$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: VWdw9M6MtOE/aCyTm7j22EGrLMx1NLvM+rZplEl8Egs= Subject key identifier: F0:B8:B6:FF:AF:08:B2:02:46:3A:2A:B2:DB:BC:34:7A:CA:4C:5D:BA Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 085F Signing time: Sun 02 Nov 2025 20:36:29 +0000 Manifest this update: Sun 02 Nov 2025 20:36:28 +0000 Manifest next update: Sun 09 Nov 2025 20:36:28 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: oCs5Wq7n3bqX5lZ4PV3lmf8q/ZxZvjF+6+IQP20FQXo=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Nov 2 20:36:28 2025 GMT Not After : Nov 9 20:36:28 2025 GMT Subject: CN=6907c0cc-e41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:a9:11:74:7f:df:f1:16:e8:d2:20:bf:0c: 38:e7:b6:5f:bc:6b:05:75:18:02:af:91:4f:3e:6b: b9:ea:9a:8a:02:e5:8a:a3:3c:31:e8:e5:c7:62:02: a3:7f:42:52:16:81:e3:96:a4:79:26:5a:b2:ef:76: 73:03:73:3d:bb:83:cd:14:98:07:d3:dc:c1:ea:ec: 5e:4b:b2:f1:e4:1a:0e:95:b9:35:1f:e2:db:d6:c0: e4:f4:a1:f9:6d:57:9b:aa:4b:e8:e3:70:71:fe:c0: f1:36:4f:aa:da:84:80:94:e3:57:fb:68:2c:4b:3f: 81:08:bd:e6:f1:76:7d:73:26:27:a8:c2:6a:a1:b2: 93:f8:de:01:56:dc:d0:be:57:b9:59:81:2b:d1:ee: 20:b6:dd:f6:9b:a3:81:d5:a3:bc:00:fd:ca:5f:2c: 44:49:76:6a:63:8b:11:76:1a:b2:8d:e8:1b:01:fa: 28:a1:8d:49:7e:b3:e5:90:ae:02:0e:3e:0d:0a:65: f1:84:5b:64:fe:01:10:ea:ca:3e:a5:bc:b4:32:93: 07:a2:cd:45:e8:56:34:01:32:43:c5:6c:eb:fe:9c: da:8b:ec:74:00:fe:4a:a4:e9:1b:d1:a3:03:ad:f1: b5:11:2b:ae:61:17:0b:99:b7:21:f9:74:dd:de:82: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:B6:FF:AF:08:B2:02:46:3A:2A:B2:DB:BC:34:7A:CA:4C:5D:BA X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:d7:05:f5:a9:55:de:e9:8f:19:b2:b4:e5:91:69:64:c0: cc:b4:9c:83:b2:09:89:5b:d4:02:e3:87:7e:d5:1a:d7:2d:df: b8:56:e1:60:1c:5a:6f:45:b1:a0:cd:bc:62:b2:4c:b4:62:ef: de:0c:e3:09:aa:69:f1:24:21:20:cb:b2:af:51:83:a8:51:35: c7:85:c1:0b:8f:01:07:89:e5:15:57:4b:c4:8f:0e:01:b8:21: b5:77:49:92:ff:a2:cc:b4:af:f1:4d:c4:cb:1e:32:82:ad:a8: 69:fe:76:ce:bd:76:fb:23:fe:8e:40:6c:a9:1f:95:f0:5a:60: 0f:e7:80:d6:5e:3a:fb:64:4b:db:c5:99:9e:27:61:70:4b:26: 79:bb:43:d9:b0:7c:f8:9b:03:08:be:da:13:f2:95:ff:92:58: 30:bb:dd:d5:3e:18:8a:0a:e6:bc:df:55:da:c3:d4:15:02:39: 7d:e7:7b:79:f6:2c:af:24:5c:63:3f:ad:fb:f8:30:cc:ee:74: c9:16:b3:d4:d2:17:d6:1d:15:d9:16:b8:4e:08:48:f3:74:a4: 7e:97:71:85:31:2e:88:fa:f1:8f:75:98:eb:60:71:54:af:4e: 79:1c:2b:62:ab:cf:a6:da:ea:f0:cd:1f:58:8f:0b:1f:05:0f: df:d6:9c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUxMTAyMjAzNjI4WhcNMjUxMTA5MjAzNjI4WjAYMRYwFAYD VQQDEw02OTA3YzBjYy1lNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0GpEXR/3/EW6NIgvww457ZfvGsFdRgCr5FPPmu56pqKAuWKozwx6OXHYgKj f0JSFoHjlqR5Jlqy73ZzA3M9u4PNFJgH09zB6uxeS7Lx5BoOlbk1H+Lb1sDk9KH5 bVebqkvo43Bx/sDxNk+q2oSAlONX+2gsSz+BCL3m8XZ9cyYnqMJqobKT+N4BVtzQ vle5WYEr0e4gtt32m6OB1aO8AP3KXyxESXZqY4sRdhqyjegbAfoooY1JfrPlkK4C Dj4NCmXxhFtk/gEQ6so+pby0MpMHos1F6FY0ATJDxWzr/pzai+x0AP5KpOkb0aMD rfG1ESuuYRcLmbch+XTd3oI8sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC4tv+v CLICRjoqstu8NHrKTF26MB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8UtcF9alV3umPGbK05ZFpZMDMtJyDsgmJW9QC44d+1RrXLd+4VuFg HFpvRbGgzbxisky0Yu/eDOMJqmnxJCEgy7KvUYOoUTXHhcELjwEHieUVV0vEjw4B uCG1d0mS/6LMtK/xTcTLHjKCrahp/nbOvXb7I/6OQGypH5XwWmAP54DWXjr7ZEvb xZmeJ2FwSyZ5u0PZsHz4mwMIvtoT8pX/klgwu93VPhiKCua831Xaw9QVAjl953t5 9iyvJFxjP637+DDM7nTJFrPU0hfWHRXZFrhOCEjzdKR+l3GFMS6I+vGPdZjrYHFU r055HCtiq8+m2urwzR9YjwsfBQ/f1pye -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:39 2025 by rpki-client