$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: KrdbwRiLmVvYQBDohmQH0tuy16Qe9+t4PrCdsL4XR88= Subject key identifier: E7:41:A3:0D:98:25:C2:96:0C:5F:AD:CA:F7:C7:4C:B0:7A:37:62:F8 Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 0192 Signing time: Mon 03 Nov 2025 03:30:27 +0000 Manifest this update: Mon 03 Nov 2025 03:30:27 +0000 Manifest next update: Mon 10 Nov 2025 03:30:27 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: S5TOzbP4TDsW6/RkIIi5+8UWXIeKuH6leEn4ah4h0aI=) 2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: /0dTnWT2FRET+08FVC1mUWomcC2kAcAYkpb9MNNV3d8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: Nov 3 03:30:27 2025 GMT Not After : Nov 10 03:30:27 2025 GMT Subject: CN=690821d3-02e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:18:1a:8a:ea:97:0e:e3:8d:f6:53:b3:be: f2:45:79:81:7e:af:8d:c7:0a:a7:77:e4:4b:80:33: 9d:1c:20:32:e2:ff:d2:0c:29:2e:bf:39:59:dd:24: 3e:ce:67:e5:2d:8d:a0:76:74:3c:60:7f:fb:13:ef: 8e:7d:ae:61:4b:1b:d6:94:6e:30:2e:95:fd:4f:53: 7c:78:76:67:e5:2c:f5:db:df:1e:59:46:b2:92:3e: ce:41:0d:95:c0:50:16:9d:79:da:2a:d8:a3:30:c9: e4:0d:06:29:66:e6:92:68:3b:52:9a:0f:f2:70:4b: a3:45:ab:82:5e:ab:72:c7:46:e0:9c:aa:c6:c7:72: 3a:61:06:62:36:59:b6:86:e8:55:eb:7e:92:74:cd: e5:32:14:cb:b7:88:5c:64:81:24:13:ce:b3:20:1e: 81:5f:10:77:b3:52:48:6f:d1:0e:8c:c1:a6:18:d9: 68:45:c4:91:01:06:d2:7c:4e:82:e7:28:6a:f4:e2: 2e:01:23:fd:82:64:a1:0c:e2:49:cd:2b:23:41:79: e7:64:f8:6d:92:56:26:7a:36:ec:14:38:3e:66:86: 67:08:61:e0:e2:6a:50:44:81:fe:ca:64:cb:f7:e3: 0c:0c:65:2f:e5:6d:86:ee:ee:1d:75:b7:2a:a0:62: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:41:A3:0D:98:25:C2:96:0C:5F:AD:CA:F7:C7:4C:B0:7A:37:62:F8 X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:48:d3:ef:82:63:48:f7:e1:ae:af:ac:8c:b2:09:68:51:a0: 3e:bb:ae:5f:ef:5f:c4:c6:38:e8:35:a2:99:b0:63:e9:d5:e7: 62:58:76:fc:9a:89:52:52:3d:be:6f:11:b4:61:bb:09:26:07: 01:16:7d:21:80:ba:69:11:8a:b5:8f:9b:08:b3:61:23:bd:f9: 56:8c:b6:11:42:eb:03:ef:0e:ef:1f:cb:91:a2:e7:6f:5e:cb: 86:ad:df:51:16:a5:b3:8f:ab:6b:03:02:8b:90:8c:ff:ef:cb: 52:83:47:02:41:8d:df:cc:2a:57:a3:4b:07:5a:ab:df:39:be: fb:d7:12:fd:24:31:4a:af:40:ae:86:53:d9:04:b9:b3:5c:f0: 97:63:df:5a:5a:aa:81:fa:2e:4c:79:b9:76:a1:c4:9b:2e:a9: f4:0d:29:d2:12:7d:4f:32:fa:57:07:a8:e4:5a:b9:99:19:d1: 00:82:bf:e7:f0:4b:7a:18:65:e3:70:4c:30:56:17:27:2f:f2: 94:9f:c8:d5:2e:d9:56:02:73:e6:65:69:e0:88:fb:f2:99:4c: dd:11:f4:50:7b:5d:96:24:d3:eb:82:b9:63:0a:e3:74:21:15: d9:65:45:6b:c9:18:67:bf:ed:1b:3e:83:5a:33:5d:d0:39:66: 66:ba:02:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx NkVENjI0OUEwHhcNMjUxMTAzMDMzMDI3WhcNMjUxMTEwMDMzMDI3WjAYMRYwFAYD VQQDEw02OTA4MjFkMy0wMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvAYGorqlw7jjfZTs77yRXmBfq+Nxwqnd+RLgDOdHCAy4v/SDCkuvzlZ3SQ+ zmflLY2gdnQ8YH/7E++Ofa5hSxvWlG4wLpX9T1N8eHZn5Sz1298eWUaykj7OQQ2V wFAWnXnaKtijMMnkDQYpZuaSaDtSmg/ycEujRauCXqtyx0bgnKrGx3I6YQZiNlm2 huhV636SdM3lMhTLt4hcZIEkE86zIB6BXxB3s1JIb9EOjMGmGNloRcSRAQbSfE6C 5yhq9OIuASP9gmShDOJJzSsjQXnnZPhtklYmejbsFDg+ZoZnCGHg4mpQRIH+ymTL 9+MMDGUv5W2G7u4ddbcqoGIOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdBow2Y JcKWDF+tyvfHTLB6N2L4MB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3 QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42 ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOSNPvgmNI9+Gur6yMsgloUaA+u65f71/ExjjoNaKZsGPp1ediWHb8 molSUj2+bxG0YbsJJgcBFn0hgLppEYq1j5sIs2EjvflWjLYRQusD7w7vH8uRoudv XsuGrd9RFqWzj6trAwKLkIz/78tSg0cCQY3fzCpXo0sHWqvfOb771xL9JDFKr0Cu hlPZBLmzXPCXY99aWqqB+i5Mebl2ocSbLqn0DSnSEn1PMvpXB6jkWrmZGdEAgr/n 8Et6GGXjcEwwVhcnL/KUn8jVLtlWAnPmZWngiPvymUzdEfRQe12WJNPrgrljCuN0 IRXZZUVryRhnv+0bPoNaM13QOWZmugKR -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:27 2025 by rpki-client