$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: a4SrRbw5MxOOxl+g0NQnJbOFxFx1Wl+FJOZOe3UgqBg= Subject key identifier: 46:65:17:D6:B3:BF:1D:37:BE:D0:C7:BA:5C:9F:66:A2:BA:36:27:3D Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 355E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34FE Signing time: Sat 18 Oct 2025 14:26:27 +0000 Manifest this update: Sat 18 Oct 2025 14:26:26 +0000 Manifest next update: Sat 25 Oct 2025 14:26:26 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: UPqBMhhsoNyHqIuoMhS4lMTJS+xJGt/BUvvT7qG6GbU=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13662 (0x355e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Oct 18 14:26:26 2025 GMT Not After : Oct 25 14:26:26 2025 GMT Subject: CN=68f3a392-f0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:da:ad:cb:0a:c3:ca:15:d3:ba:f9:4b:ea:68: db:e1:f6:0c:32:ef:8d:98:9c:98:6f:98:92:4f:7b: dc:3c:1c:29:54:6e:d7:6d:72:37:1f:85:be:19:ef: 58:a9:6e:bb:77:6d:e0:3b:57:28:11:61:ae:be:0c: 4c:d9:c6:db:c9:1c:75:ed:74:62:2c:2d:e4:8c:be: 6d:71:c0:33:65:57:8c:de:3c:c5:5a:b3:6b:a7:1d: 09:3f:3c:ae:aa:87:65:61:65:a8:3c:e4:45:c8:ea: 5d:3e:d8:9b:46:be:83:10:f2:15:17:b6:0b:c7:48: 42:35:ab:f8:bb:cf:61:41:15:13:c5:59:b4:99:49: 9e:35:44:cc:89:79:4d:9d:64:e0:5d:33:76:b3:8a: 21:16:c8:f0:68:d3:41:7d:ca:0a:13:ad:46:d5:9c: 4d:08:f0:f7:b9:e4:c2:9a:9d:93:4b:2b:7e:b1:3f: ae:af:b6:e7:2b:71:55:a7:c7:ef:78:03:f6:44:e8: 14:4b:16:02:5a:b6:4c:f9:72:44:16:b3:27:3c:87: e5:df:85:42:73:b8:95:4f:92:45:32:fb:e6:7c:00: ad:e5:59:18:4d:ec:8c:dd:cf:17:e0:23:9b:93:fd: 10:02:b2:62:6e:c8:4b:20:79:31:f0:b6:1c:a9:09: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:65:17:D6:B3:BF:1D:37:BE:D0:C7:BA:5C:9F:66:A2:BA:36:27:3D X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4d:23:a8:d8:23:a7:2a:78:1f:a0:af:32:a3:0c:92:aa:52: a0:97:38:b9:e8:1c:a5:db:d7:37:41:2d:2a:a7:78:80:ec:10: 7d:a0:87:58:d4:0f:bb:3e:f1:b1:b9:58:e6:35:e0:01:1f:32: a8:96:79:e9:c4:19:10:32:a2:37:c4:24:be:50:57:88:f1:52: 52:7f:86:6e:ab:ae:e3:4e:fe:72:bf:a3:90:3f:97:fd:94:ce: 19:e6:6a:db:27:41:41:d2:05:71:cc:6a:04:2e:f2:c9:3f:7c: 9b:40:02:17:0f:41:5f:d4:0b:50:dc:f1:a0:7e:a1:fc:22:f3: 3c:a4:4d:4c:87:4c:7b:69:cf:ec:4f:c5:83:87:fa:cb:b3:a7: c2:3e:20:ec:e0:e1:2b:1d:6e:d7:c5:93:05:67:c0:66:17:48: 30:11:90:ef:74:da:f7:fb:96:fa:9d:0b:94:28:b6:de:f4:9a: 2e:22:16:83:75:67:6e:ce:81:bf:5e:e9:57:a1:8f:f4:fb:d8: 7b:fb:7a:1f:7e:b7:9c:6d:77:fd:41:a5:3b:d4:5b:0e:02:53: 79:67:2c:fd:f9:00:0e:52:2b:12:80:89:89:32:a3:a9:65:67: 9f:ac:04:e6:3c:66:06:cf:22:93:d8:c3:93:71:ca:4c:f2:a1: b8:ab:e0:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUxMDE4MTQyNjI2WhcNMjUxMDI1MTQyNjI2WjAYMRYwFAYD VQQDEw02OGYzYTM5Mi1mMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tqtywrDyhXTuvlL6mjb4fYMMu+NmJyYb5iST3vcPBwpVG7XbXI3H4W+Ge9Y qW67d23gO1coEWGuvgxM2cbbyRx17XRiLC3kjL5tccAzZVeM3jzFWrNrpx0JPzyu qodlYWWoPORFyOpdPtibRr6DEPIVF7YLx0hCNav4u89hQRUTxVm0mUmeNUTMiXlN nWTgXTN2s4ohFsjwaNNBfcoKE61G1ZxNCPD3ueTCmp2TSyt+sT+ur7bnK3FVp8fv eAP2ROgUSxYCWrZM+XJEFrMnPIfl34VCc7iVT5JFMvvmfACt5VkYTeyM3c8X4COb k/0QArJibshLIHkx8LYcqQkUSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZlF9az vx03vtDHulyfZqK6Nic9MB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTSOo2COnKngfoK8yowySqlKglzi56Byl29c3QS0qp3iA7BB9oIdY 1A+7PvGxuVjmNeABHzKolnnpxBkQMqI3xCS+UFeI8VJSf4Zuq67jTv5yv6OQP5f9 lM4Z5mrbJ0FB0gVxzGoELvLJP3ybQAIXD0Ff1AtQ3PGgfqH8IvM8pE1Mh0x7ac/s T8WDh/rLs6fCPiDs4OErHW7XxZMFZ8BmF0gwEZDvdNr3+5b6nQuUKLbe9JouIhaD dWduzoG/XulXoY/0+9h7+3offrecbXf9QaU71FsOAlN5Zyz9+QAOUisSgImJMqOp ZWefrATmPGYGzyKT2MOTccpM8qG4q+BO -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:56 2025 by rpki-client