$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: tRP3QwM+ZWB5AOotUjTtjX13cdrcUMMxrrCBsjIn/qw= Subject key identifier: 9A:7F:DA:3B:FE:3F:79:52:EB:83:C8:E9:C8:23:C3:02:D9:95:21:74 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 0568 Signing time: Sun 02 Nov 2025 23:21:40 +0000 Manifest this update: Sun 02 Nov 2025 23:21:39 +0000 Manifest next update: Sun 09 Nov 2025 23:21:39 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: meuSf8ksLc8PFZXLydKGKPzsqkuR+QSC5gKaDxj7rkA=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: nbAwbUJb6JF/EVgcBuo6b8RRtXcpwDWvIQu43r6H87s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Nov 2 23:21:39 2025 GMT Not After : Nov 9 23:21:39 2025 GMT Subject: CN=6907e784-741c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:49:e7:f5:8d:ec:4f:38:ec:a0:53:49:86: 86:ec:fd:4c:19:8f:7d:35:74:c9:b8:1a:7b:86:49: c8:97:4d:11:16:cb:60:79:54:64:f1:dc:72:5c:42: e1:27:d6:4a:e3:29:8c:91:38:53:73:40:ce:c2:b2: f8:50:74:d8:c2:9e:cb:a4:be:32:fc:e8:24:d5:06: 82:c6:df:12:b1:35:b6:b0:2d:22:f2:be:31:2e:a3: c5:7a:94:9b:6b:03:22:d1:6f:17:7f:8c:00:cd:56: 92:79:e9:9e:c3:83:55:b8:14:19:6e:1f:f8:5a:00: c6:e7:03:7d:54:c3:77:dd:9d:f2:1f:a5:90:a7:96: ea:ff:50:83:96:e6:8d:ff:d8:7d:e9:a7:ca:f6:1b: 2b:e2:6c:60:d4:9d:aa:91:4e:99:00:bd:3a:ac:65: 76:bf:1f:90:42:6d:3d:74:cf:46:88:e3:9f:54:9c: 7a:60:28:55:35:a0:15:8d:ef:6b:c2:95:85:27:c3: e5:34:22:59:61:5e:7a:12:fe:56:bd:36:58:2d:4c: e7:c7:53:d4:1f:2c:8c:84:fb:dd:c7:e5:f5:e8:90: ec:e6:df:2c:2e:02:af:e6:aa:25:7c:f1:91:87:c9: 2f:ad:7e:04:13:90:41:93:cb:23:1b:c4:7e:8d:c6: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:DA:3B:FE:3F:79:52:EB:83:C8:E9:C8:23:C3:02:D9:95:21:74 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:63:59:62:66:cf:37:c9:66:1c:42:df:af:68:10:7b:44:d2: 2a:9b:b6:c7:74:f9:46:be:8b:db:e1:4b:82:7d:27:3f:2d:b4: d2:dd:ce:14:eb:4d:9f:0a:a6:c5:f2:f6:f5:cb:ae:b1:1c:a7: 44:19:82:4f:cc:db:55:9e:58:f1:fd:34:34:00:ae:5f:9f:1e: 84:ec:84:db:3e:1c:fb:f6:f2:ca:8b:0b:7c:e8:0e:26:af:5e: ea:e5:95:13:e6:a0:d5:a3:a4:88:6f:b5:c2:3e:95:64:f8:fe: c3:e3:90:cd:20:cd:44:a3:08:47:89:fc:b5:2f:11:f6:a7:72: b1:16:a5:5d:97:59:2a:61:4c:9b:72:95:de:83:19:a6:1b:ff: fa:e1:0b:86:ed:02:c2:d1:33:e4:5c:1b:6d:29:da:01:9e:0b: ac:13:e8:2e:35:5b:7f:c6:b1:f4:e4:17:f5:c6:06:94:60:65: 29:58:d8:c8:df:ec:86:4d:4d:07:93:38:53:5f:8f:e4:a9:16: f1:12:ec:55:43:a1:9a:40:68:70:8f:72:6c:9f:e1:fa:c9:15: ff:43:11:7c:38:b3:b0:97:80:2c:6d:19:84:5e:31:36:94:6b: b8:45:97:c9:96:d2:ba:ea:ec:e5:63:db:4c:30:56:04:9e:5e: cd:14:cc:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUxMTAyMjMyMTM5WhcNMjUxMTA5MjMyMTM5WjAYMRYwFAYD VQQDEw02OTA3ZTc4NC03NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuZJ5/WN7E847KBTSYaG7P1MGY99NXTJuBp7hknIl00RFstgeVRk8dxyXELh J9ZK4ymMkThTc0DOwrL4UHTYwp7LpL4y/Ogk1QaCxt8SsTW2sC0i8r4xLqPFepSb awMi0W8Xf4wAzVaSeemew4NVuBQZbh/4WgDG5wN9VMN33Z3yH6WQp5bq/1CDluaN /9h96afK9hsr4mxg1J2qkU6ZAL06rGV2vx+QQm09dM9GiOOfVJx6YChVNaAVje9r wpWFJ8PlNCJZYV56Ev5WvTZYLUznx1PUHyyMhPvdx+X16JDs5t8sLgKv5qolfPGR h8kvrX4EE5BBk8sjG8R+jcavjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp/2jv+ P3lS64PI6cgjwwLZlSF0MB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaY1liZs83yWYcQt+vaBB7RNIqm7bHdPlGvovb4UuCfSc/LbTS3c4U 602fCqbF8vb1y66xHKdEGYJPzNtVnljx/TQ0AK5fnx6E7ITbPhz79vLKiwt86A4m r17q5ZUT5qDVo6SIb7XCPpVk+P7D45DNIM1EowhHify1LxH2p3KxFqVdl1kqYUyb cpXegxmmG//64QuG7QLC0TPkXBttKdoBngusE+guNVt/xrH05Bf1xgaUYGUpWNjI 3+yGTU0HkzhTX4/kqRbxEuxVQ6GaQGhwj3Jsn+H6yRX/QxF8OLOwl4AsbRmEXjE2 lGu4RZfJltK66uzlY9tMMFYEnl7NFMxN -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:03 2025 by rpki-client