$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json) Hash identifier: K8kn9CD62jqhG6KazimYqSNbQdXiXzl+C0oiwEYkNc0= Subject key identifier: 45:D3:DF:30:7F:E2:62:B0:10:FD:5E:03:01:E3:84:7E:FF:EA:AA:B1 Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft Manifest number: 0608 Signing time: Tue 04 Nov 2025 22:57:51 +0000 Manifest this update: Tue 04 Nov 2025 22:57:50 +0000 Manifest next update: Tue 11 Nov 2025 22:57:50 +0000 Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: qfIO3V99r1Z3YRI/T8EBcDTKoebzPXm+2t11Cvjj9as=) 2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: HE6I/F13bN4XohmVDBqxBCGNwt3v/V2iNwzXes290uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: Nov 4 22:57:50 2025 GMT Not After : Nov 11 22:57:50 2025 GMT Subject: CN=690a84ee-a4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:50:01:d1:71:df:d6:57:24:68:89:31:2a: 10:b8:83:39:78:48:90:ad:f2:f1:f8:dc:71:c5:3d: 31:48:97:e9:ff:4f:42:56:9f:bc:ed:cb:9e:8a:ff: fe:b5:27:bb:52:51:f2:99:61:64:b4:78:32:26:41: 22:b4:5e:ec:a7:4c:f0:0c:4f:97:40:44:e5:9d:86: b7:c2:5c:09:77:d0:84:11:7c:60:30:8a:5f:bb:de: 22:4c:14:12:85:25:78:b0:e7:d4:12:e7:b4:48:95: 38:48:58:22:19:7b:14:f0:99:66:50:5b:7a:43:9e: ba:eb:67:a7:08:ae:b7:4a:a3:a5:bd:07:99:c0:aa: 78:4e:a0:02:00:38:0c:21:a7:18:7a:07:47:63:4e: 69:5a:50:7c:85:62:ad:96:95:13:27:c6:2c:37:ab: f2:6f:fc:55:b3:d6:dd:e7:07:38:cf:6f:c7:c5:f9: 8b:b7:b4:21:63:0f:53:64:5a:59:f4:ee:e0:39:86: e3:be:e4:aa:37:d6:7e:ab:68:89:de:d7:3a:dc:2a: 03:51:19:0e:d8:52:32:2e:a0:8d:91:1d:e9:57:07: f5:3b:ff:fa:c9:48:16:c6:7f:20:5c:a7:a9:ce:c3: c8:da:36:d7:20:75:df:c5:2a:b4:51:18:5a:bb:8c: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D3:DF:30:7F:E2:62:B0:10:FD:5E:03:01:E3:84:7E:FF:EA:AA:B1 X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:69:e0:e5:97:d7:f1:34:9a:82:9f:fa:69:ce:97:cd:27:15: 40:5b:cb:70:5b:9a:24:40:5f:2a:cf:4a:29:6d:e1:ed:f9:34: 75:a0:9f:bf:5b:eb:87:d3:7a:3f:ec:af:80:32:93:2c:f1:34: 96:d4:bf:4a:c7:12:b0:4e:6e:da:bc:3f:9e:6c:93:b8:9f:bb: d1:79:13:e8:b2:82:20:5e:e8:07:25:82:55:02:af:7b:db:65: 1f:cd:e8:08:0f:2f:4c:f9:48:b8:e4:69:f0:be:0c:c5:fa:90: 57:0b:90:6c:51:e2:b6:54:cd:c6:c7:37:e2:33:87:ce:72:ec: ab:93:61:78:d6:f8:88:a9:e0:98:4d:81:48:5a:ab:09:0f:e5: d7:b6:b2:71:1c:cf:d4:93:24:3f:24:b4:4c:30:3e:98:c4:ba: 07:b8:73:99:8f:23:a8:9c:ff:8e:dc:f9:89:18:16:e4:d7:d9: cb:70:ea:46:76:92:cd:82:78:5c:18:f5:01:3e:8a:dd:b3:83: 2d:7c:e6:4e:63:3d:b9:1a:f4:c8:af:3f:e9:9e:fc:98:7d:89: 9c:c2:e7:3d:0b:71:8c:98:02:ae:83:ab:dd:79:1b:1a:09:44: 12:4b:24:47:ab:2d:a1:85:6c:19:38:07:c4:a6:38:c4:e6:fa: 06:de:8f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjUxMTA0MjI1NzUwWhcNMjUxMTExMjI1NzUwWjAYMRYwFAYD VQQDEw02OTBhODRlZS1hNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb1QAdFx39ZXJGiJMSoQuIM5eEiQrfLx+NxxxT0xSJfp/09CVp+87cueiv/+ tSe7UlHymWFktHgyJkEitF7sp0zwDE+XQETlnYa3wlwJd9CEEXxgMIpfu94iTBQS hSV4sOfUEue0SJU4SFgiGXsU8JlmUFt6Q56662enCK63SqOlvQeZwKp4TqACADgM IacYegdHY05pWlB8hWKtlpUTJ8YsN6vyb/xVs9bd5wc4z2/HxfmLt7QhYw9TZFpZ 9O7gOYbjvuSqN9Z+q2iJ3tc63CoDURkO2FIyLqCNkR3pVwf1O//6yUgWxn8gXKep zsPI2jbXIHXfxSq0URhau4ytCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXT3zB/ 4mKwEP1eAwHjhH7/6qqxMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKaeDll9fxNJqCn/ppzpfNJxVAW8twW5okQF8qz0opbeHt+TR1oJ+/ W+uH03o/7K+AMpMs8TSW1L9KxxKwTm7avD+ebJO4n7vReRPosoIgXugHJYJVAq97 22UfzegIDy9M+Ui45GnwvgzF+pBXC5BsUeK2VM3GxzfiM4fOcuyrk2F41viIqeCY TYFIWqsJD+XXtrJxHM/UkyQ/JLRMMD6YxLoHuHOZjyOonP+O3PmJGBbk19nLcOpG dpLNgnhcGPUBPords4MtfOZOYz25GvTIrz/pnvyYfYmcwuc9C3GMmAKug6vdeRsa CUQSSyRHqy2hhWwZOAfEpjjE5voG3o+x -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:57 2025 by rpki-client