$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: c2ZrNki2bCmLJWlFC6f7AUVuPipHsE185N+Y5YmHu0E= Subject key identifier: B1:B7:00:D1:2E:84:6D:D7:3F:C5:FD:5C:7E:EC:DB:42:24:66:D1:4F Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1ED2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1EC2 Signing time: Sun 02 Nov 2025 16:03:19 +0000 Manifest this update: Sun 02 Nov 2025 16:03:18 +0000 Manifest next update: Sun 09 Nov 2025 16:03:18 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: Re/eP3aGllda2zeSFf+kgQwLdkG39gvsr1l5auFxw0Q=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7890 (0x1ed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Nov 2 16:03:18 2025 GMT Not After : Nov 9 16:03:18 2025 GMT Subject: CN=690780c6-66bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:4c:91:1c:e0:9b:de:dc:9f:78:b1:c9:40: 86:be:6f:0c:f7:4c:f2:49:ad:7d:fc:2e:d9:75:41: 9f:21:7d:05:c9:64:f9:67:6d:99:1d:e2:5e:05:40: 85:b9:e6:1e:7c:82:e9:17:c2:41:20:8e:07:f0:99: af:c3:79:f6:d9:2c:b6:5d:b1:72:f8:d8:96:97:59: 56:c9:d4:a0:e8:43:09:8c:2c:1c:75:7d:4f:49:f1: ee:1f:a7:06:13:4b:77:f6:e6:f7:14:57:50:40:ec: 2a:e3:57:47:76:b9:b8:49:a8:e3:51:c3:0d:c2:d9: ae:fa:2e:59:ef:e9:e9:8f:31:33:99:c9:e0:83:f7: 16:bd:2e:91:f4:4d:d2:7a:57:65:c5:a2:69:e2:98: 8c:2f:5c:a2:32:22:7c:10:c0:e5:9f:94:94:1d:19: b4:81:fa:5f:8c:f2:55:49:92:79:21:b6:cc:fb:63: f8:78:84:44:46:6d:e4:67:86:b5:2c:e3:83:77:e9: e5:14:87:2b:7c:56:cb:46:d7:8e:34:ae:c6:d9:4c: 8a:7e:bb:3c:76:64:97:a4:5f:f4:fa:1b:79:3f:96: df:e7:06:db:d4:71:bc:08:66:b3:87:f2:24:fb:1f: c0:49:28:19:3d:1e:b8:9f:f4:22:7f:fc:7d:0e:22: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B7:00:D1:2E:84:6D:D7:3F:C5:FD:5C:7E:EC:DB:42:24:66:D1:4F X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3f:1a:05:ce:f4:55:c1:90:48:5d:5a:0b:6d:0c:89:02:dc: 66:27:01:b3:bd:d1:6c:7f:ab:fc:7c:d2:7b:00:fa:44:b5:b8: ed:ce:f6:d8:83:a4:c2:24:b4:62:f3:ce:5c:48:6d:42:55:87: 3f:31:c5:74:9a:f7:c1:08:1e:b5:82:9f:e0:d6:a2:c0:01:77: b5:04:c8:f9:d5:58:10:3b:48:93:74:7a:b0:6b:e0:13:9a:d2: 1e:62:8b:1f:2a:81:c7:bf:0f:5a:f7:e4:e6:59:c2:2b:18:a0: 89:d6:07:e7:27:c0:7d:80:82:a8:27:9e:a8:38:58:db:4f:20: f1:20:28:97:e4:72:06:cb:4d:e7:22:04:64:f8:d1:3a:9b:20: 4c:86:26:cc:63:cd:6e:06:98:b5:a7:a0:01:85:77:e9:1f:1a: 02:3c:43:dd:3d:51:9a:8a:fe:94:db:bd:3d:0b:94:aa:3f:ad: f1:9a:32:e6:f9:bc:c3:43:b4:6a:2e:98:c2:33:8c:78:d2:58: 9d:16:24:b1:50:c3:69:39:1b:6d:4b:c4:44:9f:5d:53:ff:67: d3:c7:10:f4:94:e1:a7:cb:59:e8:0b:b4:21:48:67:fe:1a:1d: ea:27:be:46:4f:75:7a:23:22:66:bc:de:a5:f7:b3:69:a3:6d: 3f:e1:03:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUxMTAyMTYwMzE4WhcNMjUxMTA5MTYwMzE4WjAYMRYwFAYD VQQDEw02OTA3ODBjNi02NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFxMkRzgm97cn3ixyUCGvm8M90zySa19/C7ZdUGfIX0FyWT5Z22ZHeJeBUCF ueYefILpF8JBII4H8Jmvw3n22Sy2XbFy+NiWl1lWydSg6EMJjCwcdX1PSfHuH6cG E0t39ub3FFdQQOwq41dHdrm4SajjUcMNwtmu+i5Z7+npjzEzmcngg/cWvS6R9E3S eldlxaJp4piML1yiMiJ8EMDln5SUHRm0gfpfjPJVSZJ5IbbM+2P4eIRERm3kZ4a1 LOODd+nlFIcrfFbLRteONK7G2UyKfrs8dmSXpF/0+ht5P5bf5wbb1HG8CGazh/Ik +x/ASSgZPR64n/Qif/x9DiLPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG3ANEu hG3XP8X9XH7s20IkZtFPMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbPxoFzvRVwZBIXVoLbQyJAtxmJwGzvdFsf6v8fNJ7APpEtbjtzvbY g6TCJLRi885cSG1CVYc/McV0mvfBCB61gp/g1qLAAXe1BMj51VgQO0iTdHqwa+AT mtIeYosfKoHHvw9a9+TmWcIrGKCJ1gfnJ8B9gIKoJ56oOFjbTyDxICiX5HIGy03n IgRk+NE6myBMhibMY81uBpi1p6ABhXfpHxoCPEPdPVGaiv6U2709C5SqP63xmjLm +bzDQ7RqLpjCM4x40lidFiSxUMNpORttS8REn11T/2fTxxD0lOGny1noC7QhSGf+ Gh3qJ75GT3V6IyJmvN6l97Npo20/4QO1 -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:59 2025 by rpki-client