$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: EQc4PX1POx11+tmDU9SO4t6vOC+HKcQDmMWrAo8pGQ4= Subject key identifier: 8B:EB:A2:44:53:8C:43:4F:0F:18:7C:4E:83:A1:29:07:07:B8:75:9F Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 0657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 0650 Signing time: Tue 04 Nov 2025 22:44:32 +0000 Manifest this update: Tue 04 Nov 2025 22:44:31 +0000 Manifest next update: Tue 11 Nov 2025 22:44:31 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: aN5vwgXKQpi5GBpZRVMTxr8pGAlZuiGaK/HNmw8AW5g=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: OFrwiJWAkGGk5FsDremtK39rCrSaFqlUshUtXmOJ9aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: Nov 4 22:44:31 2025 GMT Not After : Nov 11 22:44:31 2025 GMT Subject: CN=690a81cf-6e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:76:bd:5c:3a:3a:d9:69:4a:31:32:48:d2: a4:00:4c:d3:c5:22:7d:b9:ce:cc:48:ee:de:1d:b4: c4:aa:9c:2d:9b:48:0a:1a:06:5f:f7:52:11:bc:9f: d9:9b:60:ab:ef:6e:c3:09:52:80:00:7b:0f:6c:71: e3:71:6d:04:34:15:4d:ae:9b:0a:73:ae:05:8d:ad: 6d:d1:92:b2:b3:03:d0:ea:51:b1:e0:d6:2e:a5:67: ea:62:d5:b7:b2:d7:ac:79:86:ac:a1:7f:99:c5:c0: bb:bc:1e:5f:2f:a2:8c:5c:d7:11:90:1a:bd:18:24: 26:49:2a:4d:3a:e8:a7:02:0d:07:9a:5d:51:93:d2: 18:fe:56:68:a2:14:b3:c2:74:8b:97:bb:8c:37:bd: 98:81:ba:d1:c6:ab:81:df:fb:5a:7a:8a:77:4f:61: 17:d9:91:0e:1a:e1:b7:39:d8:8a:46:6a:ef:19:16: e8:51:43:f7:f3:8f:29:f5:28:7c:e9:a6:07:14:c8: b4:05:02:45:23:f5:ab:1c:bd:74:3b:e7:9b:04:9c: 69:68:7f:7c:21:8e:2c:a9:dc:01:16:eb:dc:1f:31: 77:91:33:4e:0f:ff:88:0a:e4:84:8d:29:10:41:92: 71:7c:fc:0a:df:8a:dc:c3:54:62:b7:5c:78:6a:2f: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:A2:44:53:8C:43:4F:0F:18:7C:4E:83:A1:29:07:07:B8:75:9F X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c9:ad:0e:82:f1:31:59:2e:24:2b:cc:76:ea:66:ca:d9:56: 72:9e:59:e5:f3:90:ea:21:1a:d8:19:b2:cd:fc:73:df:58:0a: 43:71:50:51:27:30:74:90:a6:1c:29:85:a2:cf:05:4e:60:d2: c4:d5:7d:b5:6e:41:34:55:b5:21:e3:68:4f:d1:20:4e:91:cb: a6:f8:79:e5:a7:f4:aa:87:ed:97:cd:37:a6:a6:1a:09:4d:5c: 54:c5:c5:2c:cf:61:7d:b7:32:db:c1:50:12:fa:58:37:00:dc: b4:9b:4a:64:1f:de:c4:ac:98:4f:0a:2d:25:f3:4f:30:32:14: d2:bc:c0:e7:f2:9f:b8:f5:3f:c3:89:9b:ea:c6:e7:b7:4d:07: 23:f6:18:8a:f2:26:ab:3c:fb:90:b3:90:71:c6:8f:e4:be:53: 19:19:85:92:54:e1:82:10:bf:44:92:4f:6b:d3:9a:49:0b:bd: f5:35:21:65:80:5f:08:ff:20:6e:b6:b3:e1:f6:dc:40:39:6b: 25:e8:c9:28:68:86:a9:70:d6:f1:9a:c0:35:4c:4b:10:ed:92: da:72:0e:17:26:2e:87:4b:b2:e5:c8:64:e4:bf:9e:bf:c1:8c: ce:36:8c:42:54:56:2a:fc:eb:5b:1f:cb:f0:16:44:f9:bb:fe: fb:d6:76:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUxMTA0MjI0NDMxWhcNMjUxMTExMjI0NDMxWjAYMRYwFAYD VQQDEw02OTBhODFjZi02ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gd2vVw6OtlpSjEySNKkAEzTxSJ9uc7MSO7eHbTEqpwtm0gKGgZf91IRvJ/Z m2Cr727DCVKAAHsPbHHjcW0ENBVNrpsKc64Fja1t0ZKyswPQ6lGx4NYupWfqYtW3 steseYasoX+ZxcC7vB5fL6KMXNcRkBq9GCQmSSpNOuinAg0Hml1Rk9IY/lZoohSz wnSLl7uMN72YgbrRxquB3/taeop3T2EX2ZEOGuG3OdiKRmrvGRboUUP3848p9Sh8 6aYHFMi0BQJFI/WrHL10O+ebBJxpaH98IY4sqdwBFuvcHzF3kTNOD/+ICuSEjSkQ QZJxfPwK34rcw1Rit1x4ai+6/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvrokRT jENPDxh8ToOhKQcHuHWfMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPya0OgvExWS4kK8x26mbK2VZynlnl85DqIRrYGbLN/HPfWApDcVBR JzB0kKYcKYWizwVOYNLE1X21bkE0VbUh42hP0SBOkcum+Hnlp/Sqh+2XzTemphoJ TVxUxcUsz2F9tzLbwVAS+lg3ANy0m0pkH97ErJhPCi0l808wMhTSvMDn8p+49T/D iZvqxue3TQcj9hiK8iarPPuQs5Bxxo/kvlMZGYWSVOGCEL9Ekk9r05pJC731NSFl gF8I/yButrPh9txAOWsl6MkoaIapcNbxmsA1TEsQ7ZLacg4XJi6HS7LlyGTkv56/ wYzONoxCVFYq/OtbH8vwFkT5u/771nZA -----END CERTIFICATE-----Generated at Thu Nov 6 02:37:52 2025 by rpki-client