$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: EPtIeGCqFTIvEtA1xs3OXy5+0PQ0wl8/kCTA1ztBdN4= Subject key identifier: 73:7B:66:7E:6F:45:70:46:9B:4D:04:6A:35:2A:9D:DA:D0:80:EB:08 Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: CE Signing time: Sun 19 Oct 2025 09:51:44 +0000 Manifest this update: Sun 19 Oct 2025 09:51:43 +0000 Manifest next update: Sun 26 Oct 2025 09:51:43 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: MNUuwOo8fJU0a1msq/8+xe+2wq1uO3M7vcAm3T+KDf4=) 2: 1BD61F645C8711F0923DB116C4F9AE02.roa (hash: nRkOXuAiT1sPCocq+nXPsFuQBgyiZlYhGRugxDZwnSc=) 3: F830F4564F3611F0A970852BC4F9AE02.roa (hash: fiG3ruzyUrai5g5VaE9UAGeJtws3GlUHxnca+lWelW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Oct 19 09:51:43 2025 GMT Not After : Oct 26 09:51:43 2025 GMT Subject: CN=68f4b4af-bbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:2f:70:bd:2f:31:87:40:01:13:7d:25:e7: 45:74:5d:3d:d4:20:49:e0:6b:be:cf:3a:f5:14:1a: dc:f4:36:fb:51:80:1b:b8:9f:b4:e3:bf:27:8c:87: da:79:2e:e6:99:3a:5b:ee:bc:c5:c6:75:5d:a5:44: 1e:72:d0:63:cb:fd:19:ab:1d:19:40:ec:d9:22:43: 15:83:de:a2:1a:62:43:8f:69:7c:f6:cc:89:a8:18: 9e:1f:7b:99:ae:97:3a:c1:88:eb:dd:e5:3d:15:a1: 71:21:7d:69:67:fb:4f:17:66:d2:a2:14:23:18:82: f6:5d:b2:b4:73:e2:00:c7:fa:5c:04:87:13:12:7e: 91:52:99:84:b2:a5:ba:7a:56:e4:9b:66:97:b7:20: 5a:9b:a5:91:d1:f8:80:c8:21:c3:65:61:73:73:70: 4a:e1:1f:19:72:a3:c6:16:5c:5e:cb:f7:73:ce:81: 9d:a2:f0:69:02:c8:b3:79:1f:e0:22:da:be:97:49: 03:81:ca:30:aa:a4:37:15:86:77:f8:c2:54:ab:7f: 99:fc:6e:de:93:3c:c6:b8:f1:30:46:a2:cd:d3:b3: a1:ce:4d:0c:04:7f:77:df:a1:08:01:e2:19:77:fe: b2:a1:b6:3e:88:b3:9c:77:35:fc:da:50:36:32:51: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:66:7E:6F:45:70:46:9B:4D:04:6A:35:2A:9D:DA:D0:80:EB:08 X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:5e:f4:af:e1:ae:e4:98:68:ef:d6:d8:27:1e:91:3f:d4:f9: 3f:aa:22:d2:b2:72:46:7d:3a:c5:9a:0e:b7:75:3f:bf:b9:47: be:c9:f8:a3:88:ff:94:a4:1b:e9:db:d4:37:df:f5:c8:d7:fb: 71:b0:dc:13:e4:62:3a:52:de:ec:67:04:03:4d:85:45:c1:2f: 15:0c:8f:0f:d7:4c:df:9f:92:2c:7c:66:ab:bb:e1:e2:f7:f5: ed:5b:18:f1:8f:7a:a8:f7:f9:1b:f0:4e:02:76:f7:18:99:4b: 74:0a:1b:9f:89:06:a1:e0:6d:28:46:4d:c9:35:24:f6:83:dc: 25:e6:1a:18:bd:01:1f:74:c4:a0:24:47:4f:0f:6c:a3:0c:2c: 35:8d:51:48:bc:97:e1:e2:73:d0:fe:e8:2f:8f:d6:94:4b:2e: 8e:07:ce:0d:20:1f:45:65:49:90:3e:c2:f6:6c:f5:dc:25:61: d2:c9:4e:17:fa:af:57:8b:01:1d:74:2c:69:5a:2c:a5:e1:de: 90:c9:2e:58:66:ee:7c:74:60:4e:aa:4e:e7:29:3a:96:a8:74: ad:48:0c:82:25:da:0d:21:ce:f4:52:36:fc:04:7e:ec:ca:72: 42:69:34:21:dd:06:6e:f6:ce:f3:72:b6:13:de:bc:9e:0e:f2: 82:3d:b5:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw NzcwRTI5MEQwHhcNMjUxMDE5MDk1MTQzWhcNMjUxMDI2MDk1MTQzWjAYMRYwFAYD VQQDEw02OGY0YjRhZi1iYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmUvcL0vMYdAARN9JedFdF091CBJ4Gu+zzr1FBrc9Db7UYAbuJ+0478njIfa eS7mmTpb7rzFxnVdpUQectBjy/0Zqx0ZQOzZIkMVg96iGmJDj2l89syJqBieH3uZ rpc6wYjr3eU9FaFxIX1pZ/tPF2bSohQjGIL2XbK0c+IAx/pcBIcTEn6RUpmEsqW6 elbkm2aXtyBam6WR0fiAyCHDZWFzc3BK4R8ZcqPGFlxey/dzzoGdovBpAsizeR/g Itq+l0kDgcowqqQ3FYZ3+MJUq3+Z/G7ekzzGuPEwRqLN07Ohzk0MBH9336EIAeIZ d/6yobY+iLOcdzX82lA2MlF3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHN7Zn5v RXBGm00EajUqndrQgOsIMB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX bmhQaHo5RmhzZllIY09LUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOXvSv4a7kmGjv1tgnHpE/1Pk/qiLSsnJGfTrFmg63dT+/uUe+yfij iP+UpBvp29Q33/XI1/txsNwT5GI6Ut7sZwQDTYVFwS8VDI8P10zfn5IsfGaru+Hi 9/XtWxjxj3qo9/kb8E4CdvcYmUt0ChufiQah4G0oRk3JNST2g9wl5hoYvQEfdMSg JEdPD2yjDCw1jVFIvJfh4nPQ/ugvj9aUSy6OB84NIB9FZUmQPsL2bPXcJWHSyU4X +q9XiwEddCxpWiyl4d6QyS5YZu58dGBOqk7nKTqWqHStSAyCJdoNIc70Ujb8BH7s ynJCaTQh3QZu9s7zcrYT3ryeDvKCPbX9 -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:24 2025 by rpki-client