$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: kDisOLDTyFAOIodxbVgw3QYLNDXZJfLxeAtHpF6OlRM= Subject key identifier: 84:85:B0:85:83:72:7E:82:06:B0:2F:86:A8:54:8A:88:02:9F:32:7B Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 0300 Signing time: Mon 03 Nov 2025 01:14:41 +0000 Manifest this update: Mon 03 Nov 2025 01:14:41 +0000 Manifest next update: Mon 10 Nov 2025 01:14:41 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: QTEgNDw+wc3ZZ76iqM6GlHmExJGBtfomEuFP0eoq92M=) 2: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=) 5: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 6: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 7: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Nov 3 01:14:41 2025 GMT Not After : Nov 10 01:14:41 2025 GMT Subject: CN=69080201-ea48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:e5:24:ec:fb:13:72:67:aa:b7:d9:a2:e5: 76:1f:5b:a8:df:1a:bc:0e:4f:11:83:09:bd:9e:2d: a7:f2:9d:da:47:73:d5:49:24:b0:a5:25:a6:15:3c: c3:9e:67:98:69:74:f9:28:dc:28:3b:ba:fa:b8:4c: b2:a8:cf:bf:88:c4:28:fd:76:f4:0a:2a:f6:fd:a4: 34:b8:f5:23:2d:de:7d:fa:05:55:5b:4e:69:69:e7: 25:39:3d:92:1e:f6:9c:57:bb:b9:bd:03:fe:ce:09: 31:57:b5:35:58:75:a9:0b:fc:42:4d:7a:68:88:63: 60:2e:9d:97:68:cc:07:93:d9:80:94:79:ea:84:11: 5d:fa:e7:f9:de:ce:2a:12:41:45:76:1f:79:8a:71: 5c:b0:1b:da:6f:04:df:6c:54:b8:65:25:d4:73:85: bf:a6:6d:4c:1b:3c:af:4e:75:47:68:c9:c0:7c:de: c3:d5:be:1f:b4:8c:90:5f:68:ae:a1:40:37:53:59: 2e:cf:07:36:dd:f1:19:7f:f0:0c:b9:75:e5:5c:a5: df:2d:04:98:47:ca:9f:43:5c:e2:37:53:bc:f5:10: be:5b:00:dd:d9:7c:ac:21:31:82:cb:6d:4b:7c:fb: d8:cd:72:d7:b8:6d:ed:ce:80:74:87:b3:26:20:d8: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:85:B0:85:83:72:7E:82:06:B0:2F:86:A8:54:8A:88:02:9F:32:7B X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b2:ca:65:cd:24:20:46:8a:f2:17:81:73:50:18:f0:4a:93: 4a:1e:ec:e9:e3:6b:ff:bf:12:5e:ad:e9:0c:17:59:62:47:d8: c9:27:02:60:88:29:5c:43:12:4e:93:35:63:ff:83:09:67:6d: a8:e9:02:16:c9:3b:eb:ed:ad:79:84:06:18:32:1f:16:15:c6: c7:91:7b:db:3c:48:f2:9f:0b:1b:0f:17:ad:12:12:ae:b8:6e: c5:fe:d3:97:be:37:4b:7b:88:f0:13:49:ac:bb:90:ce:ae:97: a2:ce:9f:6c:68:57:75:05:70:54:de:30:2a:5f:b3:4c:6f:37: 8c:df:56:5a:cf:66:91:a8:1f:41:4c:ac:bb:7b:b9:61:b4:33: 26:65:2e:16:25:35:0c:f1:e7:77:53:5c:65:9b:73:21:9a:6c: 55:ac:4d:d4:8f:06:32:af:73:e1:05:6b:27:bb:9a:e7:58:83: 1e:37:96:d1:dc:77:fa:25:47:8c:1a:48:c2:23:01:8a:1e:1f: 63:52:1d:11:3d:b4:51:6d:a1:f8:4e:a8:18:f7:ef:f7:cc:8a: 9d:88:d0:f0:24:05:db:be:4f:e1:5a:dd:53:77:43:bd:70:ae: 7c:e0:d0:15:a9:9d:bd:4e:60:9f:e1:ed:fb:56:57:15:ef:50: 23:b4:d2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUxMTAzMDExNDQxWhcNMjUxMTEwMDExNDQxWjAYMRYwFAYD VQQDEw02OTA4MDIwMS1lYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpPlJOz7E3JnqrfZouV2H1uo3xq8Dk8Rgwm9ni2n8p3aR3PVSSSwpSWmFTzD nmeYaXT5KNwoO7r6uEyyqM+/iMQo/Xb0Cir2/aQ0uPUjLd59+gVVW05paeclOT2S HvacV7u5vQP+zgkxV7U1WHWpC/xCTXpoiGNgLp2XaMwHk9mAlHnqhBFd+uf53s4q EkFFdh95inFcsBvabwTfbFS4ZSXUc4W/pm1MGzyvTnVHaMnAfN7D1b4ftIyQX2iu oUA3U1kuzwc23fEZf/AMuXXlXKXfLQSYR8qfQ1ziN1O89RC+WwDd2XysITGCy21L fPvYzXLXuG3tzoB0h7MmINh5pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISFsIWD cn6CBrAvhqhUiogCnzJ7MB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHssplzSQgRoryF4FzUBjwSpNKHuzp42v/vxJerekMF1liR9jJJwJg iClcQxJOkzVj/4MJZ22o6QIWyTvr7a15hAYYMh8WFcbHkXvbPEjynwsbDxetEhKu uG7F/tOXvjdLe4jwE0msu5DOrpeizp9saFd1BXBU3jAqX7NMbzeM31Zaz2aRqB9B TKy7e7lhtDMmZS4WJTUM8ed3U1xlm3MhmmxVrE3UjwYyr3PhBWsnu5rnWIMeN5bR 3Hf6JUeMGkjCIwGKHh9jUh0RPbRRbaH4TqgY9+/3zIqdiNDwJAXbvk/hWt1Td0O9 cK584NAVqZ29TmCf4e37VlcV71AjtNJN -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:40 2025 by rpki-client