$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: HEuw15jMmmFOrxHCktuAa4Meot39d0AJlMz0MqmpdWs= Subject key identifier: ED:21:0D:09:13:3F:02:70:20:DD:50:59:09:59:2E:0E:AE:01:CA:DB Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 0860 Signing time: Tue 04 Nov 2025 20:43:12 +0000 Manifest this update: Tue 04 Nov 2025 20:43:11 +0000 Manifest next update: Tue 11 Nov 2025 20:43:11 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: ArP3WaPh/TBE/AwZWIcSDP+hkTzLI36hWeYj8JPAbw8=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Nov 4 20:43:11 2025 GMT Not After : Nov 11 20:43:11 2025 GMT Subject: CN=690a655f-2152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:4c:e2:17:70:cc:81:b1:fa:42:7d:5f:9a: 3d:de:7b:24:ca:bb:aa:84:83:c6:f2:0a:30:66:8e: ec:0f:9d:36:9b:84:9b:09:70:21:cc:5c:e2:12:6b: e8:39:93:93:b2:9a:ae:70:b9:76:9f:01:18:01:63: d9:30:10:c6:c0:fa:79:59:3e:97:d3:0b:85:0d:03: 84:5b:40:fb:6e:a4:c2:85:c3:ce:54:fb:0f:45:65: 64:48:cd:f2:6b:42:f1:0e:65:63:c8:d6:4c:6a:fb: db:83:2f:cd:f0:bc:3e:43:23:d8:e5:8e:be:a3:cd: cd:af:02:ca:bf:02:73:4a:47:58:82:2a:ab:87:3e: 32:64:4f:6f:35:3e:e9:48:8b:67:1d:03:17:6a:a8: 75:cd:71:91:fd:77:32:77:2a:ce:46:71:b6:e2:11: 74:7a:01:06:d0:1b:bd:89:dd:a2:64:83:2f:cd:94: 79:43:3e:c5:a0:03:cc:45:e0:24:1b:03:ed:ce:9d: bc:d7:9a:b6:e8:24:d6:2d:36:60:08:98:3f:96:9f: 72:eb:22:a7:af:34:3f:fc:c9:9b:76:36:dc:38:62: ed:4d:16:cf:31:f2:1f:ce:ed:68:7d:6c:8d:aa:d8: b3:3a:67:ae:2f:97:5b:09:a9:41:d6:4b:d9:da:ef: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:0D:09:13:3F:02:70:20:DD:50:59:09:59:2E:0E:AE:01:CA:DB X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ad:97:f4:e5:6a:92:19:fa:a3:cd:86:ae:60:1a:26:95:39: 32:73:4e:32:51:4e:2f:61:ee:7c:6a:b9:4f:04:b7:30:70:18: b3:da:69:b0:81:ea:13:6a:15:97:c1:83:1a:19:db:4d:8e:44: b4:d5:31:3e:15:92:67:4a:5c:b4:fe:e1:1c:0e:ef:d8:3f:3c: 71:9c:38:01:01:8d:e3:97:dc:57:75:e7:3d:5b:ef:81:8e:58: 5a:85:8d:76:54:9f:f8:a9:7d:5e:47:85:90:be:e7:71:68:9f: ec:75:07:95:c8:30:2a:d6:09:21:c4:01:66:56:77:a3:47:e9: 4a:0a:df:ff:f4:82:71:1a:d7:f8:27:b6:b8:f2:24:b7:0e:33: 75:da:93:32:f0:46:e7:fb:e1:64:b9:9b:39:5a:21:f5:39:fb: 24:35:93:1e:9d:3a:83:5f:70:34:ba:e6:45:48:c2:2e:b6:f3: 50:3f:9f:89:a0:38:bd:08:67:da:c2:e0:a5:fc:b4:24:af:c9: f2:01:af:16:b2:18:c5:36:52:69:30:63:0c:1d:c6:fc:b0:12: 5a:53:cc:c7:bb:2f:05:9a:a5:1d:75:b3:b9:4d:51:fd:f2:21: 93:4e:9f:98:c8:3a:be:b7:4a:85:43:ff:f7:5c:b6:79:39:67: 0f:34:ca:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUxMTA0MjA0MzExWhcNMjUxMTExMjA0MzExWjAYMRYwFAYD VQQDEw02OTBhNjU1Zi0yMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzBM4hdwzIGx+kJ9X5o93nskyruqhIPG8gowZo7sD502m4SbCXAhzFziEmvo OZOTspqucLl2nwEYAWPZMBDGwPp5WT6X0wuFDQOEW0D7bqTChcPOVPsPRWVkSM3y a0LxDmVjyNZMavvbgy/N8Lw+QyPY5Y6+o83NrwLKvwJzSkdYgiqrhz4yZE9vNT7p SItnHQMXaqh1zXGR/XcydyrORnG24hF0egEG0Bu9id2iZIMvzZR5Qz7FoAPMReAk GwPtzp2815q26CTWLTZgCJg/lp9y6yKnrzQ//MmbdjbcOGLtTRbPMfIfzu1ofWyN qtizOmeuL5dbCalB1kvZ2u/qqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0hDQkT PwJwIN1QWQlZLg6uAcrbMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJrZf05WqSGfqjzYauYBomlTkyc04yUU4vYe58arlPBLcwcBiz2mmw geoTahWXwYMaGdtNjkS01TE+FZJnSly0/uEcDu/YPzxxnDgBAY3jl9xXdec9W++B jlhahY12VJ/4qX1eR4WQvudxaJ/sdQeVyDAq1gkhxAFmVnejR+lKCt//9IJxGtf4 J7a48iS3DjN12pMy8Ebn++FkuZs5WiH1OfskNZMenTqDX3A0uuZFSMIutvNQP5+J oDi9CGfawuCl/LQkr8nyAa8WshjFNlJpMGMMHcb8sBJaU8zHuy8FmqUddbO5TVH9 8iGTTp+YyDq+t0qFQ//3XLZ5OWcPNMqD -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:42 2025 by rpki-client