$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: wUjpdLoYyP7G7hXskPQXqwksQQDJPqfLIDjaGFTBCYY= Subject key identifier: 01:9B:E4:14:78:C9:1B:B7:DB:3D:83:B8:05:5C:E9:BA:2F:D1:AF:73 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02FB Signing time: Sat 25 Oct 2025 04:28:29 +0000 Manifest this update: Sat 25 Oct 2025 04:28:29 +0000 Manifest next update: Sat 01 Nov 2025 04:28:29 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: GdixoPtqTzJ7eo/B1up7dWoFVkALeNWVpI7zTaSWhrE=) 2: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=) 5: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 6: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 7: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 04:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Oct 25 04:28:29 2025 GMT Not After : Nov 1 04:28:29 2025 GMT Subject: CN=68fc51ed-3348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e5:66:58:11:70:c8:f9:d6:a6:b1:c4:86:5c: b8:82:e5:71:3b:4c:f9:5b:3f:6e:fb:55:ec:0a:8c: a8:50:9d:8a:c2:d1:7f:7a:99:13:c1:df:f7:32:09: 56:99:40:de:b4:62:bf:d0:3f:42:bf:6d:88:06:e2: 1e:6d:8f:62:4d:d7:85:c0:a1:05:43:59:06:8e:d3: 64:4f:c0:a8:97:ae:04:04:24:d9:7f:49:f4:a3:57: c2:96:ed:54:d4:db:47:2d:10:5f:77:cb:dc:f3:2c: 27:f8:92:e6:db:9c:15:0b:0d:82:14:0b:ec:5d:6a: 75:dc:c2:13:24:8d:cb:01:eb:84:1f:26:88:5b:58: 0d:02:45:b4:30:75:b4:60:54:89:5c:12:57:4f:3c: c0:69:89:28:0c:10:51:70:4e:78:f2:32:7d:9a:f5: 3c:45:36:fe:6c:28:3e:a2:c2:f7:e9:59:66:67:fe: 93:55:60:d0:71:96:d9:98:69:a9:5c:19:8b:22:8a: 32:fd:54:f3:89:54:01:8d:1d:e2:86:e7:30:e4:e3: ca:2f:45:15:02:bf:11:47:9f:74:12:62:db:0e:05: 57:3a:72:7a:d1:58:91:13:cd:c3:e6:4f:ef:00:d9: 8a:92:8e:85:b3:fb:76:9f:4c:d6:c9:7c:aa:c3:be: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9B:E4:14:78:C9:1B:B7:DB:3D:83:B8:05:5C:E9:BA:2F:D1:AF:73 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8a:fe:97:dc:5b:ea:72:30:17:6d:b2:ee:8e:3d:5b:21:d4: 5e:7c:fe:e2:5a:05:84:55:80:37:89:34:fa:8c:ed:81:90:13: dd:5e:de:8c:2a:93:cf:6e:7e:55:58:8d:e3:07:ec:9e:4a:06: cd:77:d6:1f:f3:2d:6c:b6:2a:4c:17:87:10:a2:9c:d5:8a:e5: f4:9a:2b:82:d3:ce:b7:fa:ae:ff:fa:e3:e7:18:f5:c9:e5:e4: bd:13:33:91:9c:6b:96:67:fd:e5:91:f2:28:74:d3:0a:41:58: 37:b8:07:b7:5d:8f:8e:6b:09:28:b1:74:a7:1c:38:5d:c1:0a: 6b:4a:79:c6:92:9c:68:db:f8:39:7f:e6:a8:59:1f:cd:a1:c9: 44:8e:89:67:c8:25:06:95:2c:49:85:22:b0:cd:35:55:c0:ae: b4:86:63:e2:27:e5:85:7a:52:35:d3:9e:ff:bd:cd:2b:95:e8: 46:b7:74:09:06:01:2e:e8:84:bd:cb:d7:a0:4b:30:ac:44:40: c5:7c:98:2e:c9:02:45:35:a9:b4:83:9d:b4:64:dd:8d:d8:be: 58:e6:7d:61:d1:db:82:10:bd:a9:17:51:2d:df:8b:63:69:d2: cc:ca:5e:9a:e8:2b:cf:fc:73:61:42:7d:e5:71:42:46:2a:b4: b6:c5:f2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUxMDI1MDQyODI5WhcNMjUxMTAxMDQyODI5WjAYMRYwFAYD VQQDEw02OGZjNTFlZC0zMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uVmWBFwyPnWprHEhly4guVxO0z5Wz9u+1XsCoyoUJ2KwtF/epkTwd/3MglW mUDetGK/0D9Cv22IBuIebY9iTdeFwKEFQ1kGjtNkT8Col64EBCTZf0n0o1fClu1U 1NtHLRBfd8vc8ywn+JLm25wVCw2CFAvsXWp13MITJI3LAeuEHyaIW1gNAkW0MHW0 YFSJXBJXTzzAaYkoDBBRcE548jJ9mvU8RTb+bCg+osL36VlmZ/6TVWDQcZbZmGmp XBmLIooy/VTziVQBjR3ihucw5OPKL0UVAr8RR590EmLbDgVXOnJ60ViRE83D5k/v ANmKko6Fs/t2n0zWyXyqw74kxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGb5BR4 yRu32z2DuAVc6bov0a9zMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAciv6X3FvqcjAXbbLujj1bIdRefP7iWgWEVYA3iTT6jO2BkBPdXt6M KpPPbn5VWI3jB+yeSgbNd9Yf8y1stipMF4cQopzViuX0miuC0863+q7/+uPnGPXJ 5eS9EzORnGuWZ/3lkfIodNMKQVg3uAe3XY+OawkosXSnHDhdwQprSnnGkpxo2/g5 f+aoWR/NoclEjolnyCUGlSxJhSKwzTVVwK60hmPiJ+WFelI1057/vc0rlehGt3QJ BgEu6IS9y9egSzCsREDFfJguyQJFNam0g520ZN2N2L5Y5n1h0duCEL2pF1Et34tj adLMyl6a6CvP/HNhQn3lcUJGKrS2xfKH -----END CERTIFICATE-----Generated at Sat Oct 25 13:42:31 2025 by rpki-client