$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: gdyEI6dHHsj8MjHp+V5c4vwo3vVRR7QWhvZro7awmd8= Subject key identifier: 95:34:67:2B:4E:A2:73:50:6A:33:B8:1F:DA:48:90:5B:E5:61:4D:29 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 092B Signing time: Sun 02 Nov 2025 20:12:58 +0000 Manifest this update: Sun 02 Nov 2025 20:12:58 +0000 Manifest next update: Sun 09 Nov 2025 20:12:58 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: FpBKFciVJolI3DWArVn5TiVlA+NkqV46gU4tNshmQKk=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: 4NqH+CTlAXcxsKUUu0JoB2lmVEYgLTqKdl4anKNbgT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2356 (0x934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Nov 2 20:12:58 2025 GMT Not After : Nov 9 20:12:58 2025 GMT Subject: CN=6907bb4a-edb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:99:00:17:b3:82:29:d5:69:65:44:40:4f: ad:90:70:71:59:9f:3d:0c:1d:42:9c:31:1f:db:2d: b6:d3:7b:60:6b:00:1f:d8:21:93:15:a6:ab:7f:86: 28:79:22:0a:70:6b:2d:c1:92:b7:85:af:e7:44:0e: 5b:f1:63:61:a2:52:6f:4f:39:e5:8a:7d:50:65:f9: 86:44:49:6a:d2:89:36:55:27:35:17:f7:4c:4d:be: d2:db:ac:e5:cb:ef:a8:2a:d6:31:b2:b1:ad:f9:8d: da:69:e2:8c:a8:62:e7:2a:1f:38:bd:bc:2d:9e:ff: 05:2f:99:70:f7:af:03:6e:f8:76:12:80:67:6d:63: 21:f7:b9:b4:ee:8e:b2:0d:d9:df:5c:38:b5:ae:f9: d4:5f:0d:9b:2e:9f:88:48:6f:42:51:c7:84:77:bd: d2:07:39:97:f4:83:6f:e0:ee:fd:ee:6a:00:42:1c: 92:55:b4:94:57:bb:13:b4:4a:99:d6:af:d2:e0:0d: dc:3a:97:eb:a5:6c:24:49:04:ea:e7:e5:43:c2:ec: 40:70:5c:6d:67:78:45:c2:dd:c2:31:f5:e7:7f:70: 6c:7c:cc:b5:64:a5:33:05:b7:a0:f3:f2:ee:06:6a: 5c:ba:6e:ad:76:33:56:37:90:c3:3f:77:f3:35:91: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:67:2B:4E:A2:73:50:6A:33:B8:1F:DA:48:90:5B:E5:61:4D:29 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:80:88:d7:f8:02:65:75:cc:bc:b0:e8:c7:07:62:6b:03: a7:ce:d4:dd:46:7d:1e:83:01:6a:50:70:c8:bc:65:84:d2:1b: 28:43:74:1e:38:27:fe:80:6b:d0:06:d9:07:0f:8a:d1:1e:a3: dd:9b:df:a9:d2:8e:d6:c1:42:2b:fe:5f:92:9e:8c:3b:94:06: 21:02:a4:41:7b:d7:d0:44:53:6d:52:ae:7e:04:1d:26:fe:f5: 35:d3:67:3d:a1:93:08:8b:cd:a8:5b:7f:30:f1:4b:3b:12:fc: 4c:f4:86:06:50:3a:fa:f0:fd:13:8b:65:3f:02:42:bd:8f:94: 75:c9:78:d7:49:25:46:4e:cb:b8:a7:55:f1:d3:56:b4:a2:90: a3:6d:4f:3d:c0:77:1a:b3:66:78:fe:a9:9f:5c:1f:99:6c:d2: 24:51:b9:3a:fb:cc:a3:79:ea:81:38:82:04:fe:5d:12:2b:e2: cf:eb:ff:15:47:7e:02:54:2e:47:ef:b2:ca:a8:b0:1d:ed:b7: 68:d1:ea:4a:4f:1f:8e:cc:94:3a:ea:d3:68:51:03:79:f5:6b: 2a:b1:b2:37:21:e4:eb:3d:9f:f2:46:e8:17:ae:71:ad:0e:0a: ac:a1:36:d3:7e:5f:56:10:99:fb:fe:a5:cf:06:3c:2c:77:68: ce:66:87:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUxMTAyMjAxMjU4WhcNMjUxMTA5MjAxMjU4WjAYMRYwFAYD VQQDEw02OTA3YmI0YS1lZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6OZABezginVaWVEQE+tkHBxWZ89DB1CnDEf2y2203tgawAf2CGTFaarf4Yo eSIKcGstwZK3ha/nRA5b8WNholJvTznlin1QZfmGRElq0ok2VSc1F/dMTb7S26zl y++oKtYxsrGt+Y3aaeKMqGLnKh84vbwtnv8FL5lw968Dbvh2EoBnbWMh97m07o6y DdnfXDi1rvnUXw2bLp+ISG9CUceEd73SBzmX9INv4O797moAQhySVbSUV7sTtEqZ 1q/S4A3cOpfrpWwkSQTq5+VDwuxAcFxtZ3hFwt3CMfXnf3BsfMy1ZKUzBbeg8/Lu Bmpcum6tdjNWN5DDP3fzNZHpNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU0ZytO onNQajO4H9pIkFvlYU0pMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV2YCI1/gCZXXMvLDoxwdiawOnztTdRn0egwFqUHDIvGWE0hsoQ3Qe OCf+gGvQBtkHD4rRHqPdm9+p0o7WwUIr/l+Snow7lAYhAqRBe9fQRFNtUq5+BB0m /vU102c9oZMIi82oW38w8Us7EvxM9IYGUDr68P0Ti2U/AkK9j5R1yXjXSSVGTsu4 p1Xx01a0opCjbU89wHcas2Z4/qmfXB+ZbNIkUbk6+8yjeeqBOIIE/l0SK+LP6/8V R34CVC5H77LKqLAd7bdo0epKTx+OzJQ66tNoUQN59WsqsbI3IeTrPZ/yRugXrnGt DgqsoTbTfl9WEJn7/qXPBjwsd2jOZoe3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:48 2025 by rpki-client