$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: +tNVTm4CvsM+fIKtL2T3d2Vg1cG8L9aLEEgLMeHR2Cg= Subject key identifier: 24:18:82:3D:A4:B5:59:E3:C8:5E:C0:79:A3:79:1E:E5:C8:18:ED:58 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 34CF Signing time: Mon 20 Oct 2025 15:25:29 +0000 Manifest this update: Mon 20 Oct 2025 15:25:28 +0000 Manifest next update: Mon 27 Oct 2025 15:25:28 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: u8nWTFWveVT1JLUydeIKJOW+mJ60zmAaNZUj5nN3CNM=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Oct 20 15:25:28 2025 GMT Not After : Oct 27 15:25:28 2025 GMT Subject: CN=68f65468-1039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:f7:73:15:fd:10:d2:52:bb:fa:16:8e:dc: c5:64:9e:24:26:3c:53:bf:c8:00:de:21:06:b6:ba: ae:b7:62:13:32:c5:68:b6:63:e2:73:c8:c5:43:4e: 78:f8:8d:8e:be:51:e1:ae:51:10:42:55:3e:bc:6e: 58:b7:7d:30:75:74:61:fe:ef:b7:26:34:cf:18:5e: 37:71:39:5c:84:a9:44:1f:c0:bd:16:5e:11:7a:bd: e1:8b:ec:25:71:58:24:2e:46:9e:33:54:47:39:05: f9:1e:5a:08:33:7d:9b:a7:65:60:39:28:a6:93:66: 90:fa:35:6d:97:60:ec:df:d9:85:b5:66:33:65:b7: c4:01:19:a8:f4:38:f1:20:fb:d1:de:65:06:90:16: 15:1d:bd:0a:74:5d:2c:25:ac:b5:f2:5e:f5:0d:8b: e7:25:2c:a4:80:6d:65:da:c7:d7:37:7a:3b:a2:45: c8:36:b3:13:4f:e0:28:c5:41:62:ca:a5:84:90:8b: ef:8e:dc:cb:6f:a5:0e:58:5c:6a:e1:e4:0a:6f:67: 98:be:cd:a3:0e:21:27:af:14:07:6e:7e:5d:d9:24: 35:58:06:a9:78:3d:14:12:d7:b6:a5:c9:13:0d:2c: 71:7c:7e:c2:9e:ab:04:8a:43:ee:de:a8:cb:77:a0: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:18:82:3D:A4:B5:59:E3:C8:5E:C0:79:A3:79:1E:E5:C8:18:ED:58 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7a:3f:da:ec:60:db:23:11:82:04:67:00:24:08:e3:47:43: f7:ef:68:cd:b9:82:09:b6:aa:21:29:ba:e8:15:d2:d1:d2:0d: ba:49:91:4a:64:90:ea:5f:41:29:2c:59:e8:b3:2a:b2:21:86: 68:d2:1c:df:44:de:de:ab:6e:9d:bd:4a:3f:73:a2:39:df:7d: 3b:64:e9:59:d6:91:7f:5e:2b:fb:eb:7c:c3:81:e1:35:9a:c4: 53:fa:6c:fd:ba:36:90:de:26:49:8a:92:a1:18:39:ec:f1:36: c5:ab:07:6e:9a:7e:a2:c7:24:02:1f:11:3b:14:a4:37:a8:fe: 6a:a2:62:2f:48:d4:5d:90:25:04:5b:31:02:3e:bc:f0:ec:ce: 57:d4:54:e2:fd:d5:c5:a6:30:6c:db:a2:5d:3b:6d:1f:d1:23: c6:ce:94:99:49:bd:9d:bc:e4:68:8e:25:a4:e4:f3:7e:ab:9c: a0:91:d4:0e:4c:97:2f:c2:ec:74:83:6b:59:bf:4a:33:bb:73: 6d:6c:ad:ef:a6:46:81:98:8a:5d:0b:0b:59:0f:35:28:21:71: 81:04:34:78:ef:dc:1e:e7:4c:8e:07:66:d2:c5:25:87:7f:aa: db:80:71:13:6d:f0:2d:2a:d7:63:85:cd:01:f4:b9:fc:33:99: 7c:04:84:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjUxMDIwMTUyNTI4WhcNMjUxMDI3MTUyNTI4WjAYMRYwFAYD VQQDEw02OGY2NTQ2OC0xMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6n3cxX9ENJSu/oWjtzFZJ4kJjxTv8gA3iEGtrqut2ITMsVotmPic8jFQ054 +I2OvlHhrlEQQlU+vG5Yt30wdXRh/u+3JjTPGF43cTlchKlEH8C9Fl4Rer3hi+wl cVgkLkaeM1RHOQX5HloIM32bp2VgOSimk2aQ+jVtl2Ds39mFtWYzZbfEARmo9Djx IPvR3mUGkBYVHb0KdF0sJay18l71DYvnJSykgG1l2sfXN3o7okXINrMTT+AoxUFi yqWEkIvvjtzLb6UOWFxq4eQKb2eYvs2jDiEnrxQHbn5d2SQ1WAapeD0UEte2pckT DSxxfH7CnqsEikPu3qjLd6D00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQYgj2k tVnjyF7AeaN5HuXIGO1YMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEej/a7GDbIxGCBGcAJAjjR0P372jNuYIJtqohKbroFdLR0g26SZFK ZJDqX0EpLFnosyqyIYZo0hzfRN7eq26dvUo/c6I53307ZOlZ1pF/Xiv763zDgeE1 msRT+mz9ujaQ3iZJipKhGDns8TbFqwdumn6ixyQCHxE7FKQ3qP5qomIvSNRdkCUE WzECPrzw7M5X1FTi/dXFpjBs26JdO20f0SPGzpSZSb2dvORojiWk5PN+q5ygkdQO TJcvwux0g2tZv0ozu3NtbK3vpkaBmIpdCwtZDzUoIXGBBDR479we50yOB2bSxSWH f6rbgHETbfAtKtdjhc0B9Ln8M5l8BIQJ -----END CERTIFICATE-----Generated at Tue Oct 21 02:24:50 2025 by rpki-client