$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: KicUG23cgWSp+7EXNUtrfFTJC/qja5oCvuUG2fkPXA4= Subject key identifier: FB:91:F3:B5:57:B3:D4:64:8A:DE:04:CC:3E:95:71:63:4A:72:C2:D6 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 071A Signing time: Mon 27 Oct 2025 00:15:04 +0000 Manifest this update: Mon 27 Oct 2025 00:15:04 +0000 Manifest next update: Mon 03 Nov 2025 00:15:04 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 9/1GtQDZ43i0LEG9IQKyP5afjLrZc9IC6jtypMGOEYQ=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: hVEGhELX1A8z+OTyICUg8ehNwNYoGDS6osi29y06XSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Oct 27 00:15:04 2025 GMT Not After : Nov 3 00:15:04 2025 GMT Subject: CN=68feb988-7876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:8b:39:93:c5:75:ea:68:6a:e0:43:4a:44: ef:40:58:0b:7c:e9:73:72:da:98:c4:d5:c2:67:12: de:b9:f7:c1:9f:b5:3d:5b:a2:de:54:6b:20:78:ba: 36:8b:78:b4:7f:0e:da:73:46:6b:9b:11:f3:94:ab: 0f:26:11:20:5a:16:0d:4d:aa:25:b9:44:29:2f:f3: 93:5e:ab:3f:e1:1e:4f:f4:07:b1:1e:de:02:5f:1d: 22:d0:e0:77:e1:9c:39:27:b2:39:a3:18:8d:11:8b: 1f:d2:26:d1:33:cb:c8:73:56:f2:2e:a4:5b:66:e7: 8b:7b:91:42:62:0c:7e:14:9d:78:51:21:62:6d:df: c4:b8:73:5e:71:a6:26:35:36:01:ae:e5:64:65:30: d0:1a:bf:69:84:2e:bd:ef:e0:9e:88:5a:c6:80:10: 5a:f7:03:55:83:08:e0:99:52:de:08:f2:3b:62:39: 87:61:c6:97:5c:40:a8:5c:7b:f4:8c:12:2b:cd:43: fb:c2:16:ef:bd:ce:a0:8e:ad:f5:fd:78:96:32:89: 60:ed:da:24:be:6d:8a:94:6f:f2:d8:e4:fc:ab:5f: a0:56:ac:1b:54:63:bf:7b:0b:f6:0c:90:6b:16:b3: 86:11:54:db:c0:f5:d3:ff:16:e2:d4:40:8f:3b:6a: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:91:F3:B5:57:B3:D4:64:8A:DE:04:CC:3E:95:71:63:4A:72:C2:D6 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a2:c5:12:03:e0:6d:c4:14:b8:d4:b7:d3:bd:45:99:da:ad: 53:48:0d:3a:09:ff:ec:1a:e9:fc:a9:70:e1:14:8f:f7:54:27: 6c:04:13:97:85:d4:89:42:33:03:be:73:61:21:a4:2d:45:38: a6:35:0c:b0:ca:1a:f0:3d:51:a0:00:0d:3f:98:ed:3a:62:df: 7a:38:b8:a2:70:72:aa:c3:a6:fa:d1:64:75:df:c1:72:cc:ba: 6f:86:8f:63:38:2c:be:0a:f7:fa:7c:91:9b:87:87:da:c4:f3: 97:1c:6e:53:18:64:f6:a9:c9:14:25:31:21:02:2f:25:1d:51: a8:93:b8:97:f0:b8:98:35:37:45:cd:42:1d:7e:be:e4:5d:b6: 52:be:b4:f1:7d:94:ef:e0:06:d4:94:48:e3:1f:2e:e6:dc:bb: 81:53:83:0e:88:fe:ff:60:8e:23:fb:03:34:0e:d6:3a:31:ef: 1b:b4:65:c2:f0:eb:fa:57:3c:92:a9:d7:93:85:8c:48:63:ac: d1:6f:94:94:49:8a:02:19:22:89:15:a4:37:07:a0:c2:5d:d2: 7e:e8:b4:52:49:a9:14:d5:02:4d:50:44:c4:e0:e9:93:6f:58: 3e:6d:ff:78:59:d6:c7:56:ba:36:3e:f6:18:82:d6:16:96:3f: a7:4d:1b:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUxMDI3MDAxNTA0WhcNMjUxMTAzMDAxNTA0WjAYMRYwFAYD VQQDEw02OGZlYjk4OC03ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51KLOZPFdepoauBDSkTvQFgLfOlzctqYxNXCZxLeuffBn7U9W6LeVGsgeLo2 i3i0fw7ac0ZrmxHzlKsPJhEgWhYNTaoluUQpL/OTXqs/4R5P9AexHt4CXx0i0OB3 4Zw5J7I5oxiNEYsf0ibRM8vIc1byLqRbZueLe5FCYgx+FJ14USFibd/EuHNecaYm NTYBruVkZTDQGr9phC697+CeiFrGgBBa9wNVgwjgmVLeCPI7YjmHYcaXXECoXHv0 jBIrzUP7whbvvc6gjq31/XiWMolg7dokvm2KlG/y2OT8q1+gVqwbVGO/ewv2DJBr FrOGEVTbwPXT/xbi1ECPO2rDsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuR87VX s9Rkit4EzD6VcWNKcsLWMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdosUSA+BtxBS41LfTvUWZ2q1TSA06Cf/sGun8qXDhFI/3VCdsBBOX hdSJQjMDvnNhIaQtRTimNQywyhrwPVGgAA0/mO06Yt96OLiicHKqw6b60WR138Fy zLpvho9jOCy+Cvf6fJGbh4faxPOXHG5TGGT2qckUJTEhAi8lHVGok7iX8LiYNTdF zUIdfr7kXbZSvrTxfZTv4AbUlEjjHy7m3LuBU4MOiP7/YI4j+wM0DtY6Me8btGXC 8Ov6VzySqdeThYxIY6zRb5SUSYoCGSKJFaQ3B6DCXdJ+6LRSSakU1QJNUETE4OmT b1g+bf94WdbHVro2PvYYgtYWlj+nTRvS -----END CERTIFICATE-----Generated at Mon Oct 27 04:42:13 2025 by rpki-client