$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json) Hash identifier: 4npCBqBlgxMQGh26nfH7u/GzxJvpMeS+usNCftyv1SY= Subject key identifier: 8A:FC:35:45:97:7E:C9:17:82:22:98:B3:28:17:E8:0F:86:1B:4D:1A Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 08:52:58 +0000 Manifest this update: Sun 19 Oct 2025 08:52:58 +0000 Manifest next update: Sun 26 Oct 2025 08:52:58 +0000 Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: bKKKmDg4tcQebP/93mlWl1l3OVuLdnJJCGFXwYbv008=) 2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: GquKmtZlMDJv9N8EiV5JY0q+tYOnvaRmJYnuHr77saU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Validity Not Before: Oct 19 08:52:58 2025 GMT Not After : Oct 26 08:52:58 2025 GMT Subject: CN=68f4a6ea-a7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:5a:03:1a:16:b1:f6:69:85:1c:73:73:2e: 3f:00:e0:05:8f:5f:2e:0f:23:9c:97:68:91:73:13: 4d:02:33:1e:e0:bf:3f:ad:36:91:d3:dd:2e:89:fa: d4:91:37:90:00:9e:cc:ab:95:c7:07:b0:c5:dc:f6: 1c:18:b7:93:b0:b8:71:8f:b0:89:8c:ff:81:0c:24: 7f:79:79:5f:f4:e5:a2:04:15:52:64:6d:b5:d2:85: e8:a7:2c:14:38:65:f2:67:14:63:38:3d:71:da:41: f8:68:d0:5f:70:40:10:72:c3:4c:e2:39:ed:da:ea: 7f:98:9d:7c:59:76:b0:76:73:e4:e6:e9:36:5f:00: 73:5a:dc:57:a3:a5:b5:5e:8f:28:0c:26:88:2b:2f: 20:c1:14:bf:5d:98:12:0e:0a:3a:6c:da:8f:46:47: 15:07:c5:8b:f1:69:60:1e:08:cf:5d:94:f3:49:0d: a9:48:24:d9:25:ee:37:50:b4:8b:59:80:57:08:72: be:6a:e0:16:b6:fb:3c:d3:6d:f2:00:0f:37:38:df: 41:05:95:a1:dd:10:82:a3:42:52:ba:04:11:22:3b: 74:a2:74:fe:90:67:05:a4:33:0a:6f:f9:19:4e:d5: f4:83:a4:d2:cf:af:39:1f:64:e6:33:2f:e6:df:bb: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FC:35:45:97:7E:C9:17:82:22:98:B3:28:17:E8:0F:86:1B:4D:1A X509v3 Authority Key Identifier: keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9c:d4:e2:9c:48:9d:44:dd:31:0f:5e:00:07:f7:a1:02:5a: e9:57:25:86:c3:35:5f:2c:ba:0c:49:6b:35:15:b8:b9:dc:0f: f7:7f:c5:bb:7d:63:07:d4:0a:07:a4:f6:20:90:11:3e:f2:99: 44:88:e6:92:53:42:47:0c:75:26:e1:60:12:03:0e:b5:c4:00: 5b:e4:8e:04:55:ef:9a:87:6e:9b:a7:39:97:68:34:59:0e:df: 8c:74:6e:d2:d0:5c:da:b9:e9:66:68:39:a0:b6:0b:b4:e5:48: c8:ea:79:c5:a4:09:07:76:15:af:8f:f3:28:45:5f:fe:7a:4f: 3c:19:01:14:cd:a8:e5:5f:79:8b:f4:d8:eb:b8:ef:2c:40:83: 2a:f7:df:9f:ac:ec:79:2c:9f:b7:02:0f:3e:a8:7e:39:a8:7d: 66:b4:87:dd:52:72:a4:88:c4:71:4f:4d:8a:ad:1a:55:a6:05: 83:96:45:8a:2b:cb:db:a3:d8:73:ce:51:fa:03:6e:f8:56:3a: 18:97:b8:8c:a1:d0:a6:1d:a9:5a:b9:44:1a:5a:2c:0f:35:1e: 0f:3a:b9:0d:b6:13:10:42:75:8e:78:f8:de:50:5a:48:27:f4: 1d:b9:e0:ce:64:11:86:32:cc:2f:7c:30:e5:df:06:d7:7e:79: 47:e8:f5:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKDJEMTgwNkJCNzlGN0VDNkE2OTdDQjBBNjVBMjFFNUNC MTIyRkRFNzYwHhcNMjUxMDE5MDg1MjU4WhcNMjUxMDI2MDg1MjU4WjAYMRYwFAYD VQQDEw02OGY0YTZlYS1hN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlJaAxoWsfZphRxzcy4/AOAFj18uDyOcl2iRcxNNAjMe4L8/rTaR090uifrU kTeQAJ7Mq5XHB7DF3PYcGLeTsLhxj7CJjP+BDCR/eXlf9OWiBBVSZG210oXopywU OGXyZxRjOD1x2kH4aNBfcEAQcsNM4jnt2up/mJ18WXawdnPk5uk2XwBzWtxXo6W1 Xo8oDCaIKy8gwRS/XZgSDgo6bNqPRkcVB8WL8WlgHgjPXZTzSQ2pSCTZJe43ULSL WYBXCHK+auAWtvs8023yAA83ON9BBZWh3RCCo0JSugQRIjt0onT+kGcFpDMKb/kZ TtX0g6TSz685H2TmMy/m37sE9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr8NUWX fskXgiKYsygX6A+GG00aMB8GA1UdIwQYMBaAFC0YBrt59+xqaXywploh5csSL952 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ERjY5NEJBNjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdHcHBmTENtV2lIbHl4SXYz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ERjY5NEJBNjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdH cHBmTENtV2lIbHl4SXYzblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGnNTinEidRN0xD14AB/ehAlrpVyWGwzVfLLoMSWs1Fbi53A/3f8W7 fWMH1AoHpPYgkBE+8plEiOaSU0JHDHUm4WASAw61xABb5I4EVe+ah26bpzmXaDRZ Dt+MdG7S0FzauelmaDmgtgu05UjI6nnFpAkHdhWvj/MoRV/+ek88GQEUzajlX3mL 9NjruO8sQIMq99+frOx5LJ+3Ag8+qH45qH1mtIfdUnKkiMRxT02KrRpVpgWDlkWK K8vbo9hzzlH6A274VjoYl7iModCmHalauUQaWiwPNR4POrkNthMQQnWOePjeUFpI J/QdueDOZBGGMswvfDDl3wbXfnlH6PW2 -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:30 2025 by rpki-client