$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: JcUUBtkHCkrtm6jqYzCU7OFicWpa5AwIKu61DLxrLH4= Subject key identifier: 69:E7:1B:D5:F4:87:3A:45:EB:4C:98:3E:12:22:5B:1C:E5:13:2B:3E Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 0159 Signing time: Sun 19 Oct 2025 06:51:30 +0000 Manifest this update: Sun 19 Oct 2025 06:51:29 +0000 Manifest next update: Sun 26 Oct 2025 06:51:29 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: Sgz4jIh59kvn/vq1vZyNXYcb+x/u3IEKLO8nVl7mFJc=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: 3yiW508L3oftd11FyXYrUNBNgcv/84LhY7x8tmbtRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: Oct 19 06:51:29 2025 GMT Not After : Oct 26 06:51:29 2025 GMT Subject: CN=68f48a71-365c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:7a:52:ac:67:09:e4:bc:fe:25:a8:ee:8a: 0c:73:38:8e:e8:12:45:74:92:92:12:dc:88:f7:a3: d4:da:90:64:ad:d9:0b:2a:da:a4:e3:cc:f0:81:b9: 59:16:89:3c:92:5b:7b:07:a2:0f:2c:09:1d:04:81: 23:11:13:e1:4f:a0:c5:5b:66:0a:2f:8b:3a:d7:ad: 0c:df:e2:e2:25:b4:97:87:3c:6a:8d:c1:5f:6f:03: 2e:f2:a4:0a:22:21:61:18:13:c2:21:3d:23:54:08: 40:75:4b:63:b4:b2:ea:50:62:07:6d:cd:9c:a1:64: 77:df:0c:a3:a3:64:5c:af:91:71:3b:e5:d6:ff:82: 1f:02:96:99:c8:fc:a2:fe:dd:f0:48:23:71:be:6e: bf:1a:c2:17:af:4f:4c:ad:c6:b1:67:6e:61:d3:3b: ba:73:da:92:d8:13:d6:9d:0d:17:08:a4:ee:47:22: 0e:3a:2a:73:0c:39:23:e3:c4:01:41:43:b8:87:10: aa:4b:0e:d2:e7:06:86:b6:25:4f:ba:f6:4c:d2:8a: f8:4b:4a:62:1e:61:7b:e1:ae:fd:6e:d2:4a:db:ff: 74:34:63:3a:c2:39:91:d8:2e:f0:88:59:81:12:57: ec:9f:79:1e:64:c2:2b:0c:66:51:9e:00:48:fb:e8: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:1B:D5:F4:87:3A:45:EB:4C:98:3E:12:22:5B:1C:E5:13:2B:3E X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b3:49:ac:b8:fe:2e:45:0a:9d:84:b5:46:a4:0d:b4:c1:26: 0c:b4:ea:d5:c1:ab:64:73:1f:ec:e8:b5:89:a5:e1:64:e6:e8: 2b:9e:ed:4c:5c:5f:7c:d4:8c:df:0e:67:17:3c:85:31:16:e7: ba:22:85:91:1d:ef:47:01:00:cc:3b:0f:9d:59:31:f9:17:45: 54:1d:3d:bb:22:b4:36:c6:1f:ab:71:c0:ba:a3:8d:db:1b:33: 16:32:39:82:d5:3a:db:41:02:ff:41:08:99:23:d2:0e:72:ba: 51:ea:97:bf:e6:5f:0b:8c:39:86:42:68:0a:d1:c9:c3:dc:cf: 57:35:70:91:cd:f6:19:3c:7a:40:06:04:43:13:85:26:e5:45: 6f:63:89:06:5c:cf:ee:39:b1:0c:da:46:f3:2f:28:22:50:09: b8:8c:32:ec:64:1b:ba:50:96:03:bb:a8:69:d1:22:d9:80:1c: de:b0:7a:a0:25:91:a4:f0:aa:f4:2f:80:eb:a2:f5:6d:d4:41: 44:61:f6:fd:45:db:49:05:49:b5:10:36:d2:24:8b:39:53:6f: 42:06:2f:ee:01:7e:97:b5:c6:7e:e0:55:86:49:3a:c6:bf:2a: e7:a6:41:65:e7:6a:b0:91:3d:b4:1f:c3:d4:81:be:4d:79:d0: 15:d9:84:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUxMDE5MDY1MTI5WhcNMjUxMDI2MDY1MTI5WjAYMRYwFAYD VQQDEw02OGY0OGE3MS0zNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyR6UqxnCeS8/iWo7ooMcziO6BJFdJKSEtyI96PU2pBkrdkLKtqk48zwgblZ Fok8klt7B6IPLAkdBIEjERPhT6DFW2YKL4s6160M3+LiJbSXhzxqjcFfbwMu8qQK IiFhGBPCIT0jVAhAdUtjtLLqUGIHbc2coWR33wyjo2Rcr5FxO+XW/4IfApaZyPyi /t3wSCNxvm6/GsIXr09MrcaxZ25h0zu6c9qS2BPWnQ0XCKTuRyIOOipzDDkj48QB QUO4hxCqSw7S5waGtiVPuvZM0or4S0piHmF74a79btJK2/90NGM6wjmR2C7wiFmB Elfsn3keZMIrDGZRngBI++iimwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnnG9X0 hzpF60yYPhIiWxzlEys+MB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKs0msuP4uRQqdhLVGpA20wSYMtOrVwatkcx/s6LWJpeFk5ugrnu1M XF981IzfDmcXPIUxFue6IoWRHe9HAQDMOw+dWTH5F0VUHT27IrQ2xh+rccC6o43b GzMWMjmC1TrbQQL/QQiZI9IOcrpR6pe/5l8LjDmGQmgK0cnD3M9XNXCRzfYZPHpA BgRDE4Um5UVvY4kGXM/uObEM2kbzLygiUAm4jDLsZBu6UJYDu6hp0SLZgBzesHqg JZGk8Kr0L4DrovVt1EFEYfb9RdtJBUm1EDbSJIs5U29CBi/uAX6XtcZ+4FWGSTrG vyrnpkFl52qwkT20H8PUgb5NedAV2YSa -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:13 2025 by rpki-client