$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: AkaVQtMbz+7lcqjvhH0gonorLsbI1RzH5yQWqsx2ydU= Subject key identifier: BD:67:8D:7E:A6:A6:AA:9F:CA:95:00:C2:08:16:B8:1A:E5:49:D4:F2 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 01B4 Signing time: Mon 03 Nov 2025 03:06:04 +0000 Manifest this update: Mon 03 Nov 2025 03:06:03 +0000 Manifest next update: Mon 10 Nov 2025 03:06:03 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: VzrDqnMKjUNB7qfSyQndFFDV9+DcX6fnpdaH8wfzPB8=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: w2G6mnACs8k8ArQ9Khbqaqk7miaXJQo8wHP+q2xbHko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Nov 3 03:06:03 2025 GMT Not After : Nov 10 03:06:03 2025 GMT Subject: CN=69081c1b-618d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:85:98:05:fb:0f:d3:dc:b6:15:07:65:4f:62: 56:89:37:b2:d5:ca:38:ac:4b:55:16:d9:09:f6:19: 7b:47:77:fd:a7:aa:f1:a3:c4:8b:a2:a9:1a:d7:6a: 6f:8c:ba:f2:e6:a3:8c:ea:68:f9:88:58:f0:2c:04: 58:98:f4:df:c1:6c:cd:be:12:91:4b:2f:6e:c8:2c: 6e:a0:43:4e:b7:52:32:4a:4d:33:fa:93:75:b1:00: 13:b0:50:50:13:b1:0c:e2:8a:50:ee:f2:a7:39:c5: 5f:47:f4:ba:4f:72:74:22:fb:9b:89:96:1c:fa:7c: 43:d3:c2:5e:97:15:45:9e:6e:84:b0:a2:5e:15:6c: 08:23:07:96:d0:42:fd:9a:83:21:cb:ac:70:a5:01: cc:ce:7c:62:61:b9:78:4c:32:1b:e6:ab:b6:6e:67: a4:ee:4c:c2:e6:f7:f5:93:06:24:ea:7a:b4:35:29: 41:61:c3:84:7a:3a:ac:5f:e4:50:21:1b:db:8f:90: ee:cd:b8:f7:81:89:e9:54:b9:b2:ff:29:65:fb:d3: 8c:a3:f1:e8:72:11:4b:60:49:f4:ce:bc:c2:6f:cf: 94:9a:04:53:cb:af:f1:1d:f3:1b:05:16:5f:57:58: 88:08:52:f1:71:c5:39:5b:a9:09:6a:7c:a0:51:50: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:8D:7E:A6:A6:AA:9F:CA:95:00:C2:08:16:B8:1A:E5:49:D4:F2 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7b:85:07:eb:7a:42:3c:4f:30:c4:27:30:ef:b6:da:ed:65: a6:16:a7:73:b2:97:c0:5e:a3:fc:f6:2d:c5:1e:27:88:0a:ad: 6c:08:28:eb:b5:ae:82:cb:72:bd:9c:ea:6a:3b:ff:cf:fa:ae: 53:65:11:79:d8:d8:b2:97:69:ea:92:b2:ba:77:52:2d:f7:ae: 7b:e6:d3:64:e4:05:27:7e:59:30:8b:54:68:1b:9c:07:09:08: 76:08:74:3e:c1:c0:f7:bc:2f:3d:69:83:79:7a:8d:10:9a:5f: 75:93:07:e0:93:15:be:d5:57:3c:c1:12:6a:3d:71:1b:de:68: b8:83:3c:14:da:34:98:d4:0f:8f:a7:6c:73:b6:88:ad:a3:c5: 07:ba:20:a2:14:ea:84:f3:da:ab:5c:a6:7d:da:d6:52:a4:d0: ea:e7:f9:ad:9b:81:72:93:c9:e3:e8:42:10:d9:60:c4:b8:c9: 32:e8:9d:f7:9a:a4:32:53:53:7e:3e:6d:e9:f5:0d:b9:6f:5e: 2d:74:d0:a8:5c:25:07:95:c5:bd:d0:fc:4e:df:02:f2:35:42: 96:47:46:0c:96:b1:22:3f:3c:a7:39:ce:56:59:0b:30:99:1c: 8e:aa:aa:59:2e:cf:8b:4d:85:a9:da:ed:c4:97:32:fb:66:bc: c4:a6:84:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjUxMTAzMDMwNjAzWhcNMjUxMTEwMDMwNjAzWjAYMRYwFAYD VQQDEw02OTA4MWMxYi02MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oWYBfsP09y2FQdlT2JWiTey1co4rEtVFtkJ9hl7R3f9p6rxo8SLoqka12pv jLry5qOM6mj5iFjwLARYmPTfwWzNvhKRSy9uyCxuoENOt1IySk0z+pN1sQATsFBQ E7EM4opQ7vKnOcVfR/S6T3J0IvubiZYc+nxD08JelxVFnm6EsKJeFWwIIweW0EL9 moMhy6xwpQHMznxiYbl4TDIb5qu2bmek7kzC5vf1kwYk6nq0NSlBYcOEejqsX+RQ IRvbj5Duzbj3gYnpVLmy/yll+9OMo/HochFLYEn0zrzCb8+UmgRTy6/xHfMbBRZf V1iICFLxccU5W6kJanygUVCesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1njX6m pqqfypUAwggWuBrlSdTyMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCve4UH63pCPE8wxCcw77ba7WWmFqdzspfAXqP89i3FHieICq1sCCjr ta6Cy3K9nOpqO//P+q5TZRF52Niyl2nqkrK6d1It96575tNk5AUnflkwi1RoG5wH CQh2CHQ+wcD3vC89aYN5eo0Qml91kwfgkxW+1Vc8wRJqPXEb3mi4gzwU2jSY1A+P p2xztoito8UHuiCiFOqE89qrXKZ92tZSpNDq5/mtm4Fyk8nj6EIQ2WDEuMky6J33 mqQyU1N+Pm3p9Q25b14tdNCoXCUHlcW90PxO3wLyNUKWR0YMlrEiPzynOc5WWQsw mRyOqqpZLs+LTYWp2u3ElzL7ZrzEpoQM -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:18 2025 by rpki-client