$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: Zy5GWUpWUxOphWib/dGnH5JjGzDepB3fjX4mKfas4PE= Subject key identifier: 79:22:39:3E:28:80:AC:46:7C:0B:A5:E4:F2:39:E6:A5:64:EF:1D:64 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: B5 Signing time: Wed 05 Nov 2025 06:18:55 +0000 Manifest this update: Wed 05 Nov 2025 06:18:54 +0000 Manifest next update: Wed 12 Nov 2025 06:18:54 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: 6cgbbZovj/Dat2ZjD7iuDOqWdOLGezPj/A3Ca7DYSdw=) 2: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: 3kK2PgqZkvV+Tke5YJ6lRXtuJEdURQG3ApvWLdCTm0Q=) 3: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: Ti8eJO2oAD+cInPnRMrFT32zgx0G9iPebdag3c53iUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Nov 5 06:18:54 2025 GMT Not After : Nov 12 06:18:54 2025 GMT Subject: CN=690aec4e-2c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:98:94:d2:9f:81:1d:1a:94:36:53:6d:12: e8:a6:22:9a:5c:c9:cf:2d:d9:93:22:9b:0e:fe:54: ee:43:66:ff:c2:53:b1:72:d6:89:8e:5e:e9:2c:eb: 3e:73:64:99:2f:5d:48:03:d5:fb:5d:9d:f1:f9:7b: 63:ed:40:99:be:73:9a:ce:ee:17:90:de:e9:d6:c7: 8f:ad:25:85:f2:5e:4c:49:d7:19:f4:3f:8c:de:ed: 1b:e7:2e:96:35:ad:dd:71:57:38:3b:23:90:2c:e0: 43:13:65:e0:fc:2a:52:fe:fb:e1:64:3e:32:82:52: b5:9a:c5:14:86:c5:8c:2c:ea:bb:7c:8e:6d:ff:49: dd:8f:fe:2f:90:70:f5:fb:6a:b5:f0:bb:86:64:24: 98:ca:8f:5e:fe:c9:a2:04:df:e4:f7:db:8b:50:36: d4:2a:08:8e:dd:53:c9:4b:24:15:52:5f:e9:bb:1d: df:2a:67:99:e0:90:ca:fd:6a:15:21:8b:f9:07:b8: 8a:29:22:0e:46:bf:2b:4e:cc:70:8b:fa:86:57:43: 3f:b8:83:99:0c:c6:d3:63:47:8b:98:e9:1c:33:74: 22:cb:65:e5:cf:01:e6:4a:04:68:af:bc:7e:9f:62: 83:1e:28:37:6e:cc:27:c8:56:45:3d:ee:b5:08:4c: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:39:3E:28:80:AC:46:7C:0B:A5:E4:F2:39:E6:A5:64:EF:1D:64 X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6d:08:1a:9a:82:a0:e6:f4:bf:84:a3:fc:2b:5b:d6:22:92: 5e:a3:77:13:9e:26:1e:31:74:53:f9:fb:0f:c0:d5:a9:8d:bb: 58:b2:62:bd:60:86:05:d4:af:9c:45:33:cd:f1:34:1e:75:8b: 52:fb:da:8c:2d:40:c8:74:b3:19:ae:d9:d9:41:f3:75:4f:1c: 59:bf:53:fe:fc:d1:ae:59:e1:9b:22:bb:bb:bb:19:dd:4c:a7: 5e:e1:28:9e:14:93:f5:23:c0:c3:2d:75:2f:c5:3a:c4:57:3c: d0:71:3d:83:71:df:df:cf:70:76:1e:b8:08:88:27:7f:73:ac: 97:12:41:87:10:0d:1e:4d:fb:2e:54:8d:b9:e2:29:b0:ac:4b: b1:b4:22:a1:d6:3a:3f:b8:8e:1a:38:38:f0:ef:2e:d4:0d:31: 23:4b:09:73:f6:a8:2a:04:c0:31:ca:b6:a0:58:e1:73:60:ab: 1c:3d:76:cd:01:63:8b:86:3d:73:1b:b9:82:52:e8:96:9c:92: 86:00:fd:e8:11:33:64:73:a7:1e:af:ec:30:65:06:b6:e9:b3: 89:1f:34:24:cb:48:61:fe:85:eb:63:5a:3f:ee:36:17:ec:1d: f1:66:08:58:43:d7:be:e5:fc:28:ab:ef:63:5a:4e:a6:94:ba: 2a:57:c1:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjUxMTA1MDYxODU0WhcNMjUxMTEyMDYxODU0WjAYMRYwFAYD VQQDEw02OTBhZWM0ZS0yYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymiYlNKfgR0alDZTbRLopiKaXMnPLdmTIpsO/lTuQ2b/wlOxctaJjl7pLOs+ c2SZL11IA9X7XZ3x+Xtj7UCZvnOazu4XkN7p1sePrSWF8l5MSdcZ9D+M3u0b5y6W Na3dcVc4OyOQLOBDE2Xg/CpS/vvhZD4yglK1msUUhsWMLOq7fI5t/0ndj/4vkHD1 +2q18LuGZCSYyo9e/smiBN/k99uLUDbUKgiO3VPJSyQVUl/pux3fKmeZ4JDK/WoV IYv5B7iKKSIORr8rTsxwi/qGV0M/uIOZDMbTY0eLmOkcM3Qiy2XlzwHmSgRor7x+ n2KDHig3bswnyFZFPe61CEy+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkiOT4o gKxGfAul5PI55qVk7x1kMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHbQgamoKg5vS/hKP8K1vWIpJeo3cTniYeMXRT+fsPwNWpjbtYsmK9 YIYF1K+cRTPN8TQedYtS+9qMLUDIdLMZrtnZQfN1TxxZv1P+/NGuWeGbIru7uxnd TKde4SieFJP1I8DDLXUvxTrEVzzQcT2Dcd/fz3B2HrgIiCd/c6yXEkGHEA0eTfsu VI254imwrEuxtCKh1jo/uI4aODjw7y7UDTEjSwlz9qgqBMAxyragWOFzYKscPXbN AWOLhj1zG7mCUuiWnJKGAP3oETNkc6cer+wwZQa26bOJHzQky0hh/oXrY1o/7jYX 7B3xZghYQ9e+5fwoq+9jWk6mlLoqV8HD -----END CERTIFICATE-----Generated at Wed Nov 5 22:04:11 2025 by rpki-client