$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json) Hash identifier: +usGNTG7JrwfewSIg3u0r4uWX7E5UVlrrbe23K8cYIQ= Subject key identifier: 58:5A:2C:29:5A:81:EA:DD:92:7D:64:7D:32:79:16:67:73:20:49:C9 Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft Manifest number: 028E Signing time: Wed 05 Nov 2025 01:41:12 +0000 Manifest this update: Wed 05 Nov 2025 01:41:11 +0000 Manifest next update: Wed 12 Nov 2025 01:41:11 +0000 Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: 1JdgW7qAf3mDSGMa+CnUVQ79AUwFjgPu9aqpYYsIYZc=) 2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: dsbPmjXp/oYWvfHXOZsMcI3WqL8KWucAeTqSoUbpKas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Validity Not Before: Nov 5 01:41:11 2025 GMT Not After : Nov 12 01:41:11 2025 GMT Subject: CN=690aab37-98af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3b:cf:16:89:45:aa:7d:38:a6:9d:ca:44:d4: 2c:d7:9c:f0:1d:1d:6c:ec:68:e7:42:7c:ee:d8:c9: 22:eb:d1:94:8b:c3:da:03:21:f8:80:57:ce:f3:0d: 47:0a:4f:de:d9:42:2a:f1:eb:28:bc:dc:fd:cb:db: 98:b2:c7:a5:e8:31:2d:6f:86:94:1b:71:4f:82:24: 75:8e:7d:dd:09:37:57:20:9a:6e:5f:4e:7c:c3:f9: b6:39:10:81:8e:f5:96:2e:15:fc:20:15:74:e3:d1: 83:e1:bc:1a:45:c8:fb:c9:bc:d3:89:5e:1b:6b:c5: 2c:02:6b:a1:05:23:7e:7c:0e:ee:35:0f:39:3a:73: 75:49:e8:f1:da:f4:cd:68:3a:42:9d:9f:c1:e1:a5: 90:f5:2f:a8:de:fa:25:e0:e2:a4:d2:61:02:80:93: 17:e1:30:bc:e1:de:e1:6c:02:20:a9:2d:c5:9f:8f: 17:d0:eb:5d:f1:8b:bd:d2:b7:a5:89:9c:e2:f1:1f: db:11:79:c3:45:53:5a:ff:06:39:bd:8d:f8:f8:b7: 53:0a:9e:78:aa:4b:74:b6:11:3f:1c:bf:34:fb:e2: 50:69:1a:be:d7:68:5d:20:ef:9f:39:9e:f9:0d:be: 0a:95:e0:13:ec:9b:18:2a:be:41:6f:34:47:47:5c: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:2C:29:5A:81:EA:DD:92:7D:64:7D:32:79:16:67:73:20:49:C9 X509v3 Authority Key Identifier: keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9c:23:67:ba:91:e6:f6:71:97:ce:a7:fa:77:f7:ba:47:c7: 7b:1b:27:cb:8b:6f:49:dc:26:a2:0d:40:89:97:13:5b:40:0c: 1c:40:ff:fa:9b:6d:8f:70:fe:67:fd:c2:64:18:e0:0e:3c:8b: a4:39:84:12:6b:80:e8:82:f6:06:7d:30:5c:36:30:fc:ce:ba: 3b:ad:40:45:d3:bc:5a:cd:f0:5c:b7:c5:7b:8a:dd:4e:f3:a3: 75:70:99:86:69:50:3b:4b:b9:86:b9:0b:ea:95:5c:04:db:2f: dd:66:d4:92:cc:f1:fb:32:5b:d9:cc:bb:0c:0b:10:a4:89:01: 31:aa:ba:dc:a2:e2:b7:a1:a0:a5:d3:77:57:92:5f:62:90:2a: ff:3d:56:e0:3e:c4:0b:a6:52:ba:37:fe:c4:07:43:63:54:fe: 41:7d:1e:db:5f:59:b1:10:fd:de:67:f7:59:e4:b8:a6:94:c7: 33:14:59:60:8f:8f:ce:c3:33:b3:b5:d6:45:05:b5:3e:df:b1: af:0a:e3:f0:d5:10:1a:bb:bb:db:02:7f:03:6c:72:28:f6:42: e6:1d:57:fc:3f:55:15:51:14:1e:1b:23:39:42:52:54:4e:58: ff:43:15:5a:f4:31:48:cb:7f:64:61:f7:f0:cb:ff:e3:b6:7f: b3:4b:c1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5 NjM1NUJENTMwHhcNMjUxMTA1MDE0MTExWhcNMjUxMTEyMDE0MTExWjAYMRYwFAYD VQQDEw02OTBhYWIzNy05OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9TvPFolFqn04pp3KRNQs15zwHR1s7GjnQnzu2Mki69GUi8PaAyH4gFfO8w1H Ck/e2UIq8esovNz9y9uYssel6DEtb4aUG3FPgiR1jn3dCTdXIJpuX058w/m2ORCB jvWWLhX8IBV049GD4bwaRcj7ybzTiV4ba8UsAmuhBSN+fA7uNQ85OnN1Sejx2vTN aDpCnZ/B4aWQ9S+o3vol4OKk0mECgJMX4TC84d7hbAIgqS3Fn48X0Otd8Yu90rel iZzi8R/bEXnDRVNa/wY5vY34+LdTCp54qkt0thE/HL80++JQaRq+12hdIO+fOZ75 Db4KleAT7JsYKr5BbzRHR1z1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhaLCla gerdkn1kfTJ5FmdzIEnJMB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0 MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAznCNnupHm9nGXzqf6d/e6R8d7GyfLi29J3CaiDUCJlxNbQAwcQP/6 m22PcP5n/cJkGOAOPIukOYQSa4DogvYGfTBcNjD8zro7rUBF07xazfBct8V7it1O 86N1cJmGaVA7S7mGuQvqlVwE2y/dZtSSzPH7MlvZzLsMCxCkiQExqrrcouK3oaCl 03dXkl9ikCr/PVbgPsQLplK6N/7EB0NjVP5BfR7bX1mxEP3eZ/dZ5LimlMczFFlg j4/OwzOztdZFBbU+37GvCuPw1RAau7vbAn8DbHIo9kLmHVf8P1UVURQeGyM5QlJU Tlj/QxVa9DFIy39kYffwy//jtn+zS8EN -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:51 2025 by rpki-client