$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json) Hash identifier: B8A7WEOco4g4gPd0w+J0p71YQ50ui1mJccsbCbOFF7E= Subject key identifier: 3A:82:1F:F9:6C:36:BC:39:76:E0:90:06:95:1A:25:B6:26:62:EB:7A Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft Manifest number: 0762 Signing time: Sat 18 Oct 2025 23:01:38 +0000 Manifest this update: Sat 18 Oct 2025 23:01:37 +0000 Manifest next update: Sat 25 Oct 2025 23:01:37 +0000 Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: zG+7V/N3V6aSTZKRSf9yGfhdHDc+i3Ux5eCXcfEUFr4=) 2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: if2Ty+xI9lsixRtkfYJ2DrsSLWOZeEaMUkbkKLpKeBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Validity Not Before: Oct 18 23:01:37 2025 GMT Not After : Oct 25 23:01:37 2025 GMT Subject: CN=68f41c52-a0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:66:93:4e:96:9a:ce:41:9e:de:fd:70:3f: e6:54:22:7b:12:31:51:e7:70:5d:a0:2c:8c:87:1f: 11:4e:b5:af:5b:85:2d:ce:2a:83:ab:a8:00:7d:80: e7:29:64:40:6f:1f:c0:b2:56:8a:e6:88:e5:11:cb: d4:7c:3e:66:60:29:bd:6f:ee:da:6c:90:9c:55:2a: 9b:1e:78:f3:1b:88:86:96:fd:b6:b2:74:77:e3:98: bd:2c:48:07:4c:4f:6a:ba:46:ce:26:ba:5a:dc:30: 18:db:dc:c6:67:11:de:d6:3b:a1:ac:19:7f:aa:2a: 39:0c:bc:f4:9e:21:8b:4a:cc:5e:69:14:88:27:71: 30:1f:f2:17:23:bb:fe:11:dd:14:a4:01:1f:ce:22: 80:ab:5f:43:99:f3:6e:ec:23:2d:9c:dc:69:86:6c: 6b:6b:5c:48:67:c9:22:d4:a0:08:4c:9a:08:29:e1: d9:89:ab:14:8c:7e:2a:b4:b5:71:3d:97:47:b6:72: a1:49:6e:82:50:11:09:d8:1d:6d:b8:a5:5c:b6:63: 65:6e:c4:ce:ec:3c:5e:74:18:d1:a8:00:22:a2:9e: f0:dd:60:fe:e6:c3:90:0a:4e:54:74:83:ee:c2:2a: a0:d7:f1:27:ed:15:bb:0f:d4:97:4b:7e:24:7c:b8: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:82:1F:F9:6C:36:BC:39:76:E0:90:06:95:1A:25:B6:26:62:EB:7A X509v3 Authority Key Identifier: keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1c:8d:11:8f:75:24:81:48:4c:25:e2:43:93:80:80:e3:dd: ed:71:1f:a4:50:51:54:66:b1:be:76:49:58:22:63:2e:65:fb: f9:5b:b7:c4:89:14:47:82:a7:74:16:d6:92:3f:27:f9:b1:5f: f9:d1:6a:9d:d4:a6:37:1d:11:e2:96:a7:7f:4a:51:5d:84:1c: eb:32:a3:d8:87:47:3b:5f:05:64:20:31:a8:f5:71:be:75:0c: 98:ee:ac:d2:56:04:91:c2:4d:03:68:9e:9e:35:34:d8:20:38: 35:57:dc:7b:c7:96:ca:a9:14:12:88:a2:8f:cd:9a:4c:18:47: 25:de:44:54:2c:8d:c9:b0:09:bb:a5:42:86:be:b9:89:82:2a: 2c:5c:ab:43:c4:2a:82:cc:3e:5f:e4:e1:5d:73:1f:6c:d8:83: c7:6a:fd:ef:50:cf:a0:c2:6e:75:1f:80:35:20:3d:80:a6:51: b3:0e:26:3e:42:7a:53:52:4c:1d:0f:99:83:32:67:8d:d1:06: b4:9c:61:c6:22:62:7d:dd:0f:db:ba:9c:12:bb:8c:a2:9e:eb: 91:4f:19:eb:7a:9d:32:0e:74:5b:8c:34:d4:9f:35:d8:3c:ec: 56:3d:f7:6b:c3:38:dd:8f:b7:0b:52:3c:9c:16:44:19:dc:a8: 95:8c:cc:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5 MjhFQTdCMzkwHhcNMjUxMDE4MjMwMTM3WhcNMjUxMDI1MjMwMTM3WjAYMRYwFAYD VQQDEw02OGY0MWM1Mi1hMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0dmk06Wms5Bnt79cD/mVCJ7EjFR53BdoCyMhx8RTrWvW4UtziqDq6gAfYDn KWRAbx/AslaK5ojlEcvUfD5mYCm9b+7abJCcVSqbHnjzG4iGlv22snR345i9LEgH TE9qukbOJrpa3DAY29zGZxHe1juhrBl/qio5DLz0niGLSsxeaRSIJ3EwH/IXI7v+ Ed0UpAEfziKAq19DmfNu7CMtnNxphmxra1xIZ8ki1KAITJoIKeHZiasUjH4qtLVx PZdHtnKhSW6CUBEJ2B1tuKVctmNlbsTO7DxedBjRqAAiop7w3WD+5sOQCk5UdIPu wiqg1/En7RW7D9SXS34kfLjKpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqCH/ls Nrw5duCQBpUaJbYmYut6MB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzI3OC8yQUUwQUQ2MDNCMzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BU X1BZT21OQVhBeTZTanFlemsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOHI0Rj3UkgUhMJeJDk4CA493tcR+kUFFUZrG+dklYImMuZfv5W7fE iRRHgqd0FtaSPyf5sV/50Wqd1KY3HRHilqd/SlFdhBzrMqPYh0c7XwVkIDGo9XG+ dQyY7qzSVgSRwk0DaJ6eNTTYIDg1V9x7x5bKqRQSiKKPzZpMGEcl3kRULI3JsAm7 pUKGvrmJgiosXKtDxCqCzD5f5OFdcx9s2IPHav3vUM+gwm51H4A1ID2AplGzDiY+ QnpTUkwdD5mDMmeN0Qa0nGHGImJ93Q/bupwSu4yinuuRTxnrep0yDnRbjDTUnzXY POxWPfdrwzjdj7cLUjycFkQZ3KiVjMzy -----END CERTIFICATE-----Generated at Mon Oct 20 13:48:49 2025 by rpki-client