$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json) Hash identifier: PLCI7mbvvUY/QArm4aco8WoDPGItQVFVGyRFyh9J6+E= Subject key identifier: EC:CB:8E:06:52:9C:29:DD:77:42:F3:62:F4:66:43:9E:3C:31:F4:EC Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft Manifest number: 0216 Signing time: Mon 03 Nov 2025 02:10:00 +0000 Manifest this update: Mon 03 Nov 2025 02:09:59 +0000 Manifest next update: Mon 10 Nov 2025 02:09:59 +0000 Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: hjPKwiWZLo4iowdPvkzsJ6pU3p9/QV8NMuoxqku3LUI=) 2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Validity Not Before: Nov 3 02:09:59 2025 GMT Not After : Nov 10 02:09:59 2025 GMT Subject: CN=69080ef8-eab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:e9:a6:b1:d6:ea:36:68:bc:3e:ab:32:ad: b6:97:ba:e0:00:4d:d1:b8:94:45:ca:be:76:fb:74: d1:ba:a3:35:15:a3:57:b9:35:eb:6f:b3:e2:de:9d: ad:47:67:34:84:40:f1:79:b0:91:eb:f3:1f:5b:d7: a1:bd:82:08:01:32:28:b1:e6:26:ca:02:77:c3:05: 74:3e:31:be:96:da:9c:86:97:07:f0:52:b1:54:e5: 81:51:99:23:fd:89:c6:d2:07:d6:59:b4:68:8c:5b: 30:2a:b8:01:27:26:7d:e2:8e:bb:a5:01:d7:7b:10: 31:e7:ab:a0:e5:2a:c5:7b:cc:93:cb:d8:75:07:73: 77:b4:ee:26:d2:32:79:87:6a:1b:ca:b5:cf:1d:c4: 53:1b:9d:1a:ca:3f:08:ab:04:6d:78:3e:c1:ec:96: 30:98:6d:33:a6:98:13:69:ea:63:a8:1c:fe:83:e6: aa:c5:63:94:56:a8:b8:fa:3a:b8:46:35:05:c2:53: 54:dc:a5:d1:c6:5d:2b:1b:27:67:8e:4e:ee:c5:02: 67:b2:ac:d8:93:65:98:b7:48:c8:a9:12:98:4c:83: bb:db:6a:21:a7:45:d1:fb:04:52:f0:a3:0b:ab:68: 48:4a:7f:39:1e:9e:17:4f:02:10:ab:95:3b:21:de: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CB:8E:06:52:9C:29:DD:77:42:F3:62:F4:66:43:9E:3C:31:F4:EC X509v3 Authority Key Identifier: keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:84:28:b1:06:ba:fd:24:ef:80:5a:9d:52:fa:3d:3a:4d:f9: a8:71:b2:25:b1:f4:f7:0f:8d:7d:11:8b:e6:b4:d8:16:d1:31: e8:95:1f:1a:99:bd:5f:e6:9f:ac:a4:b8:db:ab:59:82:bd:01: 50:56:38:8d:b3:9c:f6:f6:bd:d0:5e:af:91:c5:50:b3:2e:b0: 55:69:e0:5f:da:6c:7e:fa:63:da:b4:08:05:b1:aa:b4:b0:03: 97:2e:8a:42:6a:35:68:f2:7a:7b:7a:7e:a0:00:95:54:08:6d: 53:63:c4:02:54:cb:a7:b9:93:a0:cb:5c:6e:ca:7e:ba:04:77: 8e:d3:42:ce:e0:46:4d:8d:60:43:85:e6:8a:ea:a5:84:2f:58: 94:f4:a2:af:8d:1f:9e:8b:3f:24:ef:77:8f:26:ca:27:31:41: 68:3a:3c:bb:cb:8e:a6:96:9a:8d:ac:2e:ac:9d:ff:3a:a3:26: b0:65:6b:9b:17:8b:2b:0c:7c:a1:70:79:35:d6:0d:04:a6:a1: 2d:a6:e4:84:fa:69:50:03:a4:c6:57:29:85:cb:94:89:d7:56: 8a:6b:dd:16:46:db:dd:35:5e:e5:d6:5a:6d:c1:45:0e:61:4e: ae:a9:cd:46:a5:c5:d9:9d:44:29:1f:39:57:b6:c9:9d:f8:f1: 00:3c:2c:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB Q0Y2RDIyQjYwHhcNMjUxMTAzMDIwOTU5WhcNMjUxMTEwMDIwOTU5WjAYMRYwFAYD VQQDEw02OTA4MGVmOC1lYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2fpprHW6jZovD6rMq22l7rgAE3RuJRFyr52+3TRuqM1FaNXuTXrb7Pi3p2t R2c0hEDxebCR6/MfW9ehvYIIATIoseYmygJ3wwV0PjG+ltqchpcH8FKxVOWBUZkj /YnG0gfWWbRojFswKrgBJyZ94o67pQHXexAx56ug5SrFe8yTy9h1B3N3tO4m0jJ5 h2obyrXPHcRTG50ayj8IqwRteD7B7JYwmG0zppgTaepjqBz+g+aqxWOUVqi4+jq4 RjUFwlNU3KXRxl0rGydnjk7uxQJnsqzYk2WYt0jIqRKYTIO722ohp0XR+wRS8KML q2hISn85Hp4XTwIQq5U7Id7E2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzLjgZS nCndd0LzYvRmQ548MfTsMB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0 RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85 U01FeDBJWUs4c0dzOXRJclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAhCixBrr9JO+AWp1S+j06TfmocbIlsfT3D419EYvmtNgW0THolR8a mb1f5p+spLjbq1mCvQFQVjiNs5z29r3QXq+RxVCzLrBVaeBf2mx++mPatAgFsaq0 sAOXLopCajVo8np7en6gAJVUCG1TY8QCVMunuZOgy1xuyn66BHeO00LO4EZNjWBD heaK6qWEL1iU9KKvjR+eiz8k73ePJsonMUFoOjy7y46mlpqNrC6snf86oyawZWub F4srDHyhcHk11g0EpqEtpuSE+mlQA6TGVymFy5SJ11aKa90WRtvdNV7l1lptwUUO YU6uqc1GpcXZnUQpHzlXtsmd+PEAPCxW -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:04 2025 by rpki-client