$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: ehOeiL4h4mmS8Uppdl3DoPE7aSftkZ20u/2u5poNp5Q= Subject key identifier: 8B:54:14:F7:2B:7A:11:65:91:D8:53:E0:1E:06:6E:BB:43:0D:F2:7B Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 0153 Signing time: Sun 19 Oct 2025 06:52:31 +0000 Manifest this update: Sun 19 Oct 2025 06:52:31 +0000 Manifest next update: Sun 26 Oct 2025 06:52:31 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: Pk2Em5fWHkdsSoYDRC1oOvNHPZW2BJctZ1ilX3qbzmk=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Oct 19 06:52:31 2025 GMT Not After : Oct 26 06:52:31 2025 GMT Subject: CN=68f48aaf-8589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:82:85:99:2c:51:de:f5:f4:76:ab:57:62: b5:03:78:36:1e:b2:a5:cc:06:4a:00:a5:b6:5c:bf: ce:1a:3f:a8:65:5d:f2:d7:e0:23:65:b2:aa:fc:c4: 7f:b2:14:29:a9:47:a4:43:f9:21:db:08:0c:13:b0: a1:d8:f8:a2:8c:b2:37:c9:22:b2:38:53:f9:0e:77: 63:a9:ef:b5:7a:82:fd:ac:8b:92:a0:b9:b3:d5:3b: 14:ef:52:8b:ec:cf:65:c9:ba:05:cd:94:76:be:6e: b2:e4:3c:9d:07:91:e8:46:02:f8:3b:4c:07:2a:a5: 20:39:ae:d5:19:dc:00:ce:1d:5e:69:9e:fd:92:d9: 8b:c0:6f:4e:4b:a0:f9:49:ac:70:e5:39:5a:bb:62: de:93:42:96:2d:df:2c:4b:bd:f2:bb:93:18:51:49: af:49:90:80:56:7c:9d:d7:75:35:1f:ea:17:b3:ce: a9:2c:d1:30:f1:4c:84:c7:d8:54:75:d7:8c:9e:91: 95:e2:1a:ee:d0:5c:bf:8e:71:a8:6f:bc:ac:ab:b6: 61:6a:9a:70:a1:04:c6:e5:c9:43:3a:ca:3c:57:ab: 2b:c6:52:ec:e7:00:b9:b9:af:2a:14:3c:51:82:64: 47:31:87:60:12:ef:95:02:46:c5:a3:fd:8b:69:2a: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:54:14:F7:2B:7A:11:65:91:D8:53:E0:1E:06:6E:BB:43:0D:F2:7B X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:2d:6d:bb:30:ee:34:e7:d0:a5:02:7e:5f:ec:1f:b0:66:31: dc:21:5b:01:3f:bc:c1:33:a7:3b:7a:02:fd:e9:0a:5e:01:ca: 62:92:38:8b:34:23:22:ad:3a:0d:91:5a:a1:3a:8e:0c:26:fd: fe:e9:02:29:bd:5e:16:93:1c:45:d8:ef:97:9f:03:6e:56:58: ea:8a:c6:ba:e7:2e:73:f3:f1:b0:62:c9:bd:68:65:28:b5:d3: be:27:b6:4d:a6:11:01:7e:fc:85:86:f4:f4:98:4a:97:25:98: d1:55:a5:6b:51:7f:08:4a:15:5d:a6:99:62:d0:af:8b:05:93: c3:5d:72:cf:11:00:2a:86:bf:7f:0e:ea:11:67:d6:a9:84:ab: ef:c0:45:6c:12:c6:ea:fd:5a:8f:3a:3f:4b:b1:8c:e0:e6:40: cf:db:38:23:0f:06:7a:3d:a6:c6:8d:d2:1d:db:3f:eb:93:d8: 88:53:9c:7a:91:19:60:35:2c:c5:96:b4:86:e4:ae:9f:e9:a3: 1c:99:a7:5e:59:4a:17:dd:5c:48:ed:e9:39:da:11:aa:79:54: 99:11:6b:17:1b:c1:08:63:53:ac:f6:54:56:78:4d:74:ec:69: e3:9d:39:ad:ee:b3:88:1d:c4:fe:27:b1:cd:c9:52:bf:a9:56: 20:00:7f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUxMDE5MDY1MjMxWhcNMjUxMDI2MDY1MjMxWjAYMRYwFAYD VQQDEw02OGY0OGFhZi04NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv6ChZksUd719HarV2K1A3g2HrKlzAZKAKW2XL/OGj+oZV3y1+AjZbKq/MR/ shQpqUekQ/kh2wgME7Ch2PiijLI3ySKyOFP5Dndjqe+1eoL9rIuSoLmz1TsU71KL 7M9lyboFzZR2vm6y5DydB5HoRgL4O0wHKqUgOa7VGdwAzh1eaZ79ktmLwG9OS6D5 Saxw5Tlau2Lek0KWLd8sS73yu5MYUUmvSZCAVnyd13U1H+oXs86pLNEw8UyEx9hU ddeMnpGV4hru0Fy/jnGob7ysq7ZhappwoQTG5clDOso8V6srxlLs5wC5ua8qFDxR gmRHMYdgEu+VAkbFo/2LaSoHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItUFPcr ehFlkdhT4B4GbrtDDfJ7MB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+LW27MO4059ClAn5f7B+wZjHcIVsBP7zBM6c7egL96QpeAcpikjiL NCMirToNkVqhOo4MJv3+6QIpvV4WkxxF2O+XnwNuVljqisa65y5z8/GwYsm9aGUo tdO+J7ZNphEBfvyFhvT0mEqXJZjRVaVrUX8IShVdppli0K+LBZPDXXLPEQAqhr9/ DuoRZ9aphKvvwEVsEsbq/VqPOj9LsYzg5kDP2zgjDwZ6PabGjdId2z/rk9iIU5x6 kRlgNSzFlrSG5K6f6aMcmadeWUoX3VxI7ek52hGqeVSZEWsXG8EIY1Os9lRWeE10 7GnjnTmt7rOIHcT+J7HNyVK/qVYgAH9G -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:03 2025 by rpki-client