$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: 1XAfUmX8MNuKD3cq/RF+HRWgQ9v6pb3IdO0OTbLZ570= Subject key identifier: 67:76:BD:39:A0:B0:A5:84:3B:37:6B:F0:73:A7:42:E6:33:7E:83:9B Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 13A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 1349 Signing time: Tue 04 Nov 2025 17:08:35 +0000 Manifest this update: Tue 04 Nov 2025 17:08:34 +0000 Manifest next update: Tue 11 Nov 2025 17:08:34 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: Sq+4z7R+ISgaUshwHz5OWbpvWtlLYR3Hwh/I8HRqmqQ=) 2: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: nyv08QSRNJhv3RvW17AH6qbhQ4D5Q9YXzn9YfgnDQT8=) 3: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 4: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) 5: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5026 (0x13a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Nov 4 17:08:34 2025 GMT Not After : Nov 11 17:08:34 2025 GMT Subject: CN=690a3313-6d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:29:da:21:5e:e8:1c:e1:31:a9:fb:8b:5d: f4:62:ff:5d:3b:e0:51:58:ac:10:e6:38:6c:44:14: b2:0f:0e:62:c7:db:c8:44:b4:47:c9:33:28:8e:32: da:90:46:96:13:0b:6b:ba:f8:4a:18:c9:af:99:b2: b2:06:cc:c0:a5:42:f3:50:b5:27:42:9a:8f:b1:95: 4d:16:d4:0a:99:70:5a:ff:6e:c9:b5:0b:bb:2f:e8: 43:0d:5a:1c:94:bc:f2:12:2e:88:f7:d9:f8:e1:90: 93:76:22:8d:74:2a:28:e5:70:97:0b:2a:f1:89:3f: 8f:85:79:08:0d:ab:4b:66:42:34:c0:2e:ae:f1:a0: 9d:f2:aa:9c:ef:e2:68:90:92:77:17:7b:4d:bd:98: 2b:7a:15:4b:1c:e3:0d:9d:9c:80:9c:0e:d0:8d:09: fa:58:1d:31:6e:b4:a4:5c:d4:db:2e:b5:8f:92:68: ae:3f:e7:e7:df:34:ff:db:89:7b:b3:d0:d8:bb:f4: 43:16:bc:6e:10:26:80:8b:7e:34:64:e8:4b:c7:8a: 93:c6:be:a7:75:a5:07:9b:bb:b9:dc:ca:3d:91:f6: a1:d6:28:98:7f:19:eb:ee:52:11:0c:ae:8b:cd:6b: 00:8a:d3:35:88:94:8b:6f:5f:c5:05:dc:ef:32:28: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:76:BD:39:A0:B0:A5:84:3B:37:6B:F0:73:A7:42:E6:33:7E:83:9B X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:97:03:27:a9:a5:c4:6a:40:94:5f:89:7a:f1:c9:20:79: 0f:e0:f5:d1:d6:b8:67:98:7e:17:0b:f2:14:15:42:46:25:bf: 0a:59:c3:ba:0d:9c:0b:a1:aa:d4:2c:be:23:3a:09:7c:c2:d7: 4e:44:98:c9:88:9d:95:94:e3:2d:60:19:de:8c:7d:de:16:cd: fd:d4:fa:05:e3:bd:69:77:be:13:fd:bf:26:9f:9c:44:4f:ca: 60:be:f1:7d:c3:96:92:ea:0d:8d:c6:7e:0e:5e:1b:98:59:c8: 7e:96:55:f1:dd:31:25:a5:d3:af:78:13:64:cc:b4:c3:f1:a5: 1a:42:29:a3:35:31:26:fe:2a:88:bf:b0:3c:84:f7:3e:c2:aa: 80:c9:93:74:17:9a:43:0e:97:37:1d:0d:eb:bd:27:85:30:2c: 02:44:e7:f8:30:f4:5a:88:ce:34:70:62:07:36:a4:33:1b:32: 87:4e:5e:b6:c2:7d:51:de:cc:68:1b:99:01:93:e6:fa:12:a6: 56:b7:54:af:c5:26:07:b2:76:2f:cb:cc:99:21:0b:e9:e9:ba: 07:d8:ec:7b:12:ff:ef:7d:02:29:81:96:01:60:80:eb:da:08: 37:46:97:fa:21:b5:c2:0f:e0:80:14:f9:10:a4:25:28:8c:67: ec:ab:c2:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUxMTA0MTcwODM0WhcNMjUxMTExMTcwODM0WjAYMRYwFAYD VQQDEw02OTBhMzMxMy02ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rsp2iFe6BzhMan7i130Yv9dO+BRWKwQ5jhsRBSyDw5ix9vIRLRHyTMojjLa kEaWEwtruvhKGMmvmbKyBszApULzULUnQpqPsZVNFtQKmXBa/27JtQu7L+hDDVoc lLzyEi6I99n44ZCTdiKNdCoo5XCXCyrxiT+PhXkIDatLZkI0wC6u8aCd8qqc7+Jo kJJ3F3tNvZgrehVLHOMNnZyAnA7QjQn6WB0xbrSkXNTbLrWPkmiuP+fn3zT/24l7 s9DYu/RDFrxuECaAi340ZOhLx4qTxr6ndaUHm7u53Mo9kfah1iiYfxnr7lIRDK6L zWsAitM1iJSLb1/FBdzvMijEkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd2vTmg sKWEOzdr8HOnQuYzfoObMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiDZcDJ6mlxGpAlF+JevHJIHkP4PXR1rhnmH4XC/IUFUJGJb8KWcO6 DZwLoarULL4jOgl8wtdORJjJiJ2VlOMtYBnejH3eFs391PoF471pd74T/b8mn5xE T8pgvvF9w5aS6g2Nxn4OXhuYWch+llXx3TElpdOveBNkzLTD8aUaQimjNTEm/iqI v7A8hPc+wqqAyZN0F5pDDpc3HQ3rvSeFMCwCROf4MPRaiM40cGIHNqQzGzKHTl62 wn1R3sxoG5kBk+b6EqZWt1SvxSYHsnYvy8yZIQvp6boH2Ox7Ev/vfQIpgZYBYIDr 2gg3Rpf6IbXCD+CAFPkQpCUojGfsq8LL -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:33 2025 by rpki-client