$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: Sznhu8XeiU+l4yO35mmMdtl9DZyKOzoemk3EMKH0he0= Subject key identifier: 4A:6A:B0:F9:45:83:B8:F2:96:4D:9D:31:27:12:60:C6:F8:50:24:FC Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C82 Signing time: Sun 02 Nov 2025 18:27:05 +0000 Manifest this update: Sun 02 Nov 2025 18:27:04 +0000 Manifest next update: Sun 09 Nov 2025 18:27:04 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: WO/IGvuVTgiaPjE94yA7wV0XREwNOACdfmvh9F+Wmoc=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: KRpOoM5OBYozHGqs3tAj+O3jIxT+88DuqXNJ+j9YBFM=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: UK4U60eiGuCuztGWWVANU0DD3PkFQsjwpFntP06fM3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Nov 2 18:27:04 2025 GMT Not After : Nov 9 18:27:04 2025 GMT Subject: CN=6907a278-42b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:72:59:97:4a:8f:1b:ef:a4:99:0c:9e:5e:8c: 12:8d:26:5c:ef:96:bb:74:b3:fb:60:cb:5e:43:37: 1d:02:bc:13:a8:2c:21:25:42:bb:ee:99:13:7d:92: 6a:1e:c2:ae:79:2f:bb:86:ed:74:39:8f:b0:1c:8f: 03:dd:b7:29:c5:5c:fe:d9:3a:9a:24:f3:64:70:fb: c2:ef:86:60:ae:a6:49:8c:aa:32:e1:cd:eb:d1:bf: ab:55:e1:67:b6:48:29:00:a8:1a:ef:b3:63:69:fa: 03:e5:35:8e:34:c1:99:a4:f0:4e:68:2d:10:45:a3: e6:61:af:53:67:3f:c8:cc:d7:75:79:7c:08:ba:12: f6:25:33:31:26:4f:db:5d:03:cc:e5:17:00:a8:50: 52:0a:ae:22:96:bc:26:18:85:d8:dd:bb:cd:a0:92: 26:59:5b:57:76:62:e2:98:c8:cb:15:7d:d7:dc:36: 92:3e:2a:dd:a5:f6:07:ab:5d:89:4e:de:5a:26:d5: e7:4e:03:dd:68:63:51:7c:74:2b:84:08:44:ad:71: e0:eb:1d:ac:03:3e:96:42:de:0c:65:e4:16:3a:e3: 71:7d:4f:dd:5c:ed:b8:19:d5:7b:42:07:26:55:31: 6f:d5:a2:dd:6c:7b:3a:13:10:c5:00:51:3d:72:aa: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6A:B0:F9:45:83:B8:F2:96:4D:9D:31:27:12:60:C6:F8:50:24:FC X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7d:de:d3:f1:b9:89:4c:d0:1b:ba:0f:ed:83:57:e4:65:dd: 62:57:80:f0:3c:80:0e:93:bd:55:75:8b:b3:e2:db:2f:a3:8b: e1:85:3a:33:fe:20:ba:a2:a5:83:55:29:84:b9:88:f1:8c:4d: 43:3d:38:9a:05:8d:62:dd:d2:52:86:fa:55:02:3c:97:b9:68: b0:6d:cd:42:c0:c5:0f:90:0f:51:66:fb:aa:ce:eb:94:c0:5c: 9e:9b:38:cf:be:aa:e8:0e:06:05:6e:8b:41:ea:30:37:f2:ad: 63:64:10:90:b4:be:e2:4e:6c:61:3f:4d:89:3d:61:f7:bf:b8: 71:d2:2a:23:25:ec:1b:09:5e:ad:59:77:a0:c1:23:c4:e3:81: c1:95:f7:1d:6d:b3:96:9c:9b:cb:39:c1:3c:fd:30:37:25:29: 11:c4:52:85:51:05:33:ac:35:c9:84:a2:07:ee:c9:62:47:9f: 4f:51:0c:92:90:8b:50:d9:85:6c:3e:e0:34:d0:a5:5e:40:e8: 6e:9f:65:79:5b:83:38:76:5a:d1:63:9b:c7:1f:c5:aa:a0:11: 89:db:5b:bd:10:5b:cd:5f:73:a2:9b:ac:e9:81:ec:54:fb:cf: 7d:7a:09:36:96:85:29:b3:24:3b:fa:69:d2:b4:a8:45:c2:b5: 30:a8:0b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUxMTAyMTgyNzA0WhcNMjUxMTA5MTgyNzA0WjAYMRYwFAYD VQQDEw02OTA3YTI3OC00MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53JZl0qPG++kmQyeXowSjSZc75a7dLP7YMteQzcdArwTqCwhJUK77pkTfZJq HsKueS+7hu10OY+wHI8D3bcpxVz+2TqaJPNkcPvC74ZgrqZJjKoy4c3r0b+rVeFn tkgpAKga77NjafoD5TWONMGZpPBOaC0QRaPmYa9TZz/IzNd1eXwIuhL2JTMxJk/b XQPM5RcAqFBSCq4ilrwmGIXY3bvNoJImWVtXdmLimMjLFX3X3DaSPirdpfYHq12J Tt5aJtXnTgPdaGNRfHQrhAhErXHg6x2sAz6WQt4MZeQWOuNxfU/dXO24GdV7Qgcm VTFv1aLdbHs6ExDFAFE9cqqhywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpqsPlF g7jylk2dMScSYMb4UCT8MB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxfd7T8bmJTNAbug/tg1fkZd1iV4DwPIAOk71VdYuz4tsvo4vhhToz /iC6oqWDVSmEuYjxjE1DPTiaBY1i3dJShvpVAjyXuWiwbc1CwMUPkA9RZvuqzuuU wFyemzjPvqroDgYFbotB6jA38q1jZBCQtL7iTmxhP02JPWH3v7hx0iojJewbCV6t WXegwSPE44HBlfcdbbOWnJvLOcE8/TA3JSkRxFKFUQUzrDXJhKIH7sliR59PUQyS kItQ2YVsPuA00KVeQOhun2V5W4M4dlrRY5vHH8WqoBGJ21u9EFvNX3Oim6zpgexU +899egk2loUpsyQ7+mnStKhFwrUwqAuZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:04 2025 by rpki-client