$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: uCWarmqpkZlt8veLuAKFnyKx6loJ4ArJg8zmQIGldqs= Subject key identifier: 01:6B:08:63:8E:8A:FE:44:3C:72:2A:6A:CB:DE:89:63:82:44:2C:A2 Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 1399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 1340 Signing time: Sat 18 Oct 2025 17:33:18 +0000 Manifest this update: Sat 18 Oct 2025 17:33:17 +0000 Manifest next update: Sat 25 Oct 2025 17:33:17 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: onXINhtIK/vKTRnkzfWZn6j4jckuW1RTK55+/UsYhJ8=) 2: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: nyv08QSRNJhv3RvW17AH6qbhQ4D5Q9YXzn9YfgnDQT8=) 3: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 4: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) 5: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5017 (0x1399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Oct 18 17:33:17 2025 GMT Not After : Oct 25 17:33:17 2025 GMT Subject: CN=68f3cf5e-0ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:11:3b:41:a7:fe:cf:7c:9b:2a:dc:8b:46: a2:df:bc:49:d5:22:41:3d:7a:27:9f:20:6c:47:5a: 34:2e:cc:ff:27:ea:b1:f4:d4:c6:31:05:a0:5b:04: ca:73:49:07:34:59:b7:ed:ed:5e:cc:ac:b1:a7:e0: 4f:a3:c4:db:40:a6:05:48:57:9b:48:0f:f2:fa:4f: e3:78:26:ab:3a:1f:36:cf:63:9c:ee:50:ef:c3:ae: 96:9d:b8:16:4e:8a:3a:a4:9b:55:dd:7e:d9:6a:5f: 1f:e8:d3:65:77:2d:92:cd:9e:8f:67:eb:17:a8:c0: 98:8f:d9:c7:d1:54:f8:af:d6:05:42:b3:04:94:80: 5e:65:74:88:f0:68:02:b7:db:29:16:d8:44:4b:d0: 77:42:7a:02:8e:4e:06:b4:77:41:cc:9e:bc:24:0e: ae:14:b0:b7:67:06:95:19:64:70:a0:91:af:fe:2a: 4f:a3:70:c4:50:19:a7:cb:31:95:da:d9:21:19:00: 28:eb:3f:ae:df:31:d1:06:54:71:00:98:71:c5:aa: f6:39:b2:cb:29:69:9e:2d:90:c1:e2:df:1d:f0:ba: a7:7c:bb:6b:05:59:d6:55:a0:84:30:40:26:2d:d9: 1b:c6:79:bc:01:a4:01:4a:8a:e4:16:3b:29:6c:de: 3b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6B:08:63:8E:8A:FE:44:3C:72:2A:6A:CB:DE:89:63:82:44:2C:A2 X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2d:11:ef:1c:85:54:48:33:18:34:30:47:ed:e1:dd:65:1f: f7:5c:ef:45:31:0c:58:b0:68:2d:45:6b:1b:07:f3:30:a8:9a: c5:ae:e8:8a:62:0b:9e:10:0b:94:d2:91:ad:4c:4b:1d:fe:d2: 4b:e6:87:d7:75:7a:a4:0a:ed:ac:44:32:08:cd:fd:74:ca:21: a9:66:db:86:63:14:91:f4:8b:a5:02:cb:8f:22:e4:aa:5f:90: c5:71:1f:7b:be:f2:7e:79:2d:a0:0f:ba:61:79:85:63:b4:08: 76:a4:5e:55:2d:b6:5d:66:0f:38:be:af:4a:6e:45:3e:5c:94: a5:92:b6:47:b9:17:32:b4:78:f7:a5:78:44:07:6b:a9:e1:3f: 5f:d5:37:fe:77:7b:95:36:84:e6:d5:a4:0b:2e:1a:a6:ce:fc: c6:d0:5f:17:ee:0f:a4:3d:2c:09:af:01:f4:61:bb:6e:23:32: 6c:51:be:5e:d2:7b:25:b8:86:ce:2d:a8:0e:39:20:2e:77:a9: ed:8e:8e:76:7b:a7:6a:44:35:8f:da:72:94:17:49:18:d5:c8: 22:43:cc:29:82:68:b4:9e:2a:df:d7:af:75:05:7c:d6:e5:1f: c3:91:01:fa:5b:88:49:1a:4b:78:40:54:80:78:2e:fa:e3:ed: fd:54:9b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUxMDE4MTczMzE3WhcNMjUxMDI1MTczMzE3WjAYMRYwFAYD VQQDEw02OGYzY2Y1ZS0wYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s4RO0Gn/s98myrci0ai37xJ1SJBPXonnyBsR1o0Lsz/J+qx9NTGMQWgWwTK c0kHNFm37e1ezKyxp+BPo8TbQKYFSFebSA/y+k/jeCarOh82z2Oc7lDvw66WnbgW Too6pJtV3X7Zal8f6NNldy2SzZ6PZ+sXqMCYj9nH0VT4r9YFQrMElIBeZXSI8GgC t9spFthES9B3QnoCjk4GtHdBzJ68JA6uFLC3ZwaVGWRwoJGv/ipPo3DEUBmnyzGV 2tkhGQAo6z+u3zHRBlRxAJhxxar2ObLLKWmeLZDB4t8d8LqnfLtrBVnWVaCEMEAm Ldkbxnm8AaQBSorkFjspbN474wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFrCGOO iv5EPHIqasveiWOCRCyiMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJLRHvHIVUSDMYNDBH7eHdZR/3XO9FMQxYsGgtRWsbB/MwqJrFruiK YgueEAuU0pGtTEsd/tJL5ofXdXqkCu2sRDIIzf10yiGpZtuGYxSR9IulAsuPIuSq X5DFcR97vvJ+eS2gD7pheYVjtAh2pF5VLbZdZg84vq9KbkU+XJSlkrZHuRcytHj3 pXhEB2up4T9f1Tf+d3uVNoTm1aQLLhqmzvzG0F8X7g+kPSwJrwH0YbtuIzJsUb5e 0nsluIbOLagOOSAud6ntjo52e6dqRDWP2nKUF0kY1cgiQ8wpgmi0nirf1691BXzW 5R/DkQH6W4hJGkt4QFSAeC764+39VJuI -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:22 2025 by rpki-client