$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft File: LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json) Hash identifier: DPll8WjQQobathKh9PBQQL8UFB0P6nJpAMLKDu9yE+4= Subject key identifier: C0:2F:C5:81:0A:BE:EB:7A:B6:4B:81:40:8D:2D:DB:C1:FF:9A:57:1F Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36 Certificate issuer: /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636 Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft Manifest number: 09D4 Signing time: Sun 02 Nov 2025 19:55:49 +0000 Manifest this update: Sun 02 Nov 2025 19:55:49 +0000 Manifest next update: Sun 09 Nov 2025 19:55:49 +0000 Files and hashes: 1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: w3RgjYc5z5BKTV/YH0bdDFygj0TWVAShz1V5lREWaoc=) 2: 87818166020D11EF916F0D65C4F9AE02.roa (hash: 4GMMhSURpIBkWAvEdhOIay2AAC4Jz1BwpUEUv1geigk=) 3: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: H4bAXJJ+0ihkBBeD63YdMNR3q/0ZrnIacu1H+UbOy6o=) 4: 76A97C669D2C11F0AB031860C4F9AE02.roa (hash: Rh+7VaIgTDzOZzxYufOQIB2tf+6Tujram/pUAZ0Ovn4=) 5: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: /FujlFAyrY1jTg6+i8dggU4h4o/QM+HKDMk+iHCipo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636 Validity Not Before: Nov 2 19:55:49 2025 GMT Not After : Nov 9 19:55:49 2025 GMT Subject: CN=6907b745-bf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:ff:9c:34:55:94:71:1f:bc:ce:d6:19:af: dc:3c:ca:15:3a:1e:a8:24:93:8b:18:24:45:98:ad: 26:3b:3f:74:2a:6b:14:b1:7b:72:95:1a:1c:76:90: c9:f7:d1:0c:52:bf:29:4c:d8:4f:b9:29:50:d9:3d: 7c:98:57:46:80:5d:f9:67:5f:01:7c:7b:38:d7:57: f3:81:8f:47:84:9b:0d:d2:f7:17:0b:8a:62:43:ba: 3d:b6:99:82:48:e8:6b:30:bd:f9:73:76:b3:89:dc: 1c:0e:8c:87:07:83:ab:75:53:a8:46:86:08:39:76: 4d:40:30:75:8d:5e:df:8d:df:bf:a9:6c:b8:7a:58: e6:61:0c:9a:fe:33:e6:9e:10:2d:48:7c:90:16:49: 2e:6f:1c:ca:e7:67:a8:e3:1a:51:32:1f:62:d3:75: 86:f5:53:93:ed:1c:29:9e:6d:30:80:c5:7e:a4:63: 0a:47:6d:a0:aa:24:80:5e:97:e9:30:a4:a4:96:7f: e8:57:af:b4:a0:5c:1c:a2:3b:93:aa:de:cd:63:73: ad:d5:8e:02:65:67:44:34:e2:df:3a:d8:ce:06:c5: 25:eb:6c:6d:03:b3:1f:c2:5f:85:64:e1:3a:ff:4f: 7e:68:e5:32:52:1d:f9:41:db:bb:e7:6f:bc:26:87: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2F:C5:81:0A:BE:EB:7A:B6:4B:81:40:8D:2D:DB:C1:FF:9A:57:1F X509v3 Authority Key Identifier: keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:ff:e5:f3:ed:49:51:9c:c0:f3:ca:67:72:2b:20:06:de: bd:9b:49:33:a6:96:f7:e9:8d:d5:db:75:42:a0:7c:ac:45:32: 02:5e:6e:36:b3:07:71:f6:53:05:e5:6c:38:57:22:00:e5:21: 1c:e7:8e:40:0b:0c:e1:d4:a5:76:80:04:7d:40:05:19:14:7c: 25:2a:e7:79:d5:87:76:8c:89:90:2f:1f:06:e0:6f:d2:a2:45: 4c:06:41:44:15:df:f9:ff:8f:86:34:1d:95:dd:3a:f5:d1:c3: 17:58:f8:ea:83:fd:cd:e8:93:89:12:01:e4:46:03:47:1f:d6: 9c:bf:88:38:85:68:9f:5a:57:1f:09:d3:d3:72:f4:90:63:b9: 1b:ab:bb:81:4c:51:11:fe:a7:ec:d3:2f:c1:da:f8:cf:61:78: d2:1d:fb:48:70:3f:b4:26:2a:bb:28:66:29:1a:e6:4b:fe:36: 1c:1e:c9:37:41:c7:fb:cc:31:7d:74:05:5c:0c:f4:2b:78:5f: 75:19:56:e7:4b:f1:1d:83:85:38:ac:aa:d5:b2:ae:4d:61:7e: 1d:40:fb:d7:52:6a:8e:04:13:25:68:1a:0f:57:08:11:0a:a6: 19:b1:8d:14:d2:bb:27:31:a7:0a:4b:b4:65:2b:48:0f:b0:03: 68:b4:39:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5MEMxMTAvBgNVBAUTKDJENTg5ODkwNDhDMjE5RjAxMDg4QUU3MkJGQUUwOTcw REY1REE2MzYwHhcNMjUxMTAyMTk1NTQ5WhcNMjUxMTA5MTk1NTQ5WjAYMRYwFAYD VQQDEw02OTA3Yjc0NS1iZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3P/nDRVlHEfvM7WGa/cPMoVOh6oJJOLGCRFmK0mOz90KmsUsXtylRocdpDJ 99EMUr8pTNhPuSlQ2T18mFdGgF35Z18BfHs411fzgY9HhJsN0vcXC4piQ7o9tpmC SOhrML35c3azidwcDoyHB4OrdVOoRoYIOXZNQDB1jV7fjd+/qWy4eljmYQya/jPm nhAtSHyQFkkubxzK52eo4xpRMh9i03WG9VOT7Rwpnm0wgMV+pGMKR22gqiSAXpfp MKSkln/oV6+0oFwcojuTqt7NY3Ot1Y4CZWdENOLfOtjOBsUl62xtA7Mfwl+FZOE6 /09+aOUyUh35Qdu752+8JofjrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAvxYEK vut6tkuBQI0t28H/mlcfMB8GA1UdIwQYMBaAFC1YmJBIwhnwEIiucr+uCXDfXaY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjkwQy9EM0Q1ODQ4QzhG QkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dmQVFpSzV5djY0SmNOOWRw alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWaVlrRWpDR2ZBUWlLNXl2NjRKY045ZHBqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjkwQy9EM0Q1ODQ4QzhGQkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dm QVFpSzV5djY0SmNOOWRwalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjE//l8+1JUZzA88pncisgBt69m0kzppb36Y3V23VCoHysRTICXm42 swdx9lMF5Ww4VyIA5SEc545ACwzh1KV2gAR9QAUZFHwlKud51Yd2jImQLx8G4G/S okVMBkFEFd/5/4+GNB2V3Tr10cMXWPjqg/3N6JOJEgHkRgNHH9acv4g4hWifWlcf CdPTcvSQY7kbq7uBTFER/qfs0y/B2vjPYXjSHftIcD+0Jiq7KGYpGuZL/jYcHsk3 Qcf7zDF9dAVcDPQreF91GVbnS/Edg4U4rKrVsq5NYX4dQPvXUmqOBBMlaBoPVwgR CqYZsY0U0rsnMacKS7RlK0gPsANotDnh -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:58 2025 by rpki-client