$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: 3FdzjXLCUXKN0iiOodHzbnU8tDDFNGCt8Z2B72PzRKY= Subject key identifier: E0:F5:C0:E7:73:B3:71:CF:98:0C:3A:7F:7F:A6:F4:33:94:58:0A:51 Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: 3A Signing time: Mon 03 Nov 2025 07:33:18 +0000 Manifest this update: Mon 03 Nov 2025 07:33:18 +0000 Manifest next update: Mon 10 Nov 2025 07:33:18 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: Bc7x/CyagUjeceO9FDn8llyVvPmWJCWYECSPudD6t8o=) 2: 6D182934654D11F0B7A2182FC4F9AE02.roa (hash: OJ6IQsjxs7hA2nKx8jaO6surZfcJ7KSw9HkQoBft87Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Nov 3 07:33:18 2025 GMT Not After : Nov 10 07:33:18 2025 GMT Subject: CN=69085abe-724a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:c4:d6:ec:63:99:84:7c:6c:6d:84:d4:d0: 8a:f2:62:1e:d7:f9:86:cf:77:06:e8:e6:be:14:6f: 37:61:74:59:c1:97:4a:4f:02:9e:69:88:4f:0e:86: 52:26:52:ea:ca:41:fa:ee:06:f2:14:89:f2:51:44: b6:73:f8:93:17:b1:e6:65:14:e4:f7:36:b5:e2:89: be:70:e1:fd:22:e1:83:d8:df:18:e7:19:cd:e6:09: 3e:3e:dd:74:30:60:3f:08:c6:86:5a:99:9a:9b:96: e3:01:9c:2c:3d:35:16:57:f1:66:e0:b9:b8:6d:49: 7c:7c:a4:6a:d4:11:d8:2d:b2:a2:f7:84:b3:e0:05: e1:10:41:26:51:22:5b:65:a9:70:00:49:b7:39:47: 98:ab:64:aa:3b:6f:3e:ca:76:99:f4:12:8f:05:6b: a8:f9:2d:c5:75:49:2d:28:39:62:26:33:22:e4:d6: c3:c6:9f:c1:1a:05:c7:34:a1:cf:82:33:c6:79:45: 65:36:5f:2c:ac:5c:e1:08:fd:d2:7a:26:4f:ae:12: 86:63:e3:c1:e6:c8:81:5b:26:ea:bf:6d:09:40:5b: cd:82:04:87:76:79:e1:56:cd:de:91:c2:4e:47:74: 3f:7a:c8:53:34:cf:f6:0f:86:b2:ae:ae:d7:95:af: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F5:C0:E7:73:B3:71:CF:98:0C:3A:7F:7F:A6:F4:33:94:58:0A:51 X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d6:15:27:ac:ad:96:40:15:8f:e0:87:1d:63:81:3d:53:cd: 15:89:32:25:e1:ec:cf:26:cc:e7:73:a4:97:d4:78:9a:47:81: 0b:55:99:3d:c8:c9:17:c9:bb:47:86:b7:e7:5b:76:91:97:a5: 51:a6:a6:e9:01:87:62:20:1b:3f:82:f7:65:64:b0:32:95:43: c5:f4:bf:7b:b1:45:6d:7f:42:6b:61:ad:f5:f9:45:73:e0:82: 44:7b:d6:d9:42:b3:64:af:5a:59:3e:cb:0d:17:ac:d9:ee:02: 1d:89:33:3c:32:fa:47:0d:fc:c9:aa:d1:43:30:d7:d9:ea:ee: c0:14:6b:c1:0f:db:bf:8c:06:3f:6f:62:04:fe:0f:cf:85:92: fc:d3:a7:c5:92:a8:d1:0d:29:8f:e4:3c:b1:e4:3b:ef:a3:73: 3e:31:b3:5d:60:12:eb:29:d3:f6:38:f9:0b:77:b8:e9:31:d3: 2b:af:33:ca:9a:b0:92:3f:53:8c:ec:26:9b:29:93:f3:9c:7e: 6b:59:97:fc:f3:d0:81:a0:f2:78:6f:6a:6e:c2:2a:d2:cf:96: 9f:74:f5:df:c6:b4:8d:94:27:48:e9:0c:9b:86:ef:48:4d:d0: f8:96:36:26:10:c5:a9:1b:73:bf:5c:bf:0e:de:b1:e6:47:8b: 2f:b6:2c:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODIyMTExMC8GA1UEBRMoMkM2N0QyMTY5NkIzQTFDMUJDMkNFNDlGQ0JFMEE3QTUz QTM3RDNBNjAeFw0yNTExMDMwNzMzMThaFw0yNTExMTAwNzMzMThaMBgxFjAUBgNV BAMTDTY5MDg1YWJlLTcyNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK+MTW7GOZhHxsbYTU0IryYh7X+YbPdwbo5r4UbzdhdFnBl0pPAp5piE8OhlIm UurKQfruBvIUifJRRLZz+JMXseZlFOT3NrXiib5w4f0i4YPY3xjnGc3mCT4+3XQw YD8IxoZamZqbluMBnCw9NRZX8WbgubhtSXx8pGrUEdgtsqL3hLPgBeEQQSZRIltl qXAASbc5R5irZKo7bz7Kdpn0Eo8Fa6j5LcV1SS0oOWImMyLk1sPGn8EaBcc0oc+C M8Z5RWU2XyysXOEI/dJ6Jk+uEoZj48HmyIFbJuq/bQlAW82CBId2eeFWzd6Rwk5H dD96yFM0z/YPhrKurteVrx0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4PXA53Oz cc+YDDp/f6b0M5RYClEwHwYDVR0jBBgwFoAULGfSFpazocG8LOSfy+CnpTo306Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4MjIxLzMzNTM1Q0IwNjU0 QzExRjA4QjM5RTcxQ0M0RjlBRTAyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEdmU0ZwYXpvY0c4TE9TZnktQ25wVG8zMDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 MjIxLzMzNTM1Q0IwNjU0QzExRjA4QjM5RTcxQ0M0RjlBRTAyL0xHZlNGcGF6b2NH OExPU2Z5LUNucFRvMzA2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjWFSesrZZAFY/ghx1jgT1TzRWJMiXh7M8mzOdzpJfUeJpHgQtVmT3I yRfJu0eGt+dbdpGXpVGmpukBh2IgGz+C92VksDKVQ8X0v3uxRW1/QmthrfX5RXPg gkR71tlCs2SvWlk+yw0XrNnuAh2JMzwy+kcN/Mmq0UMw19nq7sAUa8EP27+MBj9v YgT+D8+FkvzTp8WSqNENKY/kPLHkO++jcz4xs11gEusp0/Y4+Qt3uOkx0yuvM8qa sJI/U4zsJpspk/OcfmtZl/zz0IGg8nhvam7CKtLPlp909d/GtI2UJ0jpDJuG70hN 0PiWNiYQxakbc79cvw7eseZHiy+2LDc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:37 2025 by rpki-client