$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: hJUYszrHxzqPFCgtSjTTBf1zGSJjSjpePnTCTkLIs/0= Subject key identifier: D6:58:EA:50:6F:18:0E:1E:47:83:0B:4A:22:DB:D3:A5:75:42:31:D5 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: 011E Signing time: Sun 19 Oct 2025 07:38:41 +0000 Manifest this update: Sun 19 Oct 2025 07:38:40 +0000 Manifest next update: Sun 26 Oct 2025 07:38:40 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: JjhK70mbAs7CjbNdN5A4yqJ2MTgAsqTc2zwR5uVcnbY=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Oct 19 07:38:40 2025 GMT Not After : Oct 26 07:38:40 2025 GMT Subject: CN=68f49580-8be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:90:6e:07:b6:6f:58:96:f1:93:10:33:52: a9:0b:eb:0b:a7:ad:32:6e:00:28:96:2c:c7:b5:de: f8:bc:45:e6:ec:2a:00:59:ee:fc:19:a9:e6:bb:56: 74:07:cb:b9:96:a7:93:c1:bb:f3:62:44:c4:7f:e8: bf:6d:9a:60:9e:e1:e7:ff:ff:38:72:0f:24:68:b4: 14:7b:01:ba:8a:c5:c6:5d:29:38:8f:0a:53:15:5a: 5e:a1:45:f0:f4:b4:8b:96:fb:3d:d1:85:5f:56:3c: 23:b9:4b:6c:fa:ee:d5:a6:92:cc:11:2a:53:40:d9: d7:64:0a:82:bc:d8:38:6e:6c:cd:fa:0c:b3:4c:3f: 31:2a:6b:59:c4:de:f7:42:aa:60:18:f1:e0:de:ae: ab:e5:c9:2d:cc:28:4d:c6:93:96:c5:09:91:e1:04: b9:0b:d3:f4:ee:f3:af:ff:6d:9a:27:05:ed:97:13: d1:52:cd:9d:f2:1e:25:81:93:bf:9a:26:1b:fa:58: 7a:a2:0e:94:fc:bd:d7:ef:dc:04:99:f4:44:06:93: 3a:29:4a:4d:d4:35:33:2f:e5:8d:ae:94:66:e6:70: c9:19:65:e4:b4:75:98:da:a1:14:cb:a3:78:f4:a2: bf:9d:17:7b:8a:c1:e8:ba:5d:d8:7b:3e:66:44:24: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:58:EA:50:6F:18:0E:1E:47:83:0B:4A:22:DB:D3:A5:75:42:31:D5 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:24:7d:99:ee:ab:88:7e:8d:ae:29:e3:59:22:f4:af:68:f8: 8c:2d:1d:41:73:94:93:f0:6b:74:4d:32:35:89:d5:9d:ef:4b: b0:26:0f:27:ab:d7:34:c3:d2:a2:74:0b:c2:60:93:8e:40:7c: 5f:ae:2d:04:e6:32:a9:57:d0:b4:6a:8d:57:27:8c:2f:40:f8: 73:bd:1e:35:85:4d:f5:2d:01:fd:8f:3a:63:b6:82:a1:f0:5a: 63:e8:7f:65:f7:6d:f4:a2:28:d3:3d:16:e8:2b:b4:a9:a6:bf: 0c:56:67:fb:27:1a:bb:41:32:da:90:5d:f9:0d:ae:8e:f6:15: b6:1f:c0:a8:b0:8a:a3:78:4b:5d:09:c6:9d:13:76:75:18:a8: 00:54:ab:cf:30:5c:39:11:18:49:a1:45:8b:29:cc:7a:2c:b1: fa:ad:67:15:07:9f:90:2a:97:ad:07:e9:e7:54:44:bc:cb:0d: 75:17:b4:60:66:a6:6c:a0:8d:8a:06:ce:79:11:ba:b6:de:87: bd:a6:45:f6:a6:ba:cd:cb:92:be:66:94:9c:f3:bf:ea:ff:f7: ed:f3:0b:b7:5c:bd:ea:0e:c3:34:fd:cf:96:a7:c9:ba:f6:83: 65:bd:1a:ab:58:4f:ab:d4:57:d8:0c:64:86:c5:24:93:48:29: ea:63:04:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUxMDE5MDczODQwWhcNMjUxMDI2MDczODQwWjAYMRYwFAYD VQQDEw02OGY0OTU4MC04YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQKQbge2b1iW8ZMQM1KpC+sLp60ybgAolizHtd74vEXm7CoAWe78Ganmu1Z0 B8u5lqeTwbvzYkTEf+i/bZpgnuHn//84cg8kaLQUewG6isXGXSk4jwpTFVpeoUXw 9LSLlvs90YVfVjwjuUts+u7VppLMESpTQNnXZAqCvNg4bmzN+gyzTD8xKmtZxN73 QqpgGPHg3q6r5cktzChNxpOWxQmR4QS5C9P07vOv/22aJwXtlxPRUs2d8h4lgZO/ miYb+lh6og6U/L3X79wEmfREBpM6KUpN1DUzL+WNrpRm5nDJGWXktHWY2qEUy6N4 9KK/nRd7isHoul3Yez5mRCR47QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZY6lBv GA4eR4MLSiLb06V1QjHVMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdJH2Z7quIfo2uKeNZIvSvaPiMLR1Bc5ST8Gt0TTI1idWd70uwJg8n q9c0w9KidAvCYJOOQHxfri0E5jKpV9C0ao1XJ4wvQPhzvR41hU31LQH9jzpjtoKh 8Fpj6H9l9230oijTPRboK7Sppr8MVmf7Jxq7QTLakF35Da6O9hW2H8CosIqjeEtd CcadE3Z1GKgAVKvPMFw5ERhJoUWLKcx6LLH6rWcVB5+QKpetB+nnVES8yw11F7Rg ZqZsoI2KBs55Ebq23oe9pkX2prrNy5K+ZpSc87/q//ft8wu3XL3qDsM0/c+Wp8m6 9oNlvRqrWE+r1FfYDGSGxSSTSCnqYwQv -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:11 2025 by rpki-client