$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: in8kT64aAc4PZIExKtUlrJPwzBw0DR/oReF8CDBESTs= Subject key identifier: 86:AB:E6:1A:5B:BD:62:6B:07:CF:9B:9A:22:8E:46:A5:8D:FA:6C:A9 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 68 Signing time: Tue 16 Sep 2025 01:45:20 +0000 Manifest this update: Tue 16 Sep 2025 01:45:19 +0000 Manifest next update: Tue 23 Sep 2025 01:45:19 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: MbOKGJFul7Z3018eFWl8nlroQq0qGVKkp2yT2fMjW78=) 2: 3CAF51428A4011F089F66D4DC4F9AE02.roa (hash: ZzMBP858bjKyqNHajLa/B1+Ml+sgJ7x2b7/AcooKrCY=) 3: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 4: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 5: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 01:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Sep 16 01:45:19 2025 GMT Not After : Sep 23 01:45:19 2025 GMT Subject: CN=68c8c130-9bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:e3:ea:9d:5a:02:ba:1e:cc:4a:45:aa:11: 6b:93:6e:46:a1:e5:86:54:f1:db:cf:1d:16:9d:34: 1b:7f:41:26:c8:35:81:e5:29:13:fa:75:56:f4:24: 62:00:f1:95:b6:10:36:b9:a0:b1:cb:16:41:14:f8: d9:f6:7b:e1:05:e1:76:88:5a:1e:4b:6b:e6:bf:2f: 8e:8f:f3:ab:f5:6d:cd:6c:eb:0d:20:b1:fa:1e:13: 2e:09:96:b0:d3:58:67:1d:d2:76:25:70:8b:95:ee: 4f:16:e1:4a:42:f0:7c:d4:29:b8:c8:48:b3:ca:9f: 69:c3:54:65:b2:59:e7:ca:8e:c6:12:0d:7b:6d:c2: b6:2f:94:86:4e:d3:6b:38:50:58:d5:e0:f2:56:f2: 26:49:cd:b6:cc:fb:f0:29:aa:34:eb:79:77:74:72: 52:57:36:9a:42:66:9d:f1:d9:09:c4:5f:4f:49:83: 29:5b:6a:68:99:62:45:e9:ec:5c:1d:d8:72:c2:ac: 05:33:3c:c5:39:ff:61:27:2b:ae:2e:53:c3:99:fc: 7d:bb:b0:5a:5c:1b:22:af:fd:bf:77:88:d1:bf:d9: 8e:af:0c:dc:71:38:88:77:6a:ae:54:70:27:70:7c: c4:72:8b:26:87:27:4a:05:58:2a:fa:6d:99:1a:e8: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:E6:1A:5B:BD:62:6B:07:CF:9B:9A:22:8E:46:A5:8D:FA:6C:A9 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:94:86:b6:6b:67:bf:04:2f:e5:82:fa:7f:30:c2:66:bb:55: 89:92:37:5c:e7:fd:09:f9:51:32:f5:44:5f:22:49:03:8a:45: aa:2d:f3:38:04:ac:a7:52:73:4e:c7:e8:5f:51:77:54:b5:20: 65:e2:e9:d8:e8:86:96:7f:e9:3b:d8:8e:08:71:99:76:c0:3b: 29:f3:32:98:50:85:3a:02:bf:85:a6:22:35:5b:ad:43:ca:4c: b3:2e:5d:31:69:2b:0b:1e:5a:6b:cf:fd:91:05:f4:12:3b:d5: d0:4a:82:87:c1:97:b7:71:f2:4f:b0:45:87:70:ea:da:ce:cc: 66:47:b7:32:55:c8:d9:56:bc:77:e2:6b:92:ed:24:cb:05:d0: 42:db:2c:93:b5:0b:56:41:d8:5a:4b:05:a9:02:30:c7:5d:26: 39:d4:a5:8a:7f:3f:d2:b4:fe:4a:50:51:5c:88:ab:c0:30:2a: 57:c2:96:01:c7:37:4f:32:f0:88:e9:76:bf:40:82:b7:bb:29: 35:4a:c9:8e:c0:96:af:0e:3e:55:9f:12:3f:87:0f:20:82:82: 4b:7c:10:e8:06:e5:0c:a7:48:3c:ea:be:a5:d0:54:67:00:17: bb:01:d3:5f:29:1b:66:89:cd:f1:b9:a6:f5:83:b7:11:1c:ff: 37:b2:dd:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA5MTYwMTQ1MTlaFw0yNTA5MjMwMTQ1MTlaMBgxFjAUBgNV BAMTDTY4YzhjMTMwLTliZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCViOPqnVoCuh7MSkWqEWuTbkah5YZU8dvPHRadNBt/QSbINYHlKRP6dVb0JGIA 8ZW2EDa5oLHLFkEU+Nn2e+EF4XaIWh5La+a/L46P86v1bc1s6w0gsfoeEy4JlrDT WGcd0nYlcIuV7k8W4UpC8HzUKbjISLPKn2nDVGWyWefKjsYSDXttwrYvlIZO02s4 UFjV4PJW8iZJzbbM+/ApqjTreXd0clJXNppCZp3x2QnEX09JgylbamiZYkXp7Fwd 2HLCrAUzPMU5/2EnK64uU8OZ/H27sFpcGyKv/b93iNG/2Y6vDNxxOIh3aq5UcCdw fMRyiyaHJ0oFWCr6bZka6JMZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhqvmGlu9 YmsHz5uaIo5GpY36bKkwHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2UhrZrZ78EL+WC+n8wwma7VYmSN1zn/Qn5UTL1RF8iSQOKRaot8zgE rKdSc07H6F9Rd1S1IGXi6djohpZ/6TvYjghxmXbAOynzMphQhToCv4WmIjVbrUPK TLMuXTFpKwseWmvP/ZEF9BI71dBKgofBl7dx8k+wRYdw6trOzGZHtzJVyNlWvHfi a5LtJMsF0ELbLJO1C1ZB2FpLBakCMMddJjnUpYp/P9K0/kpQUVyIq8AwKlfClgHH N08y8Ijpdr9Agre7KTVKyY7Alq8OPlWfEj+HDyCCgkt8EOgG5QynSDzqvqXQVGcA F7sB018pG2aJzfG5pvWDtxEc/zey3cU= -----END CERTIFICATE-----Generated at Tue Sep 16 03:26:29 2025 by rpki-client