$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: 0iechR7zd0YwQj1wSmIX1WwZOIgtyjNXrh78bkFj1nc= Subject key identifier: C9:83:10:13:98:6E:71:97:F8:A5:1E:A0:F7:0C:EA:91:43:E6:E3:E1 Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: D5 Signing time: Mon 03 Nov 2025 06:30:43 +0000 Manifest this update: Mon 03 Nov 2025 06:30:43 +0000 Manifest next update: Mon 10 Nov 2025 06:30:43 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: psOBzz3OK7OX+wTsch6tOXQYnqkFnPL78Y2K6ItijDc=) 2: 1BD61F645C8711F0923DB116C4F9AE02.roa (hash: nRkOXuAiT1sPCocq+nXPsFuQBgyiZlYhGRugxDZwnSc=) 3: F830F4564F3611F0A970852BC4F9AE02.roa (hash: fiG3ruzyUrai5g5VaE9UAGeJtws3GlUHxnca+lWelW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Nov 3 06:30:43 2025 GMT Not After : Nov 10 06:30:43 2025 GMT Subject: CN=69084c13-ca34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:ed:a4:bb:5e:b0:47:d1:5c:70:1a:58:a4: 15:9e:01:66:8e:48:ff:f8:1d:ec:58:80:15:5d:77: 31:22:4b:94:7c:d2:c6:7e:5e:19:05:76:6f:f7:6d: 51:ea:9e:fd:ce:cc:1a:71:c3:d4:14:6e:33:65:16: d9:6d:69:ca:6d:8a:b6:4e:17:f2:f5:13:5b:c0:29: 34:79:91:61:2a:5f:0d:3a:a8:4b:79:37:09:a2:b3: a2:31:b0:03:87:7d:b6:29:55:0e:5d:0d:c8:0b:07: aa:51:66:72:c6:1c:33:2d:55:05:86:1b:51:12:6e: bf:cb:d4:e4:0a:cc:1f:0a:3a:f4:a4:dd:30:e3:19: 26:b2:20:b1:29:f9:76:ee:55:1e:1d:46:10:48:35: 1c:56:b7:39:2c:fc:1d:02:d0:fc:07:42:d6:38:71: a7:b0:39:cd:a9:68:24:ef:75:ff:2a:34:2e:78:0f: 24:a6:e9:5b:a7:b2:b1:16:98:8a:47:8c:3f:86:ba: 0b:81:be:63:fb:4a:bb:40:a7:4b:94:a9:0e:68:dc: 88:61:52:55:94:e9:9a:bd:a8:16:17:e3:11:74:de: 27:ac:ed:cf:94:1c:7b:c7:bb:c7:2f:06:25:9b:3e: be:27:c3:b9:81:83:54:59:c9:dd:d5:40:9f:ba:6e: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:83:10:13:98:6E:71:97:F8:A5:1E:A0:F7:0C:EA:91:43:E6:E3:E1 X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ad:3d:e5:76:08:66:5c:c8:19:3a:57:13:e8:43:c7:9f:46: b1:0e:33:95:d8:b0:71:17:84:61:be:0a:2b:f7:75:62:23:3c: 7a:6c:95:18:38:0b:b2:ba:46:f6:25:a3:c8:e2:4b:1d:40:26: 0a:bf:11:db:03:f0:f8:52:00:98:a9:74:e4:01:89:a9:6a:13: 1b:07:1b:94:01:10:0f:5e:5d:66:6a:46:d2:ae:08:4a:10:06: 5a:5a:07:14:1a:fd:63:38:45:0c:6d:b8:ee:0f:71:85:d1:90: 78:da:2f:61:7c:64:eb:b2:4d:8f:0a:22:79:e2:e5:96:c7:fd: 3e:84:2b:2b:95:1a:40:8e:d3:4f:41:a5:b0:83:4e:eb:4a:61: c1:14:4a:21:9b:a1:b8:7d:c5:0b:97:0f:32:a5:75:f6:ab:8a: 21:8b:a0:8e:b4:24:34:5c:ae:a4:41:46:a6:04:26:54:09:d5: f3:e8:7f:16:42:d7:88:f4:09:ee:69:79:b0:ac:01:52:fd:fb: fa:10:e3:c3:28:37:a6:2f:fb:80:ab:7f:69:83:ff:0d:89:f9: 7e:3b:a0:29:91:21:2c:bc:fc:18:fd:22:25:64:5b:ad:e3:8f: 6c:c0:3d:76:ae:e3:ec:5b:3b:70:f5:e3:48:dc:64:91:ff:d9: 94:e1:99:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw NzcwRTI5MEQwHhcNMjUxMTAzMDYzMDQzWhcNMjUxMTEwMDYzMDQzWjAYMRYwFAYD VQQDEw02OTA4NGMxMy1jYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0/tpLtesEfRXHAaWKQVngFmjkj/+B3sWIAVXXcxIkuUfNLGfl4ZBXZv921R 6p79zswaccPUFG4zZRbZbWnKbYq2Thfy9RNbwCk0eZFhKl8NOqhLeTcJorOiMbAD h322KVUOXQ3ICweqUWZyxhwzLVUFhhtREm6/y9TkCswfCjr0pN0w4xkmsiCxKfl2 7lUeHUYQSDUcVrc5LPwdAtD8B0LWOHGnsDnNqWgk73X/KjQueA8kpulbp7KxFpiK R4w/hroLgb5j+0q7QKdLlKkOaNyIYVJVlOmavagWF+MRdN4nrO3PlBx7x7vHLwYl mz6+J8O5gYNUWcnd1UCfum5OwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmDEBOY bnGX+KUeoPcM6pFD5uPhMB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX bmhQaHo5RmhzZllIY09LUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrrT3ldghmXMgZOlcT6EPHn0axDjOV2LBxF4Rhvgor93ViIzx6bJUY OAuyukb2JaPI4ksdQCYKvxHbA/D4UgCYqXTkAYmpahMbBxuUARAPXl1makbSrghK EAZaWgcUGv1jOEUMbbjuD3GF0ZB42i9hfGTrsk2PCiJ54uWWx/0+hCsrlRpAjtNP QaWwg07rSmHBFEohm6G4fcULlw8ypXX2q4ohi6COtCQ0XK6kQUamBCZUCdXz6H8W QteI9AnuaXmwrAFS/fv6EOPDKDemL/uAq39pg/8Nifl+O6ApkSEsvPwY/SIlZFut 449swD12ruPsWztw9eNI3GSR/9mU4Zn4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:47 2025 by rpki-client