$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: ZFTgDdhSZVbvU77FB3znZvsUTrJ6AhhQeVkbYppJjwU= Subject key identifier: 32:0F:AD:33:4F:38:30:32:E2:9D:55:6D:3D:44:98:94:08:8E:07:67 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 80 Signing time: Mon 03 Nov 2025 06:53:36 +0000 Manifest this update: Mon 03 Nov 2025 06:53:35 +0000 Manifest next update: Mon 10 Nov 2025 06:53:35 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: G5h5GS1BnnXPgHN41iaABuAX21m0KgBDVfsPBWOr3PI=) 2: 3CAF51428A4011F089F66D4DC4F9AE02.roa (hash: ZzMBP858bjKyqNHajLa/B1+Ml+sgJ7x2b7/AcooKrCY=) 3: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 4: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 5: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Nov 3 06:53:35 2025 GMT Not After : Nov 10 06:53:35 2025 GMT Subject: CN=69085170-5d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:8a:52:05:3d:a4:cc:36:70:36:1a:2e:51: b3:7b:4f:3b:b6:05:f1:9b:17:56:f0:30:2e:37:23: 17:d1:a1:c9:32:b1:ec:fc:dc:9d:08:28:5a:4a:a3: 06:3a:f0:25:29:92:45:ad:c7:24:b1:f1:29:a6:17: 4f:a8:c7:f3:b2:4d:8d:f9:28:12:79:d3:80:2e:8e: 98:ee:36:f3:a5:35:ef:94:28:a0:fa:d1:f6:bc:6f: e5:2b:50:ab:d0:70:d6:41:86:25:bb:cc:71:aa:91: bf:0c:45:ac:bd:19:04:e9:2e:aa:31:94:96:be:8c: f7:7d:23:da:ee:4e:22:42:4b:e5:af:12:26:b7:24: 2b:7f:b2:8d:54:fd:43:b9:6d:36:bd:37:ff:9f:25: 45:14:81:dc:cf:6f:97:c2:d6:ba:75:50:20:02:8c: 9f:ba:d0:d4:9d:07:fc:6b:1a:dd:6f:af:a5:d3:08: 70:82:84:0b:5e:16:a5:82:62:bb:b8:0b:07:15:64: 3b:ef:9c:db:9e:b2:95:cd:3d:6c:d2:05:fb:09:d3: 66:64:5e:dc:07:9a:2a:b4:d7:c9:45:08:f4:ec:9d: ce:65:a6:71:96:d4:27:3f:a8:a0:f6:7a:83:4a:17: 8e:14:a4:cb:23:81:25:23:5b:b5:7d:c7:61:0f:c8: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:AD:33:4F:38:30:32:E2:9D:55:6D:3D:44:98:94:08:8E:07:67 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ed:9b:e0:ae:72:07:78:bf:e6:3c:31:03:62:06:2b:c7:f1: a0:45:c1:fb:b1:9f:8d:0d:42:a5:87:84:da:64:6c:3b:c4:9d: f8:ce:6c:7a:75:9a:23:f5:a2:75:4e:cf:72:16:5f:07:a5:40: 9e:d7:0c:e1:45:57:03:97:d5:60:97:0e:67:0e:7a:9e:d3:31: b7:24:b2:ef:fd:de:fb:0b:34:37:b9:7a:3c:dd:56:22:8a:50: 49:61:6d:33:fb:79:0d:1b:3a:c7:d3:2e:f0:ef:ca:cc:42:25: 29:2c:a3:0f:a3:2a:0b:80:16:a0:24:71:2a:f1:5a:03:02:f7: 4e:12:d9:01:f7:ce:5a:a6:c3:0e:a7:a1:f4:92:24:6e:ff:50: 01:ca:cf:6f:3e:9c:c1:ba:76:b7:c6:f3:d7:6e:a4:e3:cd:b8: 40:b7:56:df:6e:26:50:ad:23:2b:c8:8c:54:03:d3:4f:39:62: 1a:63:1a:3f:3d:55:9b:ff:3f:c2:45:a3:a4:8f:2f:04:e9:28: 33:ed:20:65:9f:12:9a:91:54:9a:4e:71:c0:68:64:97:58:6e: 3b:d4:da:92:c4:f3:a4:00:04:f0:09:09:60:08:dd:c0:ae:45: 82:45:83:78:e2:08:7c:7b:5e:38:78:f7:b2:aa:56:30:15:5b: 3d:00:40:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjUxMTAzMDY1MzM1WhcNMjUxMTEwMDY1MzM1WjAYMRYwFAYD VQQDEw02OTA4NTE3MC01ZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDqKUgU9pMw2cDYaLlGze087tgXxmxdW8DAuNyMX0aHJMrHs/NydCChaSqMG OvAlKZJFrccksfEpphdPqMfzsk2N+SgSedOALo6Y7jbzpTXvlCig+tH2vG/lK1Cr 0HDWQYYlu8xxqpG/DEWsvRkE6S6qMZSWvoz3fSPa7k4iQkvlrxImtyQrf7KNVP1D uW02vTf/nyVFFIHcz2+Xwta6dVAgAoyfutDUnQf8axrdb6+l0whwgoQLXhalgmK7 uAsHFWQ775zbnrKVzT1s0gX7CdNmZF7cB5oqtNfJRQj07J3OZaZxltQnP6ig9nqD SheOFKTLI4ElI1u1fcdhD8iBUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIPrTNP ODAy4p1VbT1EmJQIjgdnMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW7ZvgrnIHeL/mPDEDYgYrx/GgRcH7sZ+NDUKlh4TaZGw7xJ34zmx6 dZoj9aJ1Ts9yFl8HpUCe1wzhRVcDl9Vglw5nDnqe0zG3JLLv/d77CzQ3uXo83VYi ilBJYW0z+3kNGzrH0y7w78rMQiUpLKMPoyoLgBagJHEq8VoDAvdOEtkB985apsMO p6H0kiRu/1ABys9vPpzBuna3xvPXbqTjzbhAt1bfbiZQrSMryIxUA9NPOWIaYxo/ PVWb/z/CRaOkjy8E6Sgz7SBlnxKakVSaTnHAaGSXWG471NqSxPOkAATwCQlgCN3A rkWCRYN44gh8e144ePeyqlYwFVs9AECx -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:17 2025 by rpki-client