$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json) Hash identifier: NYxvZ1Gpq3JFHOX0OzveatuOgq8cVWNbumqzZeTw7Eo= Subject key identifier: 99:DF:0D:3B:B8:55:2E:94:AE:5E:CD:CC:B7:02:2E:EA:C9:71:54:E6 Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft Manifest number: 068A Signing time: Tue 04 Nov 2025 22:30:27 +0000 Manifest this update: Tue 04 Nov 2025 22:30:26 +0000 Manifest next update: Tue 11 Nov 2025 22:30:26 +0000 Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: aH9an4LmEcgwFk1EmN86+sq53GJY9uSdyVlDbtZTjQg=) 2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: av33nLUX0GDrb2SC++ABulsmTvMJTYGoXhRNYXEv87I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Validity Not Before: Nov 4 22:30:26 2025 GMT Not After : Nov 11 22:30:26 2025 GMT Subject: CN=690a7e82-35bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:7a:a6:3d:7b:6c:9f:ad:ba:04:38:2e:1b: 8a:be:ce:cc:14:cf:af:50:be:be:95:2c:5d:a3:b7: c2:d0:93:72:7c:38:c0:bc:1e:94:30:dd:e0:47:0e: 90:42:b7:16:d6:fa:02:2a:7b:a6:2f:5b:bf:92:7e: 8b:73:99:1e:ee:92:bc:8a:47:84:ee:16:8e:56:6f: 2c:35:8c:f2:85:13:99:2d:cc:ba:c3:de:28:70:9d: 5c:37:99:7c:7f:0d:c1:50:98:64:75:e3:46:65:ce: 89:65:14:86:48:5e:a1:37:f4:87:12:39:89:42:f5: a4:08:f0:1c:22:59:6e:18:f4:68:1a:52:05:d2:11: ba:f4:ed:70:35:d4:d8:0b:d5:1d:da:1f:26:bb:df: 26:ed:ea:e9:a1:99:f9:ae:4f:71:87:88:af:6c:26: 45:2b:1d:5d:d7:26:71:07:60:2a:fa:2f:c8:30:c1: 99:d5:4a:70:f3:4d:d7:e5:6c:ba:cd:09:04:07:5b: ca:8e:19:2b:2b:c8:f2:9c:c2:62:ea:b1:12:fa:ca: 11:ac:42:e7:23:9e:3f:0e:57:34:d4:b9:88:cf:60: 92:f3:e4:b0:7a:62:dd:8b:86:ca:0d:03:62:ea:33: 0e:99:51:7f:22:d4:ab:6a:88:32:5b:c1:78:50:ae: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DF:0D:3B:B8:55:2E:94:AE:5E:CD:CC:B7:02:2E:EA:C9:71:54:E6 X509v3 Authority Key Identifier: keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:37:85:b1:5b:81:f9:39:5a:cd:c1:3a:ef:4d:4e:ea:bb:c4: 4f:34:62:46:f5:16:45:97:e1:be:40:73:1a:fe:f3:e0:41:b0: 9a:c0:f9:41:49:c4:76:2d:4b:b1:aa:b5:9f:02:02:54:d7:90: 0a:65:3c:9d:55:1e:05:f2:ce:00:79:b2:ef:80:8d:02:2e:9b: 90:f2:17:ba:47:55:9a:a5:4d:a3:05:25:20:4f:0d:84:c2:46: de:03:13:f6:48:98:6f:8d:42:fb:c0:e3:bd:12:1f:fb:33:da: a3:ab:70:8d:f3:2f:aa:6b:d1:9f:67:a0:11:b3:f0:86:16:22: 75:94:4a:1a:b1:8c:c9:d0:c7:3a:f8:43:eb:b2:dd:51:dd:de: 71:08:db:ce:31:95:9c:95:fb:be:25:db:db:9a:50:e0:8d:67: 55:83:90:69:e2:0c:be:94:02:ef:7a:d0:1d:25:09:e7:d7:dd: 73:52:16:1b:12:bd:e3:49:fa:bf:fd:4e:5c:1b:09:c6:ca:97: 09:2b:5b:b5:95:da:d2:a7:83:0a:cb:37:87:73:05:82:b0:f2: 02:f7:0b:ee:c8:cc:33:7b:06:13:22:59:6e:81:9e:d9:01:c7: c3:da:57:13:e0:e2:85:3e:a9:b4:cf:e9:8a:1b:b0:43:6b:96: ff:38:51:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MzUxMTAvBgNVBAUTKDJDRDk0MUJBN0NFQjUxRkU2RTE2NUUzRkM5ODA2NkQ1 QTk5OUU0RkUwHhcNMjUxMTA0MjIzMDI2WhcNMjUxMTExMjIzMDI2WjAYMRYwFAYD VQQDEw02OTBhN2U4Mi0zNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9l6pj17bJ+tugQ4LhuKvs7MFM+vUL6+lSxdo7fC0JNyfDjAvB6UMN3gRw6Q QrcW1voCKnumL1u/kn6Lc5ke7pK8ikeE7haOVm8sNYzyhROZLcy6w94ocJ1cN5l8 fw3BUJhkdeNGZc6JZRSGSF6hN/SHEjmJQvWkCPAcIlluGPRoGlIF0hG69O1wNdTY C9Ud2h8mu98m7erpoZn5rk9xh4ivbCZFKx1d1yZxB2Aq+i/IMMGZ1Upw803X5Wy6 zQkEB1vKjhkrK8jynMJi6rES+soRrELnI54/Dlc01LmIz2CS8+SwemLdi4bKDQNi 6jMOmVF/ItSraogyW8F4UK7qdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnfDTu4 VS6Url7NzLcCLurJcVTmMB8GA1UdIwQYMBaAFCzZQbp861H+bhZeP8mAZtWpmeT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYzNS81RDA3N0Q0QTkx RDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVmNXVGbDRfeVlCbTFhbVo1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xObEJ1bnpyVWY1dUZsNF95WUJtMWFtWjVQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYzNS81RDA3N0Q0QTkxRDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVm NXVGbDRfeVlCbTFhbVo1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWN4WxW4H5OVrNwTrvTU7qu8RPNGJG9RZFl+G+QHMa/vPgQbCawPlB ScR2LUuxqrWfAgJU15AKZTydVR4F8s4AebLvgI0CLpuQ8he6R1WapU2jBSUgTw2E wkbeAxP2SJhvjUL7wOO9Eh/7M9qjq3CN8y+qa9GfZ6ARs/CGFiJ1lEoasYzJ0Mc6 +EPrst1R3d5xCNvOMZWclfu+JdvbmlDgjWdVg5Bp4gy+lALvetAdJQnn191zUhYb Er3jSfq//U5cGwnGypcJK1u1ldrSp4MKyzeHcwWCsPIC9wvuyMwzewYTIllugZ7Z AcfD2lcT4OKFPqm0z+mKG7BDa5b/OFF9 -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:08 2025 by rpki-client