$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: dpVwculxZyUtlJ7MvKjPehv3wIVs6ZidPEPBCxH0U1M= Subject key identifier: 4E:5F:CD:43:A2:EF:3F:C5:ED:0F:A6:3A:35:5A:71:5E:E8:FE:C9:4D Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B78 Signing time: Sat 18 Oct 2025 19:59:25 +0000 Manifest this update: Sat 18 Oct 2025 19:59:24 +0000 Manifest next update: Sat 25 Oct 2025 19:59:24 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: xMucTKWtFjEMRlJKE6dVFueExTn6diJpGMyBQcyinDM=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Oct 18 19:59:24 2025 GMT Not After : Oct 25 19:59:24 2025 GMT Subject: CN=68f3f19d-63ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:da:e8:da:28:7a:67:ed:54:7e:ac:22:ef: 2b:44:f3:e8:b4:81:15:e0:2f:e0:e7:bf:09:f6:73: 50:21:40:3a:5b:65:ad:74:5d:bf:4a:2c:dc:c1:b9: 0d:e4:04:e5:4c:29:0e:26:34:de:1c:54:55:8a:7c: a2:78:c3:96:99:1d:57:bf:45:04:71:b0:07:05:01: 20:f2:84:84:42:95:3d:a2:e2:fa:96:ff:d7:7b:d8: 3a:1a:61:4e:28:41:f8:b9:3c:bf:47:7f:42:47:2b: 59:4f:0f:ed:a7:ca:7e:64:e3:3c:59:94:7e:f6:a3: eb:cc:a4:f3:b6:79:b0:62:31:c4:2c:6c:8c:12:cf: 7e:da:37:f4:f3:e2:8f:98:cb:02:ae:4a:cb:b2:53: 1e:5c:e0:98:e3:2d:5b:99:cd:80:ea:3a:58:c2:18: 7e:61:0c:69:2f:b5:63:3c:34:0e:cf:d7:2c:d8:1e: c4:f9:38:d4:9d:d0:f2:25:de:a5:fe:c0:b2:f4:96: c3:88:cd:92:92:04:96:c8:43:a2:b1:98:5f:d2:12: 51:c5:db:56:ac:51:01:8b:87:4e:03:11:f7:17:5c: 38:40:ca:59:fd:48:b4:6e:07:89:dc:13:ce:94:a4: bf:f0:a4:bb:d9:8d:7c:a1:4e:12:fc:b7:3f:e0:eb: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:CD:43:A2:EF:3F:C5:ED:0F:A6:3A:35:5A:71:5E:E8:FE:C9:4D X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:05:d7:59:0f:cb:80:ab:92:dd:7b:93:a1:3e:6a:81:67:8e: 0e:58:53:f6:78:85:ba:10:01:27:93:8b:88:18:2c:9b:1a:2a: 00:80:28:fa:bc:b6:55:03:16:44:9f:6a:72:45:ce:21:fe:58: bf:79:e6:89:1c:1f:71:de:06:bb:f8:4d:93:74:47:cc:80:4c: 29:f3:2e:0d:86:5f:58:ad:50:87:8a:b2:64:37:95:16:bf:84: 35:fc:58:3c:ef:4f:1f:ac:f4:92:11:29:24:ba:9a:7b:3f:fc: 4c:ac:18:53:03:49:ea:24:b8:c6:d4:37:41:2d:ae:78:48:2d: fa:72:6f:35:c5:50:1c:cd:81:00:4c:76:5d:6b:db:1b:0c:e2: fd:95:cb:61:9e:99:49:26:b9:aa:71:8f:30:d3:aa:27:dd:88: 03:8c:5e:bf:18:36:f4:e6:86:26:de:5b:5f:5f:19:c4:7d:bc: 24:d1:28:2d:96:62:3c:dd:9f:f1:f5:95:83:3c:59:59:3a:dc: 78:fe:05:b7:46:4f:66:10:56:2e:d2:bf:e6:82:aa:87:24:43: ca:03:9f:c2:45:a9:ba:31:8f:43:96:13:f1:a7:f5:e9:8c:10: f9:a3:92:1b:92:fe:2e:b6:1d:78:5a:60:ec:d1:5f:bd:87:52: 31:fb:d9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUxMDE4MTk1OTI0WhcNMjUxMDI1MTk1OTI0WjAYMRYwFAYD VQQDEw02OGYzZjE5ZC02M2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8ja6NooemftVH6sIu8rRPPotIEV4C/g578J9nNQIUA6W2WtdF2/SizcwbkN 5ATlTCkOJjTeHFRVinyieMOWmR1Xv0UEcbAHBQEg8oSEQpU9ouL6lv/Xe9g6GmFO KEH4uTy/R39CRytZTw/tp8p+ZOM8WZR+9qPrzKTztnmwYjHELGyMEs9+2jf08+KP mMsCrkrLslMeXOCY4y1bmc2A6jpYwhh+YQxpL7VjPDQOz9cs2B7E+TjUndDyJd6l /sCy9JbDiM2SkgSWyEOisZhf0hJRxdtWrFEBi4dOAxH3F1w4QMpZ/Ui0bgeJ3BPO lKS/8KS72Y18oU4S/Lc/4OvlnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5fzUOi 7z/F7Q+mOjVacV7o/slNMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUBddZD8uAq5Lde5OhPmqBZ44OWFP2eIW6EAEnk4uIGCybGioAgCj6 vLZVAxZEn2pyRc4h/li/eeaJHB9x3ga7+E2TdEfMgEwp8y4Nhl9YrVCHirJkN5UW v4Q1/Fg8708frPSSESkkupp7P/xMrBhTA0nqJLjG1DdBLa54SC36cm81xVAczYEA THZda9sbDOL9lcthnplJJrmqcY8w06on3YgDjF6/GDb05oYm3ltfXxnEfbwk0Sgt lmI83Z/x9ZWDPFlZOtx4/gW3Rk9mEFYu0r/mgqqHJEPKA5/CRam6MY9DlhPxp/Xp jBD5o5Ibkv4uth14WmDs0V+9h1Ix+9nx -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:32 2025 by rpki-client