$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: 0kVeaLyo1N8P9CtkUaBuXbT+bcGWrzbu6FvOyzx0t94= Subject key identifier: B5:FE:4B:3C:06:36:A3:E9:E3:C7:38:27:50:BF:13:0E:7F:4B:CF:26 Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 0647 Signing time: Sun 19 Oct 2025 00:15:19 +0000 Manifest this update: Sun 19 Oct 2025 00:15:19 +0000 Manifest next update: Sun 26 Oct 2025 00:15:19 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: DVC+XYoIgxwbh6XW892R7CkToC+2HPD7FHwR0PPSvYU=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: OFrwiJWAkGGk5FsDremtK39rCrSaFqlUshUtXmOJ9aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: Oct 19 00:15:19 2025 GMT Not After : Oct 26 00:15:19 2025 GMT Subject: CN=68f42d97-39d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:19:f5:39:8a:c0:30:f5:70:01:3b:f8:fa: 94:ca:6c:d6:e4:53:e3:2f:d2:83:fe:f9:cc:ec:fe: 71:08:1d:5c:76:f7:e2:5c:83:18:df:ef:3a:58:c7: a7:8a:a4:fb:7c:a8:f1:fd:0a:17:68:ea:77:77:79: 65:27:6d:7a:82:90:d9:23:f0:57:a8:6c:2b:87:ee: 52:e8:36:31:a2:a4:e4:35:e9:a7:97:de:22:60:eb: 0f:87:83:78:2e:51:07:f7:d1:8e:e1:d1:f1:2c:c1: 2d:8f:a1:c1:84:e4:ac:be:4e:6a:56:b0:be:81:a0: 35:94:77:50:d3:85:50:ce:63:24:58:37:1e:25:fb: 39:df:e2:8f:0a:1f:06:d0:e8:c8:d3:f5:b0:ab:6d: dd:b7:1d:17:db:ca:69:83:c3:46:dc:2d:05:7f:7e: e1:b0:b9:4b:7e:eb:cd:9f:8b:62:90:88:1f:44:5a: 3d:cc:f0:f1:a1:97:68:08:45:97:04:91:ee:4a:24: 36:61:ec:b6:81:43:eb:a9:32:3c:bb:df:9c:3e:38: 94:c5:55:68:69:74:c5:9f:46:2b:fe:06:20:63:b0: 49:c1:1d:53:16:9c:1b:d2:0c:c1:aa:00:3e:eb:0e: f1:5e:49:9e:01:ca:ba:f8:cc:4b:cd:81:4d:0c:92: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FE:4B:3C:06:36:A3:E9:E3:C7:38:27:50:BF:13:0E:7F:4B:CF:26 X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f6:e3:1d:32:40:5c:13:b3:39:a8:7c:5a:5c:bb:fc:9a:ca: c6:c5:27:fa:05:91:a8:26:04:79:92:95:bb:5a:7b:68:f3:59: 15:5a:ff:af:ea:a2:0a:a8:b3:b5:aa:65:f7:21:66:3d:2f:cf: e3:7b:c7:7e:02:3d:14:96:9e:a9:ef:6f:9c:1a:71:9f:5b:be: 43:08:2d:45:c3:a3:f4:ef:94:36:b9:b3:41:c2:de:33:68:21: 48:87:5e:fb:05:fe:3c:07:aa:28:a7:b1:ed:d8:84:e4:b6:45: c0:2b:ac:b8:45:ac:b6:e7:e1:dd:31:74:70:22:6f:66:f1:0a: e7:2e:6a:aa:fa:4a:c5:4b:c8:1b:5e:81:5c:16:ef:ef:c3:a8: 7d:5d:ff:3e:b3:c7:77:94:93:4b:96:d3:06:eb:37:62:ed:83: 6d:e2:b1:28:aa:59:21:53:ad:3b:8b:af:bd:d3:9e:48:36:ce: 1f:4b:6a:4c:01:f0:6c:fa:43:48:53:94:74:e6:03:c9:48:54: de:fc:12:7c:66:ce:07:14:0b:c2:b2:7c:6e:ef:2d:8e:43:1e: af:f8:b0:9a:41:0b:97:0f:13:bd:ab:d5:04:4d:4b:48:be:90: e7:9e:a6:12:6e:6b:92:96:57:91:21:08:4e:86:c5:d6:26:e3: 26:6f:73:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUxMDE5MDAxNTE5WhcNMjUxMDI2MDAxNTE5WjAYMRYwFAYD VQQDEw02OGY0MmQ5Ny0zOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq8Z9TmKwDD1cAE7+PqUymzW5FPjL9KD/vnM7P5xCB1cdvfiXIMY3+86WMen iqT7fKjx/QoXaOp3d3llJ216gpDZI/BXqGwrh+5S6DYxoqTkNemnl94iYOsPh4N4 LlEH99GO4dHxLMEtj6HBhOSsvk5qVrC+gaA1lHdQ04VQzmMkWDceJfs53+KPCh8G 0OjI0/Wwq23dtx0X28ppg8NG3C0Ff37hsLlLfuvNn4tikIgfRFo9zPDxoZdoCEWX BJHuSiQ2Yey2gUPrqTI8u9+cPjiUxVVoaXTFn0Yr/gYgY7BJwR1TFpwb0gzBqgA+ 6w7xXkmeAcq6+MxLzYFNDJJ+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX+SzwG NqPp48c4J1C/Ew5/S88mMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB9uMdMkBcE7M5qHxaXLv8msrGxSf6BZGoJgR5kpW7Wnto81kVWv+v 6qIKqLO1qmX3IWY9L8/je8d+Aj0Ulp6p72+cGnGfW75DCC1Fw6P075Q2ubNBwt4z aCFIh177Bf48B6oop7Ht2ITktkXAK6y4Ray25+HdMXRwIm9m8QrnLmqq+krFS8gb XoFcFu/vw6h9Xf8+s8d3lJNLltMG6zdi7YNt4rEoqlkhU607i6+9055INs4fS2pM AfBs+kNIU5R05gPJSFTe/BJ8Zs4HFAvCsnxu7y2OQx6v+LCaQQuXDxO9q9UETUtI vpDnnqYSbmuSlleRIQhOhsXWJuMmb3Mk -----END CERTIFICATE-----Generated at Mon Oct 20 05:34:01 2025 by rpki-client