$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: dmKHMuvxJWkLcvsXzYer7tSqV27rn3V2YxGRbogoVKM= Subject key identifier: 38:AB:5F:3C:AB:2B:B7:C0:5F:BD:8E:A6:1B:FB:E4:8A:80:6A:4B:BD Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02F9 Signing time: Sun 19 Oct 2025 03:26:22 +0000 Manifest this update: Sun 19 Oct 2025 03:26:22 +0000 Manifest next update: Sun 26 Oct 2025 03:26:22 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: eX+JEuifXc/nffqZWtXX2kzV06OXmIvwbqhRk/evCdk=) 2: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=) 5: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 6: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 7: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Oct 19 03:26:22 2025 GMT Not After : Oct 26 03:26:22 2025 GMT Subject: CN=68f45a5e-d1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:fa:b5:e6:0e:7b:13:51:90:ce:84:28:19: 76:a1:21:bd:56:72:72:d9:4b:11:d3:2c:f0:37:7d: 52:76:72:b1:cd:a1:3f:b6:6d:7a:ee:a5:c9:e3:d2: c3:a5:33:55:0d:c0:2d:a7:55:e1:23:52:53:48:2e: 15:75:d3:85:95:bc:65:9f:6c:00:00:d8:63:94:50: 1c:13:43:49:65:3e:69:a3:60:9a:ed:40:ec:0c:46: b9:64:b9:27:ed:be:fe:ca:ae:56:f7:d6:68:0e:d1: 6c:ee:cb:c4:e9:f4:f5:fe:c7:27:19:a8:60:26:d3: b4:4f:36:09:1a:57:5d:f6:fb:f9:a2:45:27:51:ad: e3:5b:b3:45:d5:5e:56:73:e7:89:e2:23:90:cd:64: f0:60:a2:1c:3b:a1:c6:45:54:be:a4:8f:2b:6b:1e: cf:cc:66:9a:86:87:8e:57:3a:24:f1:35:b6:9d:79: db:ae:39:8a:db:a4:31:6c:5f:a9:88:09:cb:bc:9a: 1c:30:5c:66:5b:1a:27:eb:22:0c:14:7d:ec:17:62: 41:cd:d9:22:ac:70:dc:fc:15:e1:cc:56:88:47:a7: b4:7f:47:87:1c:09:c8:6e:a5:6d:79:d3:52:a4:d7: e1:8a:e0:af:54:09:76:37:37:a3:7c:33:ef:79:d9: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AB:5F:3C:AB:2B:B7:C0:5F:BD:8E:A6:1B:FB:E4:8A:80:6A:4B:BD X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fc:34:9d:cb:5f:50:1b:a0:b1:f4:0f:2c:51:25:53:34:4f: b0:5c:83:ad:61:84:33:e0:50:32:83:0b:27:c3:d3:26:d5:f4: 8f:d9:41:e1:83:51:35:d4:27:74:25:b1:7a:f8:22:ab:60:27: d4:24:2a:c3:9b:f4:10:bb:f3:e3:21:39:ca:27:58:a2:36:de: 08:40:10:77:76:f1:28:0c:53:53:20:49:e1:8c:19:9c:87:be: 56:28:4b:6f:49:a9:18:b9:f8:36:af:22:38:9b:f6:34:ca:59: 02:51:ef:1c:ec:c7:28:99:b6:69:25:6c:15:45:af:e7:af:36: 51:26:01:6c:e9:44:b5:d8:be:33:8c:b7:ae:02:97:f3:64:44: c8:89:d5:5e:88:29:3d:83:b7:a2:1a:49:19:0c:ed:42:94:2a: 4b:5a:90:a7:3b:44:86:3f:80:75:0c:c1:19:9b:e7:21:0d:1d: 1f:a5:fa:c5:9a:8f:5e:4c:df:f0:91:2b:7d:85:45:c6:56:ca: a5:11:df:54:fd:22:ca:04:07:e3:8b:49:d2:90:27:01:a9:2b: cc:87:01:e8:3d:13:97:06:e5:e3:50:a6:b3:41:a3:88:82:30: ec:cd:21:67:1a:ad:b5:d8:e5:94:b9:d9:84:e3:3d:c1:d2:c8: 5c:59:66:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUxMDE5MDMyNjIyWhcNMjUxMDI2MDMyNjIyWjAYMRYwFAYD VQQDEw02OGY0NWE1ZS1kMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprf6teYOexNRkM6EKBl2oSG9VnJy2UsR0yzwN31SdnKxzaE/tm167qXJ49LD pTNVDcAtp1XhI1JTSC4VddOFlbxln2wAANhjlFAcE0NJZT5po2Ca7UDsDEa5ZLkn 7b7+yq5W99ZoDtFs7svE6fT1/scnGahgJtO0TzYJGldd9vv5okUnUa3jW7NF1V5W c+eJ4iOQzWTwYKIcO6HGRVS+pI8rax7PzGaahoeOVzok8TW2nXnbrjmK26QxbF+p iAnLvJocMFxmWxon6yIMFH3sF2JBzdkirHDc/BXhzFaIR6e0f0eHHAnIbqVtedNS pNfhiuCvVAl2NzejfDPvedldPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDirXzyr K7fAX72Ophv75IqAaku9MB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv/DSdy19QG6Cx9A8sUSVTNE+wXIOtYYQz4FAygwsnw9Mm1fSP2UHh g1E11Cd0JbF6+CKrYCfUJCrDm/QQu/PjITnKJ1iiNt4IQBB3dvEoDFNTIEnhjBmc h75WKEtvSakYufg2ryI4m/Y0ylkCUe8c7McombZpJWwVRa/nrzZRJgFs6US12L4z jLeuApfzZETIidVeiCk9g7eiGkkZDO1ClCpLWpCnO0SGP4B1DMEZm+chDR0fpfrF mo9eTN/wkSt9hUXGVsqlEd9U/SLKBAfji0nSkCcBqSvMhwHoPROXBuXjUKazQaOI gjDszSFnGq212OWUudmE4z3B0shcWWaQ -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:29 2025 by rpki-client