9dI7wOvc= Subject key identifier: A7:C6:42:AC:97:FC:99:F3:E8:4B:3B:10:22:33:E0:EB:80:F0:28:24 Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0AC0 Signing time: Sat 18 Oct 2025 20:24:54 +0000 Manifest this update: Sat 18 Oct 2025 20:24:53 +0000 Manifest next update: Sat 25 Oct 2025 20:24:53 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: UmAE5HoGE2uB1cwstkojviiAtC2txzs6a+SkGGpjMAY=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: ibrlLqXyJBvhReQbTY44ZuUpmVrk/0dppjxQ0Xpe60o=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: oypYrt94xP1HGfkKHJnrEVZNMxQYAmf9WSyWVpRVwus=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 1NXDKHdGdwmQ0HPSNP/L0h3g8vj3YJvsOmeCBe7yxT0=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: lhMvYRsrjVyA66+IzRjCtkWTHGswP9g49oqeoBG1Neg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: Oct 18 20:24:53 2025 GMT Not After : Oct 25 20:24:53 2025 GMT Subject: CN=68f3f795-9432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:aa:72:bd:59:f9:74:29:d3:0b:17:5e:14: 4e:40:14:cd:36:63:e3:0a:ed:55:92:93:a5:c0:a0: 23:82:79:9b:e1:02:e3:b2:0a:4c:75:53:31:e2:62: 4d:59:12:89:f6:2b:4e:59:e5:8b:ff:2a:ec:04:20: 7f:12:56:9e:94:32:49:e2:01:ca:d2:59:49:4d:d0: c8:2e:6b:0e:7a:78:80:0d:9f:d1:37:47:62:5d:cc: e7:b4:e9:b5:b9:fa:b0:b2:4c:91:8e:b2:f7:a0:e6: 18:77:77:ce:ff:f0:14:6e:ff:76:91:d9:b9:cb:5b: 88:07:89:dc:b1:f7:2a:98:22:7b:f1:be:79:98:76: 78:0a:aa:68:78:66:d0:60:e1:db:92:bd:bb:d1:d7: f3:b2:97:aa:84:2f:7d:8c:a2:2a:20:96:a9:ba:fd: e6:c5:07:27:b8:f7:d8:c3:66:24:f2:37:07:3d:26: e3:74:0d:7d:70:5e:50:84:b8:4e:20:e2:2e:a6:a4: 55:c1:88:4a:97:9c:5f:ba:4e:39:49:f6:0d:90:52: 1f:e5:e9:c2:4f:b3:cb:01:ea:81:62:92:fd:7b:a7: 60:d7:ee:3b:7b:a9:ba:0b:be:99:13:75:08:f5:c7: e0:52:da:79:82:57:5a:2e:fc:c7:7d:c1:05:4c:38: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:42:AC:97:FC:99:F3:E8:4B:3B:10:22:33:E0:EB:80:F0:28:24 X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:12:ae:90:47:76:89:7e:2a:51:df:d4:18:48:41:22:1a: f3:f3:f3:b4:14:61:53:f2:fa:3b:52:76:ef:55:fe:88:18:44: bd:95:6f:b0:4a:cb:97:25:0d:06:38:b5:5b:f4:d9:4e:d1:2e: 41:f8:5e:9b:40:e7:60:f5:a0:1e:d7:69:b3:bc:a6:bb:49:7c: 48:1b:80:8f:e4:50:95:f0:15:13:9b:bf:24:65:e4:4e:2d:7a: 90:31:39:c8:66:63:06:01:9a:c1:f5:03:21:39:d6:7e:7c:18: e0:3a:96:47:25:71:2c:58:47:3b:51:8f:78:1a:ad:ad:e1:93: ce:c4:1a:d6:ce:eb:48:7f:ab:46:5c:87:08:fe:50:10:d7:dc: c0:4d:25:ab:59:6c:ae:78:fd:41:36:7b:ca:ce:37:53:f2:4c: a1:5c:ca:cb:36:96:00:65:e9:f5:4e:8f:28:fc:c0:f2:b3:eb: c1:da:3b:b8:7e:d2:3c:2b:0a:6e:15:0c:db:b9:69:05:c9:de: bd:c3:86:96:fd:a0:a7:6b:02:1c:b6:f7:b2:09:0f:67:3e:d2: 1f:af:4f:29:87:3d:68:3f:94:5f:d9:23:28:e1:fb:fb:0a:f1: 53:14:4d:bf:9c:51:57:c7:26:db:9f:1e:ee:92:2e:fd:03:74: 42:92:98:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUxMDE4MjAyNDUzWhcNMjUxMDI1MjAyNDUzWjAYMRYwFAYD VQQDEw02OGYzZjc5NS05NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOWqcr1Z+XQp0wsXXhROQBTNNmPjCu1VkpOlwKAjgnmb4QLjsgpMdVMx4mJN WRKJ9itOWeWL/yrsBCB/ElaelDJJ4gHK0llJTdDILmsOeniADZ/RN0diXczntOm1 ufqwskyRjrL3oOYYd3fO//AUbv92kdm5y1uIB4ncsfcqmCJ78b55mHZ4CqpoeGbQ YOHbkr270dfzspeqhC99jKIqIJapuv3mxQcnuPfYw2Yk8jcHPSbjdA19cF5QhLhO IOIupqRVwYhKl5xfuk45SfYNkFIf5enCT7PLAeqBYpL9e6dg1+47e6m6C76ZE3UI 9cfgUtp5gldaLvzHfcEFTDhO2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfGQqyX /Jnz6Es7ECIz4OuA8CgkMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH0BKukEd2iX4qUd/UGEhBIhrz8/O0FGFT8vo7UnbvVf6IGES9lW+w SsuXJQ0GOLVb9NlO0S5B+F6bQOdg9aAe12mzvKa7SXxIG4CP5FCV8BUTm78kZeRO LXqQMTnIZmMGAZrB9QMhOdZ+fBjgOpZHJXEsWEc7UY94Gq2t4ZPOxBrWzutIf6tG XIcI/lAQ19zATSWrWWyueP1BNnvKzjdT8kyhXMrLNpYAZen1To8o/MDys+vB2ju4 ftI8KwpuFQzbuWkFyd69w4aW/aCnawIctveyCQ9nPtIfr08phz1oP5Rf2SMo4fv7 CvFTFE2/nFFXxybbnx7uki79A3RCkphT -----END CERTIFICATE-----Generated at Mon Oct 20 19:38:46 2025 by rpki-client