$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: //u5SrsOm451cDZl1m0YsoCs9fdkMkR/DNggS+AyevQ= Subject key identifier: A4:B7:B3:85:56:A0:EF:81:05:75:0E:F0:03:98:9E:F9:73:8B:E1:36 Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 0638 Signing time: Thu 18 Sep 2025 23:01:34 +0000 Manifest this update: Thu 18 Sep 2025 23:01:34 +0000 Manifest next update: Thu 25 Sep 2025 23:01:34 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: iBPsnljveMUx4zxVtLztSYegizD9lu3Bn4efAhKld94=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: OFrwiJWAkGGk5FsDremtK39rCrSaFqlUshUtXmOJ9aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: Sep 18 23:01:34 2025 GMT Not After : Sep 25 23:01:34 2025 GMT Subject: CN=68cc8f4e-99f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6c:4d:8a:2e:f4:06:d2:60:92:50:ff:63:da: a6:93:de:bc:b0:16:76:8c:55:82:40:a2:70:ee:72: df:0c:4a:6b:6b:8e:8e:62:67:7c:15:b9:92:c1:9d: ce:51:62:9a:2b:86:cc:80:5b:f2:70:af:3c:9a:8b: 41:51:43:44:a0:80:8d:fe:34:c2:7b:d0:fe:52:af: 87:42:91:ae:42:aa:f0:5b:a6:a2:c2:e8:a9:7f:97: 5f:aa:bf:be:58:de:4d:86:4f:6a:57:da:3c:d4:c8: 01:1a:a7:0b:96:d3:de:00:8f:85:ea:b8:81:ad:91: 43:5b:08:49:bb:83:6e:1c:d5:88:ae:dc:55:9b:38: 8c:98:64:a9:c8:0e:2f:71:1b:26:0d:37:c0:19:a7: 67:bf:64:b1:8a:55:e6:4c:8e:d5:a8:f8:42:bd:ea: ff:5e:49:9a:0c:a5:28:d2:06:2c:08:d0:3b:25:af: e5:02:d9:84:ef:23:6a:75:f1:70:32:ac:f5:8c:bc: 85:5f:8a:58:36:15:b3:21:45:3c:64:d7:d6:86:e3: 18:0c:52:eb:08:f9:a9:81:c0:db:4b:a0:3f:52:c7: 23:41:47:3e:2a:5c:a2:0e:ae:db:a6:dd:c5:44:80: e9:0c:74:f4:20:bc:9f:d6:b9:c6:7c:f0:b9:00:50: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B7:B3:85:56:A0:EF:81:05:75:0E:F0:03:98:9E:F9:73:8B:E1:36 X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:46:a2:3c:de:78:5b:14:47:aa:84:12:26:99:61:14:44:49: 48:2a:01:ac:9c:5a:f3:cb:ca:0c:d1:07:55:42:ac:0f:4c:09: cb:71:22:a7:db:ff:14:f5:a2:cc:cf:91:2e:03:d4:ea:cb:3d: e2:18:87:11:85:17:0c:53:ea:7d:41:28:05:4e:b9:8b:10:b2: d1:0f:58:7b:e8:53:d7:8d:d7:38:6a:a3:76:86:6d:c2:05:4e: 7a:16:9c:a2:6b:4a:7e:55:24:81:0c:c9:1d:5b:03:ce:e4:6c: b6:09:cd:7f:01:18:fe:4e:9a:9d:c9:f4:d2:a7:6e:f3:76:c8: d9:7a:c5:51:d7:52:9d:dd:d0:53:6e:ed:dd:a6:0d:4d:33:5f: f0:99:cf:98:5e:5f:3d:fa:ef:f7:60:5b:21:45:40:56:4f:3e: d9:8c:e0:42:c6:ee:64:cc:c4:f2:10:7d:2f:83:96:98:28:9d: a7:92:3d:a1:02:ad:c1:29:40:99:7f:10:7f:67:96:81:9e:0f: 27:51:f1:61:99:54:12:a2:ba:79:c9:a6:4a:74:0c:9e:a6:be: 88:0c:9d:c2:df:da:63:5d:47:5a:27:d8:ac:5d:b9:8d:63:0c: bc:dc:bf:3b:cf:b1:de:de:a7:1e:83:74:3f:6a:b4:2a:56:0e: 7d:bb:8b:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUwOTE4MjMwMTM0WhcNMjUwOTI1MjMwMTM0WjAYMRYwFAYD VQQDEw02OGNjOGY0ZS05OWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mxNii70BtJgklD/Y9qmk968sBZ2jFWCQKJw7nLfDEpra46OYmd8FbmSwZ3O UWKaK4bMgFvycK88motBUUNEoICN/jTCe9D+Uq+HQpGuQqrwW6aiwuipf5dfqr++ WN5Nhk9qV9o81MgBGqcLltPeAI+F6riBrZFDWwhJu4NuHNWIrtxVmziMmGSpyA4v cRsmDTfAGadnv2SxilXmTI7VqPhCver/XkmaDKUo0gYsCNA7Ja/lAtmE7yNqdfFw Mqz1jLyFX4pYNhWzIUU8ZNfWhuMYDFLrCPmpgcDbS6A/UscjQUc+KlyiDq7bpt3F RIDpDHT0ILyf1rnGfPC5AFCvnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKS3s4VW oO+BBXUO8AOYnvlzi+E2MB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByRqI83nhbFEeqhBImmWEURElIKgGsnFrzy8oM0QdVQqwPTAnLcSKn 2/8U9aLMz5EuA9Tqyz3iGIcRhRcMU+p9QSgFTrmLELLRD1h76FPXjdc4aqN2hm3C BU56Fpyia0p+VSSBDMkdWwPO5Gy2Cc1/ARj+TpqdyfTSp27zdsjZesVR11Kd3dBT bu3dpg1NM1/wmc+YXl89+u/3YFshRUBWTz7ZjOBCxu5kzMTyEH0vg5aYKJ2nkj2h Aq3BKUCZfxB/Z5aBng8nUfFhmVQSorp5yaZKdAyepr6IDJ3C39pjXUdaJ9isXbmN Ywy83L87z7He3qceg3Q/arQqVg59u4sm -----END CERTIFICATE-----Generated at Fri Sep 19 12:16:53 2025 by rpki-client