$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: MIgXcdS2tIz99LmQMGU1dssNVrL3R1iF11daIUieoic= Subject key identifier: 80:1C:37:C6:57:48:0C:72:B8:82:CC:16:67:80:A3:DE:96:92:AA:C5 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 010E Signing time: Sun 19 Oct 2025 07:51:42 +0000 Manifest this update: Sun 19 Oct 2025 07:51:42 +0000 Manifest next update: Sun 26 Oct 2025 07:51:41 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: znaXmC1lqt1JvW+LHJP3JXq8NwrwY9mBSJa7ewJglT0=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: eq/kGWgomEiw4pMKrPya4BqnBXJsYemvIJbRjqP6JSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Oct 19 07:51:42 2025 GMT Not After : Oct 26 07:51:41 2025 GMT Subject: CN=68f4988e-9c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:b0:b1:b7:24:ed:74:c0:85:df:21:31:4a: 39:cf:2a:97:23:0e:58:8a:12:26:3b:fa:19:6f:99: 04:ac:e1:1d:1b:f8:9c:59:cf:bd:12:39:87:4a:91: 45:ab:bf:0d:14:2f:49:e2:62:bb:63:43:a9:6a:c3: fb:dd:c9:bd:08:d5:d4:60:84:00:d4:f4:32:80:4d: 69:80:28:ab:10:74:e7:f5:0e:39:d4:06:6c:d6:92: 0c:89:52:36:86:57:59:48:aa:de:bd:d4:48:a0:da: 7f:ca:05:83:12:b9:ee:52:fe:0e:83:5a:4a:1e:7d: b5:8d:3a:3f:7c:f8:eb:4d:b0:0c:95:b2:a6:0f:56: c7:9a:6d:e9:81:b7:de:70:ce:5d:fb:86:f9:20:58: 86:04:16:26:e9:ee:0c:52:2f:ee:1f:2d:e3:c0:77: 2f:47:78:cf:af:36:38:0f:ad:0b:7c:e6:e5:55:cc: 76:37:6a:dd:77:f8:7f:43:08:01:f6:0e:04:39:68: da:38:f3:0f:66:85:48:fb:5a:24:e5:c0:9c:54:c2: 94:8c:45:18:88:bc:0b:b6:05:63:3e:f4:6c:cf:db: a2:af:cc:70:6c:5c:d9:dd:22:a3:bb:5b:83:6f:5a: e7:ae:41:56:cb:ca:f6:48:bd:ae:6d:ce:44:c4:ab: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:37:C6:57:48:0C:72:B8:82:CC:16:67:80:A3:DE:96:92:AA:C5 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ab:24:41:f1:89:59:2c:86:01:0a:2f:ed:fa:38:18:01:88: 6a:3d:1a:30:35:59:eb:d1:ae:03:71:3e:e2:cf:aa:2d:e3:d4: 91:d3:e5:46:94:33:fa:d3:3d:ca:e6:a0:8f:47:32:33:d5:62: 82:a0:95:a1:ef:32:56:51:c6:26:7b:7e:ef:a3:a4:0b:d8:70: 7c:5d:49:5b:7f:fe:4d:fa:ca:9f:70:33:97:a3:b8:0d:35:4b: 0b:73:aa:98:fa:57:35:bc:1a:27:cd:43:7a:cc:f2:6e:b1:8b: a5:b2:c9:5a:26:cb:7a:1c:26:fb:74:49:18:a9:a3:0f:0b:ce: 53:a8:42:78:18:55:41:cb:6f:1f:4d:e9:52:69:a1:16:72:cb: 0e:12:82:aa:ff:6b:d8:aa:1b:70:a0:e2:ab:d8:9a:8c:4a:0e: de:78:34:cd:fb:15:a3:50:c8:27:56:ed:df:70:79:3e:6c:fc: 24:02:5b:a5:1b:ee:b7:e1:2b:37:23:74:10:40:58:23:78:37: 58:5a:ed:eb:b5:b9:d8:cd:83:31:d9:70:1a:14:54:6a:ea:6f: d6:2c:f2:8b:91:b2:36:3b:7e:9e:bd:4e:2d:4b:95:6f:3e:fb: 38:7c:b1:1b:32:44:95:be:5f:79:f2:b2:59:37:e8:e5:b6:2e: ac:60:4e:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUxMDE5MDc1MTQyWhcNMjUxMDI2MDc1MTQxWjAYMRYwFAYD VQQDEw02OGY0OTg4ZS05YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdawsbck7XTAhd8hMUo5zyqXIw5YihImO/oZb5kErOEdG/icWc+9EjmHSpFF q78NFC9J4mK7Y0OpasP73cm9CNXUYIQA1PQygE1pgCirEHTn9Q451AZs1pIMiVI2 hldZSKrevdRIoNp/ygWDErnuUv4Og1pKHn21jTo/fPjrTbAMlbKmD1bHmm3pgbfe cM5d+4b5IFiGBBYm6e4MUi/uHy3jwHcvR3jPrzY4D60LfOblVcx2N2rdd/h/QwgB 9g4EOWjaOPMPZoVI+1ok5cCcVMKUjEUYiLwLtgVjPvRsz9uir8xwbFzZ3SKju1uD b1rnrkFWy8r2SL2ubc5ExKtL8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAcN8ZX SAxyuILMFmeAo96WkqrFMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbqyRB8YlZLIYBCi/t+jgYAYhqPRowNVnr0a4DcT7iz6ot49SR0+VG lDP60z3K5qCPRzIz1WKCoJWh7zJWUcYme37vo6QL2HB8XUlbf/5N+sqfcDOXo7gN NUsLc6qY+lc1vBonzUN6zPJusYulsslaJst6HCb7dEkYqaMPC85TqEJ4GFVBy28f TelSaaEWcssOEoKq/2vYqhtwoOKr2JqMSg7eeDTN+xWjUMgnVu3fcHk+bPwkAlul G+634Ss3I3QQQFgjeDdYWu3rtbnYzYMx2XAaFFRq6m/WLPKLkbI2O36evU4tS5Vv Pvs4fLEbMkSVvl958rJZN+jlti6sYE5/ -----END CERTIFICATE-----Generated at Mon Oct 20 01:50:05 2025 by rpki-client