$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: LJPkW81DMF9Kf1wMfvCObFkhxjRp/IVqInN/mmMJXxk= Subject key identifier: 13:22:F9:25:34:BE:DC:1F:D7:A9:E2:03:3F:27:C2:FF:39:D0:F2:B8 Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 0155 Signing time: Sun 19 Oct 2025 06:55:10 +0000 Manifest this update: Sun 19 Oct 2025 06:55:09 +0000 Manifest next update: Sun 26 Oct 2025 06:55:09 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: nGuCfwqU1mQ67XJiMk8A6YGlKwVPD9AtSZxhBoyIgNQ=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: EH9Ecs3l16GCiHR30STE9VxjfuPqLau85IhtMpZldhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Oct 19 06:55:09 2025 GMT Not After : Oct 26 06:55:09 2025 GMT Subject: CN=68f48b4e-805e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:a6:a1:09:50:3a:11:98:1a:04:e7:12:c1: 80:8a:9c:7d:89:0e:ef:8a:41:3b:ba:26:55:5e:37: c5:91:f6:bc:ec:bb:ad:91:1e:66:f1:69:70:72:0f: 28:e2:92:30:2f:6d:50:67:8e:27:4f:94:10:2a:bc: fe:df:c5:e2:56:fb:b5:3d:3f:78:3a:5b:ad:0c:3a: 48:6f:2c:b9:3e:57:e9:ce:2f:b5:44:6a:2b:94:cb: 7f:55:01:2f:78:c7:c2:e0:cb:91:a7:ea:e3:42:cb: be:b0:9b:72:a8:00:a6:26:46:33:44:6e:0e:14:6a: ae:3a:a9:10:69:69:7a:a4:41:15:7d:b0:43:33:e9: d2:1d:bc:05:5f:3d:ea:7c:27:c4:a9:8b:43:6a:f4: 5f:f7:6b:84:02:15:01:f0:c6:e6:e6:97:08:d4:81: 70:19:12:a6:99:98:d7:39:46:11:a6:c0:bb:94:ed: 9d:fa:59:a0:48:26:d3:3a:14:5c:bd:b4:f3:49:72: 3a:6e:32:53:17:ba:23:4b:e1:f6:d5:ad:f5:41:ad: 8b:28:11:d0:d2:5d:97:33:ba:08:a4:96:6b:00:02: 7e:53:cd:88:e6:9f:9f:71:64:fb:e9:85:1d:bd:52: 64:e5:c7:30:93:ef:45:3d:36:fa:f3:b0:af:b2:49: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:F9:25:34:BE:DC:1F:D7:A9:E2:03:3F:27:C2:FF:39:D0:F2:B8 X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:21:5e:ff:d7:b2:9a:e3:80:69:c4:83:d9:ee:24:9b:b0:4c: ff:0a:13:5f:ce:ae:2a:f0:52:fd:49:05:d1:36:f3:aa:bf:27: ab:98:3f:0f:5b:56:f4:f8:74:ca:e7:75:3f:d6:32:26:94:13: 78:46:6c:1e:85:80:66:8a:8f:b9:78:58:bd:88:17:45:0f:9d: ad:c5:9e:c7:41:81:10:1c:c4:40:41:2d:1c:b4:f9:5e:c4:26: 75:68:52:1d:f6:f4:e5:f1:2d:bb:a8:59:0e:3c:89:ac:fe:c7: de:8f:74:22:14:73:da:5c:96:a3:66:52:df:a3:2d:17:4e:23: fc:15:59:d4:87:ad:4d:82:cb:bc:71:bc:b0:e7:9c:45:04:61: 2c:59:df:82:dc:40:74:e7:7c:96:eb:2f:4c:6f:95:19:94:8f: a9:49:16:c2:0d:17:49:c2:b4:a0:45:f9:39:0f:34:e8:8c:a8: ff:eb:af:35:89:b7:73:7a:c0:38:24:7b:49:f2:80:79:61:67: cc:08:d8:89:5d:c4:d8:1c:78:67:77:8f:ea:56:19:dd:61:8a: 69:fd:4b:8f:92:c1:25:3a:6d:8a:1e:a0:5c:10:4d:8d:3e:99: c3:2e:41:dd:42:38:ab:8f:c9:6c:1f:44:03:64:a1:4c:a7:4f: 42:20:f2:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjUxMDE5MDY1NTA5WhcNMjUxMDI2MDY1NTA5WjAYMRYwFAYD VQQDEw02OGY0OGI0ZS04MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IamoQlQOhGYGgTnEsGAipx9iQ7vikE7uiZVXjfFkfa87LutkR5m8Wlwcg8o 4pIwL21QZ44nT5QQKrz+38XiVvu1PT94OlutDDpIbyy5Plfpzi+1RGorlMt/VQEv eMfC4MuRp+rjQsu+sJtyqACmJkYzRG4OFGquOqkQaWl6pEEVfbBDM+nSHbwFXz3q fCfEqYtDavRf92uEAhUB8Mbm5pcI1IFwGRKmmZjXOUYRpsC7lO2d+lmgSCbTOhRc vbTzSXI6bjJTF7ojS+H21a31Qa2LKBHQ0l2XM7oIpJZrAAJ+U82I5p+fcWT76YUd vVJk5ccwk+9FPTb687CvsknqmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMi+SU0 vtwf16niAz8nwv850PK4MB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/IV7/17Ka44BpxIPZ7iSbsEz/ChNfzq4q8FL9SQXRNvOqvyermD8P W1b0+HTK53U/1jImlBN4RmwehYBmio+5eFi9iBdFD52txZ7HQYEQHMRAQS0ctPle xCZ1aFId9vTl8S27qFkOPIms/sfej3QiFHPaXJajZlLfoy0XTiP8FVnUh61Ngsu8 cbyw55xFBGEsWd+C3EB053yW6y9Mb5UZlI+pSRbCDRdJwrSgRfk5DzTojKj/6681 ibdzesA4JHtJ8oB5YWfMCNiJXcTYHHhnd4/qVhndYYpp/UuPksElOm2KHqBcEE2N PpnDLkHdQjirj8lsH0QDZKFMp09CIPIB -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:12 2025 by rpki-client