$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: Pxh1viNm+Y8oxqQhaTiuJOFvS9Aydr/Lg/rSWpZ77qg= Subject key identifier: 57:FE:59:8F:35:EC:8E:65:FE:86:31:45:79:DA:54:5A:03:06:DC:EF Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 0848 Signing time: Thu 18 Sep 2025 20:57:12 +0000 Manifest this update: Thu 18 Sep 2025 20:57:11 +0000 Manifest next update: Thu 25 Sep 2025 20:57:11 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: qrU96NPS0g0Q4d5Rc49kpY059wb4zc9G3H3smE9qtSM=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Sep 18 20:57:11 2025 GMT Not After : Sep 25 20:57:11 2025 GMT Subject: CN=68cc7227-e86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:a4:4b:d9:9b:94:5f:14:05:27:ef:d4:59: b4:2a:e7:19:14:a9:1e:65:d1:1d:3c:af:bc:ea:85: 7e:83:48:b6:f0:4d:27:70:65:4b:d5:84:9e:5a:59: 59:6c:26:45:20:ac:59:ca:21:8d:8d:93:8a:df:9a: b1:70:88:74:60:27:d3:62:2b:17:f6:e8:e1:f0:f2: d5:9e:cf:4a:c1:fe:40:7b:39:98:60:e0:33:6e:92: 4b:2e:9f:f7:1b:87:ea:a5:03:88:e9:8e:07:3c:89: 06:bb:5c:37:da:f1:c9:50:de:9e:07:65:8b:12:be: 6f:7c:97:3e:c8:c5:e8:02:cd:21:85:7a:14:89:ef: 2a:b9:b3:aa:87:ac:bc:4c:b0:6f:55:97:c9:14:ef: 23:f4:3b:98:27:86:b9:df:a6:ca:f9:ea:8e:59:36: 08:6e:3a:5f:a2:42:1d:79:0d:0c:64:7a:51:13:a5: c7:f3:46:66:d3:86:aa:00:18:39:ad:7f:24:61:e5: 87:1f:eb:af:5a:86:f4:fc:3a:47:0d:14:3c:07:a1: 01:fc:7f:47:ca:b5:77:18:77:09:4f:2b:f2:57:46: 82:b4:ea:66:6c:6f:49:23:85:05:b3:e2:73:60:fa: 23:da:20:1a:aa:ad:61:cc:aa:7b:5d:74:13:64:86: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:59:8F:35:EC:8E:65:FE:86:31:45:79:DA:54:5A:03:06:DC:EF X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d5:1f:27:6a:c7:60:b5:39:72:90:13:a4:c8:16:7e:b7:3d: 02:11:a8:22:e9:3d:4f:3a:e4:f6:07:e8:78:f9:e4:14:ed:55: 7e:d6:af:29:b4:b8:79:79:34:63:8d:da:ed:f7:e8:11:4f:5b: 66:82:47:a0:1d:df:18:6b:a1:d6:9e:14:22:62:ca:f5:0d:c5: 49:2c:aa:02:2f:31:07:33:d0:fd:3f:cb:dd:e7:b1:86:cb:4b: e7:ef:58:4c:6d:aa:63:5f:f9:a3:a7:f1:62:ee:bc:45:18:b7: f4:c2:ae:93:dd:e2:5b:dd:98:d3:b1:63:8a:f1:57:3f:07:80: 13:a6:94:e2:45:58:37:2f:af:0a:aa:b0:2c:d0:71:2b:4f:5b: e4:a4:76:7d:85:69:e9:4b:73:06:10:c7:ad:a3:bf:12:95:a5: 3b:e8:74:fd:ef:7b:10:9c:6a:23:71:5e:87:f5:c1:00:b3:89: e4:9d:e2:77:7f:38:b3:53:18:d1:cb:3f:4b:3a:79:f5:de:84: 1d:3d:33:22:a5:81:92:b0:2c:f0:63:48:fd:55:0c:56:9a:db: b2:da:a9:bb:a8:be:88:36:f2:13:ad:13:6c:5c:97:84:6b:d0: fe:b0:57:8a:73:fe:d9:25:89:64:3f:e1:bc:c1:8f:b1:a5:ec: 1c:f8:9d:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwOTE4MjA1NzExWhcNMjUwOTI1MjA1NzExWjAYMRYwFAYD VQQDEw02OGNjNzIyNy1lODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9d6kS9mblF8UBSfv1Fm0KucZFKkeZdEdPK+86oV+g0i28E0ncGVL1YSeWllZ bCZFIKxZyiGNjZOK35qxcIh0YCfTYisX9ujh8PLVns9Kwf5AezmYYOAzbpJLLp/3 G4fqpQOI6Y4HPIkGu1w32vHJUN6eB2WLEr5vfJc+yMXoAs0hhXoUie8qubOqh6y8 TLBvVZfJFO8j9DuYJ4a536bK+eqOWTYIbjpfokIdeQ0MZHpRE6XH80Zm04aqABg5 rX8kYeWHH+uvWob0/DpHDRQ8B6EB/H9HyrV3GHcJTyvyV0aCtOpmbG9JI4UFs+Jz YPoj2iAaqq1hzKp7XXQTZIZBowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFf+WY81 7I5l/oYxRXnaVFoDBtzvMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd1R8nasdgtTlykBOkyBZ+tz0CEagi6T1POuT2B+h4+eQU7VV+1q8p tLh5eTRjjdrt9+gRT1tmgkegHd8Ya6HWnhQiYsr1DcVJLKoCLzEHM9D9P8vd57GG y0vn71hMbapjX/mjp/Fi7rxFGLf0wq6T3eJb3ZjTsWOK8Vc/B4ATppTiRVg3L68K qrAs0HErT1vkpHZ9hWnpS3MGEMeto78SlaU76HT973sQnGojcV6H9cEAs4nkneJ3 fzizUxjRyz9LOnn13oQdPTMipYGSsCzwY0j9VQxWmtuy2qm7qL6INvITrRNsXJeE a9D+sFeKc/7ZJYlkP+G8wY+xpewc+J0X -----END CERTIFICATE-----Generated at Fri Sep 19 10:19:55 2025 by rpki-client