$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json) Hash identifier: +nv2UPK1RRsVua84KvawNoO8c8GCVEPur/jUjT07V0Q= Subject key identifier: 13:DA:C1:BC:6B:7B:07:A7:5B:9F:DE:2B:C6:14:49:07:07:1D:85:C9 Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft Manifest number: 79 Signing time: Wed 05 Nov 2025 07:00:42 +0000 Manifest this update: Wed 05 Nov 2025 07:00:41 +0000 Manifest next update: Wed 12 Nov 2025 07:00:41 +0000 Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: lR0hhm0lLP8pYJrExdpR/ULyF9jxJYJSP1xnhpZW0po=) 2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: rAyLEuhdwnMPn+ymXVwfBwimmdxQ/627KOj67XHuGHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Validity Not Before: Nov 5 07:00:41 2025 GMT Not After : Nov 12 07:00:41 2025 GMT Subject: CN=690af61a-1017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:5e:dc:47:95:14:29:bc:46:62:6e:d2:06: 5b:85:9f:48:f4:a0:9d:c9:3f:09:13:b4:83:04:c8: ec:10:46:3e:f5:15:60:7d:12:e2:79:a5:8c:5d:b5: 6b:2e:ff:bc:5f:f0:04:11:e4:0e:93:e4:3e:e9:8f: 13:6a:de:f0:9a:0e:f1:a4:68:8f:cb:64:3a:09:38: 47:5f:6c:04:1b:7a:25:34:b4:23:74:99:9b:26:a4: 29:07:68:8a:5f:33:63:ed:33:d3:2c:52:01:ce:f5: 1d:75:d4:8b:8f:d1:08:9f:05:67:1f:7f:a9:90:4d: 62:47:52:e6:7b:bc:5d:4b:09:f3:2a:b3:4e:98:5b: 6d:08:52:f8:3b:d9:65:ed:f0:e9:db:f1:73:e6:10: af:ba:b0:1d:e5:eb:98:f1:0d:9f:55:96:66:6b:7c: 49:9b:4c:9b:a5:c2:80:29:0f:8c:13:fe:14:d0:26: 1d:dc:cd:df:1d:67:b3:dd:65:6e:65:89:1c:b2:be: 0a:2b:be:2a:30:fa:0b:4c:4d:d5:1e:40:c3:9c:52: 4d:93:f1:ca:78:f3:f1:18:62:4b:8e:a9:4c:11:80: 54:dd:d1:24:6c:38:0a:76:83:59:28:e3:af:f4:b3: 7f:71:1d:cf:58:e1:12:06:bb:2f:92:09:a1:21:cb: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DA:C1:BC:6B:7B:07:A7:5B:9F:DE:2B:C6:14:49:07:07:1D:85:C9 X509v3 Authority Key Identifier: keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:34:7f:34:8d:3d:30:03:52:e8:d3:01:b9:96:a6:5e:d6:f1: 48:7d:89:66:bd:a9:85:80:f7:ed:d1:79:11:96:34:2c:f6:02: d7:47:37:0e:4e:c5:37:d0:a6:fa:4e:ea:71:b5:0d:94:89:82: 3d:2f:d6:cb:91:80:70:67:77:e3:43:13:16:d4:72:33:31:e0: 08:45:6f:1d:f1:d8:9d:49:6d:74:5e:8e:4c:c6:fc:e0:c5:f8: df:af:74:17:e6:f2:8f:fa:81:f4:57:ba:d0:97:19:38:dd:e4: 12:99:a7:0d:43:7d:87:5f:41:d0:a2:8c:0c:4b:21:02:d4:c8: 38:6e:04:33:6d:c9:ad:85:73:7a:98:39:68:19:c7:ac:4f:c3: 86:a3:0d:6a:76:9c:f5:aa:df:9d:71:89:78:d6:1b:38:25:d7: bc:bf:69:a1:10:0a:0a:ad:76:15:54:e7:d8:06:f2:c0:13:70: 50:4e:ff:8e:b9:33:3a:36:b5:96:d4:c3:d5:15:08:9e:12:66: f7:ef:32:d2:e2:b3:34:68:e2:f3:b2:df:61:2c:bb:6e:09:26: d3:3f:a4:89:6d:23:30:53:88:14:3b:fe:74:ea:41:53:73:0f: 3b:8e:c9:f2:08:2c:e3:f7:f7:37:d9:33:63:d4:f5:38:f3:39: 15:42:aa:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI4NTExMC8GA1UEBRMoMkUwMzdGMjIxQzlBOEQ1RkRDQzg4QzQzQ0E4QjI1RDQ0 MzZCQjAzOTAeFw0yNTExMDUwNzAwNDFaFw0yNTExMTIwNzAwNDFaMBgxFjAUBgNV BAMTDTY5MGFmNjFhLTEwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqhl7cR5UUKbxGYm7SBluFn0j0oJ3JPwkTtIMEyOwQRj71FWB9EuJ5pYxdtWsu /7xf8AQR5A6T5D7pjxNq3vCaDvGkaI/LZDoJOEdfbAQbeiU0tCN0mZsmpCkHaIpf M2PtM9MsUgHO9R111IuP0QifBWcff6mQTWJHUuZ7vF1LCfMqs06YW20IUvg72WXt 8Onb8XPmEK+6sB3l65jxDZ9VlmZrfEmbTJulwoApD4wT/hTQJh3czd8dZ7PdZW5l iRyyvgorviow+gtMTdUeQMOcUk2T8cp48/EYYkuOqUwRgFTd0SRsOAp2g1ko46/0 s39xHc9Y4RIGuy+SCaEhy+z1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE9rBvGt7 B6dbn94rxhRJBwcdhckwHwYDVR0jBBgwFoAULgN/IhyajV/cyIxDyosl1ENrsDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjg1LzhDMjU4QjEyMDI3 QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdOX0loeWFqVl9jeUl4RHlvc2wxRU5yc0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjg1LzhDMjU4QjEyMDI3QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZf Y3lJeER5b3NsMUVOcnNEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALY0fzSNPTADUujTAbmWpl7W8Uh9iWa9qYWA9+3ReRGWNCz2AtdHNw5O xTfQpvpO6nG1DZSJgj0v1suRgHBnd+NDExbUcjMx4AhFbx3x2J1JbXRejkzG/ODF +N+vdBfm8o/6gfRXutCXGTjd5BKZpw1DfYdfQdCijAxLIQLUyDhuBDNtya2Fc3qY OWgZx6xPw4ajDWp2nPWq351xiXjWGzgl17y/aaEQCgqtdhVU59gG8sATcFBO/465 Mzo2tZbUw9UVCJ4SZvfvMtLiszRo4vOy32Esu24JJtM/pIltIzBTiBQ7/nTqQVNz DzuOyfIILOP39zfZM2PU9TjzORVCqlY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:33 2025 by rpki-client