$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json) Hash identifier: dRFg5QCCeXeJ/uzvW7zjm6y8LmNj2jS7RRPdrg/qVgk= Subject key identifier: AF:E4:ED:51:D1:B6:65:9C:65:80:2D:CC:F9:43:27:81:1E:64:BD:2F Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft Manifest number: C0 Signing time: Sun 19 Oct 2025 09:04:53 +0000 Manifest this update: Sun 19 Oct 2025 09:04:52 +0000 Manifest next update: Sun 26 Oct 2025 09:04:52 +0000 Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: uZnLQUKytnQbaJhW/vjUpkWcRhOBuZDqeNqV92jkBxI=) 2: B3DA6A52A96511EFB3EB6721C4F9AE02.roa (hash: FFio9OtmebaEzCJyFXTCLhGivXqzWOQVgzKrbso6U2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Validity Not Before: Oct 19 09:04:52 2025 GMT Not After : Oct 26 09:04:52 2025 GMT Subject: CN=68f4a9b5-a082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:5c:86:5d:69:6a:5a:9a:34:7d:fc:88:df: 94:fd:2f:c1:ad:72:55:24:d4:66:2e:af:69:f3:b9: 64:bd:e9:03:34:8d:67:97:2b:87:7c:59:8d:d2:a6: 56:cf:b6:21:35:e0:a4:71:e8:a0:51:1c:af:8c:80: 50:86:18:c2:d6:2e:74:80:b5:34:ea:a3:01:8c:ed: a0:10:87:32:af:27:e9:2a:36:8d:3d:40:d0:35:16: 18:a1:58:a9:fe:f3:4b:ed:6b:0e:64:2b:42:ea:32: 87:bb:19:a1:b9:e5:8b:54:34:14:2a:ef:87:a4:ba: 68:f8:4c:46:30:a0:ca:14:cd:26:90:ea:10:5b:26: 53:c3:67:57:bd:db:a4:aa:6d:40:8e:ed:d2:7f:e6: 51:30:e8:fe:d7:e3:2f:5f:6e:b9:7c:c7:9e:8b:85: 52:1d:d0:ac:27:3d:bd:33:fc:b3:5f:9a:61:0a:01: 5b:df:8f:b2:b3:52:b2:4a:d2:6a:8b:58:5e:59:78: 62:8a:a5:a5:4c:6d:25:23:db:df:a9:1a:ed:e9:e2: 72:3a:f0:9e:56:88:35:6f:ea:bf:d1:95:05:28:95: 10:6b:8d:40:22:1e:27:fa:b9:92:77:af:97:e6:02: c8:e3:81:fa:d7:3c:8b:75:20:96:13:b8:81:09:41: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:ED:51:D1:B6:65:9C:65:80:2D:CC:F9:43:27:81:1E:64:BD:2F X509v3 Authority Key Identifier: keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b6:30:c3:e2:fc:73:c2:be:a0:22:00:cd:9c:97:6f:14:79: c8:84:ea:59:4e:0c:59:d7:e1:fb:7c:84:19:75:c2:1f:47:84: e2:7d:bb:14:36:4c:3a:90:a5:08:e8:8d:ba:fd:5e:78:87:28: cd:cd:9d:cb:08:b4:85:dd:fd:47:ea:72:88:e8:6c:ea:41:c7: 1f:1a:46:1e:ea:b5:ba:9d:37:21:24:0c:d6:10:45:7a:9a:e4: b4:3c:9b:80:56:a6:cf:7b:e1:5f:8e:da:ab:d6:4a:41:30:00: 4d:fe:b3:1c:dd:0d:c9:f3:ce:75:d2:d6:de:45:6c:3b:f0:e3: 40:e7:10:33:08:d3:a6:ee:3c:76:0f:b2:c5:e4:3f:d3:1c:ff: d4:a1:20:f9:3e:9e:4d:fe:1b:ab:e6:72:96:f2:58:24:bc:69: 44:82:24:91:02:97:8a:ec:be:86:63:2c:89:5d:fa:95:0b:ea: 33:e6:c6:4d:47:34:ce:48:98:88:de:d9:de:36:97:21:3b:4c: b7:97:56:a3:26:19:d1:72:ae:06:27:f9:60:de:8c:d0:e8:fb: ba:93:34:c6:51:18:e0:a9:77:de:f8:99:b4:34:83:b9:7d:73: 23:1f:38:64:f1:83:8b:c0:c6:74:2b:25:24:f6:db:d5:a7:c9: af:a4:8f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz M0U3RUQyRTEwHhcNMjUxMDE5MDkwNDUyWhcNMjUxMDI2MDkwNDUyWjAYMRYwFAYD VQQDEw02OGY0YTliNS1hMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39Fchl1palqaNH38iN+U/S/BrXJVJNRmLq9p87lkvekDNI1nlyuHfFmN0qZW z7YhNeCkceigURyvjIBQhhjC1i50gLU06qMBjO2gEIcyryfpKjaNPUDQNRYYoVip /vNL7WsOZCtC6jKHuxmhueWLVDQUKu+HpLpo+ExGMKDKFM0mkOoQWyZTw2dXvduk qm1Aju3Sf+ZRMOj+1+MvX265fMeei4VSHdCsJz29M/yzX5phCgFb34+ys1KyStJq i1heWXhiiqWlTG0lI9vfqRrt6eJyOvCeVog1b+q/0ZUFKJUQa41AIh4n+rmSd6+X 5gLI44H61zyLdSCWE7iBCUGgwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/k7VHR tmWcZYAtzPlDJ4EeZL0vMB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo V08xOE5pMWJvVlF6NS0wdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhtjDD4vxzwr6gIgDNnJdvFHnIhOpZTgxZ1+H7fIQZdcIfR4TifbsU Nkw6kKUI6I26/V54hyjNzZ3LCLSF3f1H6nKI6GzqQccfGkYe6rW6nTchJAzWEEV6 muS0PJuAVqbPe+Ffjtqr1kpBMABN/rMc3Q3J88510tbeRWw78ONA5xAzCNOm7jx2 D7LF5D/THP/UoSD5Pp5N/hur5nKW8lgkvGlEgiSRApeK7L6GYyyJXfqVC+oz5sZN RzTOSJiI3tneNpchO0y3l1ajJhnRcq4GJ/lg3ozQ6Pu6kzTGURjgqXfe+Jm0NIO5 fXMjHzhk8YOLwMZ0KyUk9tvVp8mvpI+g -----END CERTIFICATE-----Generated at Mon Oct 20 17:04:48 2025 by rpki-client