$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json) Hash identifier: ltHVipHsUkVYEsvbXaWOdZYRCM+g89rYlEOuyLNlNaI= Subject key identifier: CA:85:88:9E:A6:A2:EA:B7:79:22:6A:06:0F:8D:14:33:6B:4F:53:1F Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft Manifest number: 01A4 Signing time: Wed 05 Nov 2025 03:23:40 +0000 Manifest this update: Wed 05 Nov 2025 03:23:40 +0000 Manifest next update: Wed 12 Nov 2025 03:23:40 +0000 Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: /Kb2glphM4QUKjEPgp+0dtjdfU3PhwTYF+3q8Mec78k=) 2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: 8zqEQWI1w6Acg0Y6GNe0A6jcmkOuB5o9vI1Cd2RhRsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Validity Not Before: Nov 5 03:23:40 2025 GMT Not After : Nov 12 03:23:40 2025 GMT Subject: CN=690ac33c-da10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:12:f9:09:66:9b:24:20:28:77:cb:d8:6a:0f: b3:e5:87:e4:05:2a:d4:fc:f0:53:09:f2:4c:91:88: d2:91:9f:7c:c0:3e:6e:27:2d:65:6b:07:76:b7:d3: e6:28:c5:da:85:6e:61:f8:63:7c:5f:52:85:23:69: 9a:2d:36:24:19:40:de:f5:e9:1f:52:86:1a:e4:fc: 9d:f3:8e:c1:03:bc:e4:e4:32:29:e8:1b:b1:a9:0f: 09:67:68:5a:32:6c:6d:0e:7e:bb:f4:9d:c6:7d:3c: 1a:47:21:e8:ae:9f:78:46:5d:85:aa:6f:5f:15:ad: 49:a7:04:69:1f:5b:f8:b3:a0:6a:bc:e6:b9:96:f2: 8d:11:55:fe:f6:b9:04:18:68:33:73:98:c3:c3:94: ec:4b:59:1b:77:13:2c:14:f4:95:c6:0f:8c:1d:21: 9e:46:4b:f7:bc:eb:8e:f6:23:0a:95:f9:ea:ef:b8: 9d:b1:5c:a2:2e:f1:e4:ae:73:25:67:c8:8b:20:b4: 9c:2e:a6:ff:27:f7:37:64:a5:19:2e:0b:af:5d:5e: 00:25:0d:06:fc:4c:e4:d7:23:c5:ae:4d:2e:8a:87: 35:42:25:41:a8:62:bd:c2:5b:7d:93:dc:e6:5b:30: bd:8e:a3:52:a4:7e:d7:3a:8e:9a:8f:fb:57:22:9d: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:88:9E:A6:A2:EA:B7:79:22:6A:06:0F:8D:14:33:6B:4F:53:1F X509v3 Authority Key Identifier: keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e8:b4:50:87:e0:0f:bd:f0:2d:e5:82:4f:f8:91:38:53:e8: ac:22:ec:c7:e0:97:63:8c:cc:1a:fe:a3:b7:55:cd:cd:bc:06: 36:17:e8:64:d1:e7:cb:bb:6d:fb:10:44:9e:d1:2e:22:8c:70: 3c:de:3a:c8:ee:fb:10:36:05:52:7d:f3:fa:53:61:e8:4d:49: ca:5a:db:ae:04:c6:3a:f3:66:ea:bd:2e:e8:88:59:30:d0:31: 8a:ee:83:b5:d2:e3:03:ad:ec:a2:7f:e3:aa:2f:1a:1b:e5:c9: 6f:ab:95:7a:8f:fe:22:93:e9:d5:95:6b:03:cb:30:ff:69:1b: 56:e1:a9:3e:78:5a:63:58:e6:da:66:30:93:c6:dc:42:23:fb: c9:9c:92:7f:d5:6d:80:64:3d:ba:0c:d6:e2:ed:45:fe:37:0e: d3:3c:d0:1c:48:da:1b:97:b2:27:d6:4b:95:3e:f7:b7:5e:e3: 38:a5:da:63:78:27:61:8c:4f:a4:c6:cf:9f:6b:dd:8a:11:8d: 61:fb:26:4e:bc:54:fe:b2:3d:67:75:0b:3c:00:0d:0a:2f:af: 09:65:50:b5:ca:34:ec:29:03:e5:62:84:61:0e:67:68:56:08: 96:d2:45:94:4d:4c:80:be:9c:1f:84:06:b0:34:7d:6b:57:9c: 7f:2e:b0:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAxNUQxMTAvBgNVBAUTKDJDQjhDMUY5RUEwQzdCNUE4MDM2ODkzODg0MDBDQzZG RDhCMDQ5RDIwHhcNMjUxMTA1MDMyMzQwWhcNMjUxMTEyMDMyMzQwWjAYMRYwFAYD VQQDEw02OTBhYzMzYy1kYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xL5CWabJCAod8vYag+z5YfkBSrU/PBTCfJMkYjSkZ98wD5uJy1lawd2t9Pm KMXahW5h+GN8X1KFI2maLTYkGUDe9ekfUoYa5Pyd847BA7zk5DIp6BuxqQ8JZ2ha MmxtDn679J3GfTwaRyHorp94Rl2Fqm9fFa1JpwRpH1v4s6BqvOa5lvKNEVX+9rkE GGgzc5jDw5TsS1kbdxMsFPSVxg+MHSGeRkv3vOuO9iMKlfnq77idsVyiLvHkrnMl Z8iLILScLqb/J/c3ZKUZLguvXV4AJQ0G/Ezk1yPFrk0uioc1QiVBqGK9wlt9k9zm WzC9jqNSpH7XOo6aj/tXIp3g4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqFiJ6m ouq3eSJqBg+NFDNrT1MfMB8GA1UdIwQYMBaAFCy4wfnqDHtagDaJOIQAzG/YsEnS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE1RC80MTRBRUQ2QTM0 RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUxcUFOb2s0aEFETWI5aXdT ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xMakItZW9NZTFxQU5vazRoQURNYjlpd1NkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDE1RC80MTRBRUQ2QTM0RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUx cUFOb2s0aEFETWI5aXdTZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb6LRQh+APvfAt5YJP+JE4U+isIuzH4JdjjMwa/qO3Vc3NvAY2F+hk 0efLu237EESe0S4ijHA83jrI7vsQNgVSffP6U2HoTUnKWtuuBMY682bqvS7oiFkw 0DGK7oO10uMDreyif+OqLxob5clvq5V6j/4ik+nVlWsDyzD/aRtW4ak+eFpjWOba ZjCTxtxCI/vJnJJ/1W2AZD26DNbi7UX+Nw7TPNAcSNobl7In1kuVPve3XuM4pdpj eCdhjE+kxs+fa92KEY1h+yZOvFT+sj1ndQs8AA0KL68JZVC1yjTsKQPlYoRhDmdo VgiW0kWUTUyAvpwfhAawNH1rV5x/LrA3 -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:51 2025 by rpki-client