$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: jUTImFF8QDGVWh0pIndj8pz8a0uVIqZ+LlhsaTHFPjc= Subject key identifier: FA:D9:9F:04:7B:01:98:52:4D:34:6D:34:87:B5:94:70:19:8B:53:9C Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: 0126 Signing time: Wed 05 Nov 2025 04:50:44 +0000 Manifest this update: Wed 05 Nov 2025 04:50:43 +0000 Manifest next update: Wed 12 Nov 2025 04:50:43 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: 6s+11AvFxlL5YUEZyct3G5OYhz15no1vj/bVGPQJgbY=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Nov 5 04:50:43 2025 GMT Not After : Nov 12 04:50:43 2025 GMT Subject: CN=690ad7a4-f01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:b2:46:3a:04:f1:10:e0:07:2e:59:b9:0e: 66:4c:0b:40:90:7b:f2:71:5d:17:0d:54:89:98:86: e8:2a:ae:ad:dc:cf:a5:0f:66:2a:80:98:af:d2:5e: 3a:1b:0c:e7:a2:6c:69:71:c4:7d:0b:74:ab:5f:3d: 32:fe:61:c9:30:40:da:44:a2:d1:a0:4d:8f:5e:92: 36:fa:ad:f9:e7:95:51:59:f0:fb:8c:52:79:84:74: 6a:cf:9d:dc:02:5b:a1:73:40:68:95:f4:d4:cc:f7: 83:fb:6f:bb:ba:98:b4:c7:e8:14:14:07:a0:94:c1: 1f:30:4a:43:81:c1:a3:f4:9e:14:0f:0d:0b:c2:6e: 66:59:2b:17:87:5e:f2:73:51:e3:1b:b7:3c:68:aa: e7:85:23:5f:81:63:fc:5d:29:ad:f3:87:5d:49:40: f4:2a:17:f0:67:ea:6e:8d:68:a5:64:5c:25:24:d9: b4:8f:01:a5:24:b1:0a:1e:e8:b8:30:63:29:4c:82: ae:ee:86:21:bb:ea:2f:b0:75:b9:43:ba:3a:d5:9a: fc:06:1e:d8:9d:ae:3c:3a:6d:27:16:de:b9:af:b9: 22:b2:e6:44:00:30:da:c2:f3:90:73:d8:0e:95:8b: 0c:76:b5:ad:eb:54:ba:db:92:d1:8a:ef:40:ea:36: 45:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:9F:04:7B:01:98:52:4D:34:6D:34:87:B5:94:70:19:8B:53:9C X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:15:d7:19:fa:bf:98:82:5f:3a:6f:d9:5f:a8:ae:62:72:12: bb:a2:29:eb:65:a7:94:4d:20:73:e5:40:f4:bc:7d:50:57:40: 32:49:7c:3f:f0:42:0d:f6:11:b7:76:79:f2:fc:58:a4:8f:60: 87:b4:65:99:32:45:2d:a5:2f:23:74:e8:83:fd:1e:12:54:31: 98:fc:7b:b9:8c:51:23:c8:06:b8:c1:60:ee:b1:95:9b:ae:cb: a7:ab:bd:bd:76:2a:e9:9b:96:d1:3c:43:ae:b5:0e:ad:a0:17: c9:ed:33:a3:fa:b8:34:4f:52:35:da:c3:d7:6d:2a:4f:48:04: 32:57:41:d0:4c:83:f0:98:2e:ad:00:4d:4a:8d:47:46:36:dc: 93:63:2e:0c:8e:7b:e7:6e:a7:4d:7a:cb:84:c3:51:ad:07:d5: 1f:86:43:36:82:e3:fe:e2:47:69:6c:70:db:04:3c:7c:0d:18: a8:a3:dd:cd:91:48:1d:b9:7c:35:54:62:84:7f:d3:e4:23:5a: ab:38:70:d1:d3:3e:29:f5:af:36:6e:bf:84:64:2e:8e:4a:0b: 9f:67:3f:54:ac:c0:f2:bb:16:2c:1c:6e:03:8f:6e:66:9d:13: ee:13:44:20:68:33:5a:2d:9f:4c:8a:ec:9f:61:0a:72:44:98: 50:19:a4:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUxMTA1MDQ1MDQzWhcNMjUxMTEyMDQ1MDQzWjAYMRYwFAYD VQQDEw02OTBhZDdhNC1mMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKqyRjoE8RDgBy5ZuQ5mTAtAkHvycV0XDVSJmIboKq6t3M+lD2YqgJiv0l46 GwznomxpccR9C3SrXz0y/mHJMEDaRKLRoE2PXpI2+q3555VRWfD7jFJ5hHRqz53c Aluhc0BolfTUzPeD+2+7upi0x+gUFAeglMEfMEpDgcGj9J4UDw0Lwm5mWSsXh17y c1HjG7c8aKrnhSNfgWP8XSmt84ddSUD0KhfwZ+pujWilZFwlJNm0jwGlJLEKHui4 MGMpTIKu7oYhu+ovsHW5Q7o61Zr8Bh7Yna48Om0nFt65r7kisuZEADDawvOQc9gO lYsMdrWt61S625LRiu9A6jZFUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrZnwR7 AZhSTTRtNIe1lHAZi1OcMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFdcZ+r+Ygl86b9lfqK5ichK7oinrZaeUTSBz5UD0vH1QV0AySXw/ 8EIN9hG3dnny/Fikj2CHtGWZMkUtpS8jdOiD/R4SVDGY/Hu5jFEjyAa4wWDusZWb rsunq729dirpm5bRPEOutQ6toBfJ7TOj+rg0T1I12sPXbSpPSAQyV0HQTIPwmC6t AE1KjUdGNtyTYy4MjnvnbqdNesuEw1GtB9UfhkM2guP+4kdpbHDbBDx8DRioo93N kUgduXw1VGKEf9PkI1qrOHDR0z4p9a82br+EZC6OSgufZz9UrMDyuxYsHG4Dj25m nRPuE0QgaDNaLZ9MiuyfYQpyRJhQGaR2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:23 2025 by rpki-client