$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: WheHq2/CGU6NyUb5c/axsdLXlSqOVthLJuasMWQAeFY= Subject key identifier: 8E:6D:06:CB:4E:0C:DB:10:35:88:89:12:2C:FA:8E:86:08:91:2C:FE Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: D6 Signing time: Wed 05 Nov 2025 06:41:54 +0000 Manifest this update: Wed 05 Nov 2025 06:41:53 +0000 Manifest next update: Wed 12 Nov 2025 06:41:53 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: OUWSy5nBSiC9H/LECqrwU9vYJ5QWuy2QDg5EWd/Nktw=) 2: 1BD61F645C8711F0923DB116C4F9AE02.roa (hash: nRkOXuAiT1sPCocq+nXPsFuQBgyiZlYhGRugxDZwnSc=) 3: F830F4564F3611F0A970852BC4F9AE02.roa (hash: fiG3ruzyUrai5g5VaE9UAGeJtws3GlUHxnca+lWelW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Nov 5 06:41:53 2025 GMT Not After : Nov 12 06:41:53 2025 GMT Subject: CN=690af1b1-5785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:db:7d:e6:03:e0:22:66:f1:c5:a9:64:b5:8a: 0e:b8:54:a0:b1:09:87:50:07:de:52:b8:70:ca:a2: 3e:1e:2d:ff:67:2f:f4:17:f0:9f:99:fe:ff:db:5b: b7:b9:eb:5f:1b:70:3c:cc:ee:b1:2d:dc:83:1a:f0: 79:b3:27:fb:12:7a:88:c7:d3:83:f2:e7:2d:96:53: 14:8b:0c:47:1d:d8:0f:41:65:69:f5:f9:a4:bf:5b: a1:19:21:ba:be:9e:3f:f9:a1:12:6b:e4:45:3b:6e: 46:5c:e6:24:52:60:b7:66:d8:72:e3:4a:19:93:2d: f3:31:fd:47:02:fb:a9:a4:69:94:01:19:c7:dd:16: bf:e0:84:17:cb:17:1d:6e:28:58:60:08:28:2b:d7: 57:e0:48:7b:b2:8b:e1:2d:a7:29:75:75:cc:70:a5: a6:5d:94:d1:aa:b6:58:6c:45:1b:e1:e5:5b:94:94: 4a:1e:b6:34:5c:ce:77:f1:af:52:89:f0:3b:01:13: de:ad:13:2c:a0:67:c0:e4:a0:7e:2d:2c:8a:3c:0d: bb:bd:f7:e1:e4:a7:17:1b:2e:24:53:89:2d:97:93: c0:6a:aa:da:06:6e:2d:7c:2e:86:84:a5:b2:f7:7e: 79:99:b4:e5:8b:e4:88:ac:84:82:10:d9:34:a4:9f: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6D:06:CB:4E:0C:DB:10:35:88:89:12:2C:FA:8E:86:08:91:2C:FE X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:cb:eb:f1:76:99:82:30:79:02:64:00:00:9b:21:5d:d1:c0: 77:90:c4:fa:ab:19:56:fa:1f:77:cc:6d:c1:d3:d3:b2:47:1a: e9:5b:00:9a:46:0a:a8:21:0f:0f:f6:07:0c:70:66:44:3f:29: 48:3f:4f:57:e2:88:64:2d:81:61:a3:d2:bf:69:20:42:e1:64: df:bb:92:c8:26:58:19:8c:58:23:01:bc:d5:cf:d7:7f:d2:9d: 6e:00:73:15:77:79:dc:5b:e5:d9:6e:14:16:2f:eb:b7:05:6a: e7:e7:bd:8d:17:4e:7c:19:5c:14:da:b1:63:3b:7b:1a:03:0b: 56:f7:95:95:77:25:21:c1:be:7e:11:81:db:85:c8:31:e0:47: 1d:c9:d7:44:ad:4f:50:a6:38:26:59:58:25:1e:87:d5:79:9c: 75:06:d7:ac:1a:f2:4c:18:aa:97:f3:ef:52:f1:7c:4e:9b:92: ff:fb:61:35:de:e2:1f:ca:23:d6:5e:79:6b:26:ab:7b:7c:74: d8:be:e9:67:69:2a:43:1f:4f:ce:5d:1e:ad:94:9b:67:49:35: 42:85:b7:5c:db:6c:9c:00:3f:c8:2a:58:81:83:9f:fe:28:ce: 8a:83:b2:48:31:68:f7:f9:8f:5e:73:f9:ee:72:9e:e6:ca:24: 01:52:f1:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw NzcwRTI5MEQwHhcNMjUxMTA1MDY0MTUzWhcNMjUxMTEyMDY0MTUzWjAYMRYwFAYD VQQDEw02OTBhZjFiMS01Nzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dt95gPgImbxxalktYoOuFSgsQmHUAfeUrhwyqI+Hi3/Zy/0F/Cfmf7/21u3 uetfG3A8zO6xLdyDGvB5syf7EnqIx9OD8uctllMUiwxHHdgPQWVp9fmkv1uhGSG6 vp4/+aESa+RFO25GXOYkUmC3Zthy40oZky3zMf1HAvuppGmUARnH3Ra/4IQXyxcd bihYYAgoK9dX4Eh7sovhLacpdXXMcKWmXZTRqrZYbEUb4eVblJRKHrY0XM538a9S ifA7ARPerRMsoGfA5KB+LSyKPA27vffh5KcXGy4kU4ktl5PAaqraBm4tfC6GhKWy 9355mbTli+SIrISCENk0pJ/YpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5tBstO DNsQNYiJEiz6joYIkSz+MB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX bmhQaHo5RmhzZllIY09LUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNy+vxdpmCMHkCZAAAmyFd0cB3kMT6qxlW+h93zG3B09OyRxrpWwCa RgqoIQ8P9gcMcGZEPylIP09X4ohkLYFho9K/aSBC4WTfu5LIJlgZjFgjAbzVz9d/ 0p1uAHMVd3ncW+XZbhQWL+u3BWrn572NF058GVwU2rFjO3saAwtW95WVdyUhwb5+ EYHbhcgx4EcdyddErU9QpjgmWVglHofVeZx1BtesGvJMGKqX8+9S8XxOm5L/+2E1 3uIfyiPWXnlrJqt7fHTYvulnaSpDH0/OXR6tlJtnSTVChbdc22ycAD/IKliBg5/+ KM6Kg7JIMWj3+Y9ec/nucp7myiQBUvFU -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:09 2025 by rpki-client