$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: oDvW76E2tREN1QUkxHI++GJOprXcHn9ntOXmXWaF7Ao= Subject key identifier: 27:98:59:D0:41:82:70:F9:C2:AE:A0:D0:8B:08:70:DE:3E:E6:8A:51 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0BE9 Signing time: Fri 24 Oct 2025 19:29:10 +0000 Manifest this update: Fri 24 Oct 2025 19:29:09 +0000 Manifest next update: Fri 31 Oct 2025 19:29:09 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: +ekZSupwQfhJLvtvinnGhmfEOp32TzUj33CDxEkMj2Q=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: dh5ymVZvIc7FqFzTtBzYEQEIMygfVmNQaVU/qA2YVgE=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: W6nL3EukqFE9RFLXXry6g4CH+1Dbd14zPnwD38PnUxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Oct 24 19:29:09 2025 GMT Not After : Oct 31 19:29:09 2025 GMT Subject: CN=68fbd386-4029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:ef:6a:9e:31:02:2c:d4:0b:04:52:21:46: ad:b6:60:b0:c4:66:28:1d:21:7a:e8:49:58:db:45: d2:8a:64:bb:15:77:77:84:20:96:c5:c1:74:eb:dc: 2c:4d:ee:bd:9c:c4:9f:9d:23:50:8c:fd:dd:40:ea: eb:4c:76:4d:15:e0:16:e2:c1:9f:5b:be:80:15:43: f6:cd:b6:7c:1c:2d:7e:97:b7:23:02:de:a8:7f:2b: 87:58:7d:58:1e:fa:ab:36:84:00:b2:bd:43:51:83: 1c:68:fd:c2:a6:48:40:77:75:0c:08:c7:a2:ef:b7: 0f:6e:de:d2:2c:f0:73:33:3b:04:33:b6:40:6b:57: ab:6b:62:0f:8d:a8:b0:6b:19:aa:2f:52:1e:ce:a2: be:e6:47:a6:c7:c4:9a:0f:51:c7:9e:58:27:6a:98: 53:9f:63:10:13:dc:aa:fa:ab:d8:56:3a:02:7f:1f: 67:72:a7:69:e5:c0:8d:0c:37:90:af:a2:ac:66:e1: 4f:83:3c:d4:8b:70:e4:9f:9d:50:17:22:f7:02:c9: 81:ce:f0:24:46:ce:88:cd:55:0f:ea:02:67:00:67: c5:79:54:dd:0d:bf:49:f2:86:30:12:3e:6c:ad:c0: 79:49:4a:7b:7c:84:5f:1e:c9:bb:91:a2:f7:33:41: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:98:59:D0:41:82:70:F9:C2:AE:A0:D0:8B:08:70:DE:3E:E6:8A:51 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:47:95:0a:a2:89:88:50:e3:c2:0f:c2:d2:9f:1d:db:ae:c6: 39:a1:b1:d0:44:47:74:6c:10:ef:fc:2b:57:db:64:16:3a:d3: 00:be:4f:47:10:81:b6:07:d1:18:ce:93:27:69:b6:28:e6:f6: 20:ed:65:38:aa:64:9c:3b:84:6a:a0:ae:ff:0a:bb:30:d6:79: 7b:c3:08:ae:37:dd:c2:f3:28:62:b7:ca:00:59:14:5e:ca:68: 92:a3:f9:d6:cd:2e:95:a2:92:73:26:d5:88:68:7d:bb:f7:90: 29:9d:b9:af:d9:de:1c:06:6f:7b:db:f7:88:5f:51:fb:9f:b1: 53:d6:5a:ca:f6:85:e8:2b:bd:ac:d7:01:be:35:9c:78:3a:03: 26:98:07:97:04:47:13:b3:5b:a6:b0:48:61:58:6f:51:ec:8c: c4:92:ea:8a:0e:b5:cd:b9:7e:4e:77:20:88:b0:58:80:7f:32: 25:0c:23:71:3e:75:88:a9:16:13:11:52:90:09:35:bf:11:3f: 5b:d4:70:73:00:4d:67:eb:65:35:1e:f9:8f:69:ce:de:1b:54: 34:79:1d:a7:ea:85:b6:7f:d8:8b:6b:6a:81:f4:97:76:44:9b: 70:e7:f5:dd:ff:c1:60:09:bd:ae:07:91:f7:95:c0:9c:bc:bd: 69:fa:96:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjUxMDI0MTkyOTA5WhcNMjUxMDMxMTkyOTA5WjAYMRYwFAYD VQQDEw02OGZiZDM4Ni00MDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2rvap4xAizUCwRSIUattmCwxGYoHSF66ElY20XSimS7FXd3hCCWxcF069ws Te69nMSfnSNQjP3dQOrrTHZNFeAW4sGfW76AFUP2zbZ8HC1+l7cjAt6ofyuHWH1Y HvqrNoQAsr1DUYMcaP3CpkhAd3UMCMei77cPbt7SLPBzMzsEM7ZAa1era2IPjaiw axmqL1IezqK+5kemx8SaD1HHnlgnaphTn2MQE9yq+qvYVjoCfx9ncqdp5cCNDDeQ r6KsZuFPgzzUi3Dkn51QFyL3AsmBzvAkRs6IzVUP6gJnAGfFeVTdDb9J8oYwEj5s rcB5SUp7fIRfHsm7kaL3M0FPvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeYWdBB gnD5wq6g0IsIcN4+5opRMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6R5UKoomIUOPCD8LSnx3brsY5obHQREd0bBDv/CtX22QWOtMAvk9H EIG2B9EYzpMnabYo5vYg7WU4qmScO4RqoK7/Crsw1nl7wwiuN93C8yhit8oAWRRe ymiSo/nWzS6VopJzJtWIaH2795Apnbmv2d4cBm972/eIX1H7n7FT1lrK9oXoK72s 1wG+NZx4OgMmmAeXBEcTs1umsEhhWG9R7IzEkuqKDrXNuX5OdyCIsFiAfzIlDCNx PnWIqRYTEVKQCTW/ET9b1HBzAE1n62U1HvmPac7eG1Q0eR2n6oW2f9iLa2qB9Jd2 RJtw5/Xd/8FgCb2uB5H3lcCcvL1p+pZh -----END CERTIFICATE-----Generated at Sat Oct 25 17:43:33 2025 by rpki-client