$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: 6kTa//2PHV5EylUnz1q+gECapV0nHv0iez6FMgVhYkc= Subject key identifier: F5:CA:D5:F2:3D:74:CE:11:7C:35:DE:C4:CB:2E:C9:30:80:9A:34:EE Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: 01E3 Signing time: Wed 05 Nov 2025 02:48:19 +0000 Manifest this update: Wed 05 Nov 2025 02:48:19 +0000 Manifest next update: Wed 12 Nov 2025 02:48:19 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: jE5krwNxJnf0Oz5X0M4cDQBkQsHZDvmeFQZyUnM5fZk=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: 8k36pvGImmVckUyl9Af0a0wGsrxQEwJI0duKzhrmqDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: Nov 5 02:48:19 2025 GMT Not After : Nov 12 02:48:19 2025 GMT Subject: CN=690abaf3-b3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:0a:ba:17:f0:4b:9c:40:6c:11:0e:79:27: 3d:8b:5a:cd:00:15:58:7d:e1:ca:4f:34:ee:bf:bc: 93:d2:8e:49:5d:d2:5c:87:ec:de:a9:28:a5:22:b1: 49:3b:90:eb:c9:2d:92:65:5b:80:e1:eb:70:2b:97: ef:c8:9c:8b:16:9d:e7:ea:14:63:4e:47:87:ae:96: f3:f0:db:43:dc:8b:d4:14:92:15:5d:2e:1f:f6:f9: 5b:97:06:69:08:e9:11:48:98:32:92:39:cd:13:8f: 9c:2d:5d:b0:59:70:6a:33:b7:44:03:6a:58:16:b1: c1:fc:e5:d2:ae:40:5a:49:f9:6d:7c:4d:87:cb:67: 19:ab:96:9f:54:bf:7b:ee:ea:4d:c4:4f:da:ad:cd: 25:35:be:a4:ef:87:17:0a:49:84:1e:6c:c6:0e:8f: b3:e6:c1:c2:e2:8b:17:24:4c:04:d8:64:2d:5f:fe: b1:f3:65:84:d4:09:2a:ec:a4:fe:63:64:69:75:6c: d9:50:6b:52:2d:35:28:07:84:ef:99:48:7d:15:74: 33:b5:69:57:c5:84:bf:e5:0a:f8:0a:ba:4f:1b:fb: bb:84:34:5d:3c:16:08:cf:6d:d2:39:7f:da:0b:5f: ce:6d:22:87:e4:9a:20:f4:dc:f1:d7:3a:6d:c1:b7: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CA:D5:F2:3D:74:CE:11:7C:35:DE:C4:CB:2E:C9:30:80:9A:34:EE X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:83:c4:15:46:7e:20:6a:52:e4:1e:ef:4d:75:8b:3e:65: 0a:cb:a7:0a:a3:6c:5d:f0:ec:74:c2:0e:b9:18:3a:77:77:f0: 38:2c:04:4d:47:81:22:8e:a9:bd:0b:72:16:a6:56:12:c2:ba: 67:9c:74:ae:ba:aa:54:b4:b1:c2:27:a2:6d:21:4a:54:18:c4: 0d:d1:72:64:3b:a6:df:98:26:02:6a:dd:a0:e1:4f:cd:85:a7: be:a0:00:e1:7d:00:e2:0b:94:a4:d3:98:2c:51:b2:12:b3:d7: 09:34:ce:62:39:bd:a9:ed:b3:30:8c:ed:6c:44:33:e9:23:44: 9e:d4:01:03:5a:c1:29:b3:68:f7:07:9b:99:e7:cb:e1:f9:df: 9e:90:71:c8:24:7a:de:c2:69:cc:7b:a8:25:df:1c:02:f5:e3: 9b:9c:20:a3:90:d3:0c:28:0d:51:e3:6d:7b:88:42:11:d1:ad: 52:2e:1d:93:63:47:17:19:10:c2:0d:0f:c0:42:27:15:b8:4f: 6c:4a:97:74:5d:50:29:93:b3:74:9f:5d:ba:21:f2:95:3a:5c: 0b:93:fe:8f:b7:e2:6b:5b:bb:05:65:fe:50:d7:f0:01:1f:7f: e7:e0:4b:d8:3c:3f:c9:6b:a3:e2:be:e8:95:f9:d9:04:81:61: 33:48:4f:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjUxMTA1MDI0ODE5WhcNMjUxMTEyMDI0ODE5WjAYMRYwFAYD VQQDEw02OTBhYmFmMy1iM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiIKuhfwS5xAbBEOeSc9i1rNABVYfeHKTzTuv7yT0o5JXdJch+zeqSilIrFJ O5DryS2SZVuA4etwK5fvyJyLFp3n6hRjTkeHrpbz8NtD3IvUFJIVXS4f9vlblwZp COkRSJgykjnNE4+cLV2wWXBqM7dEA2pYFrHB/OXSrkBaSfltfE2Hy2cZq5afVL97 7upNxE/arc0lNb6k74cXCkmEHmzGDo+z5sHC4osXJEwE2GQtX/6x82WE1Akq7KT+ Y2RpdWzZUGtSLTUoB4TvmUh9FXQztWlXxYS/5Qr4CrpPG/u7hDRdPBYIz23SOX/a C1/ObSKH5Jog9Nzx1zptwbeceQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXK1fI9 dM4RfDXexMsuyTCAmjTuMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKS4PEFUZ+IGpS5B7vTXWLPmUKy6cKo2xd8Ox0wg65GDp3d/A4LARN R4Eijqm9C3IWplYSwrpnnHSuuqpUtLHCJ6JtIUpUGMQN0XJkO6bfmCYCat2g4U/N hae+oADhfQDiC5Sk05gsUbISs9cJNM5iOb2p7bMwjO1sRDPpI0Se1AEDWsEps2j3 B5uZ58vh+d+ekHHIJHrewmnMe6gl3xwC9eObnCCjkNMMKA1R4217iEIR0a1SLh2T Y0cXGRDCDQ/AQicVuE9sSpd0XVApk7N0n126IfKVOlwLk/6Pt+JrW7sFZf5Q1/AB H3/n4EvYPD/Ja6PivuiV+dkEgWEzSE+l -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:35 2025 by rpki-client