$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: xJGLXnvk9rMtH8DgyO6xklaqImS5/2w+A4aMmTebSJE= Subject key identifier: 0B:6B:CF:FA:D1:23:50:E6:AE:6B:CC:50:8E:4D:72:69:1A:68:A1:BC Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: 0173 Signing time: Wed 05 Nov 2025 04:00:08 +0000 Manifest this update: Wed 05 Nov 2025 04:00:07 +0000 Manifest next update: Wed 12 Nov 2025 04:00:07 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: G/OV4c0FdCN4lojD6x7LxbOYn1dvH8fE7lMpAdssnd4=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 322ioaBzAzi6yUpdAJJxn+TJMCIFPpfe4ryfjRmmpZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: Nov 5 04:00:07 2025 GMT Not After : Nov 12 04:00:07 2025 GMT Subject: CN=690acbc8-454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:a2:ec:e4:cb:a0:1f:87:73:70:9c:d6:1c: 78:e9:6f:05:04:47:03:56:e0:91:cd:8a:e1:10:2e: 74:9b:c4:2e:49:93:2d:b7:cb:6f:ca:5f:af:ad:d0: f6:ce:c1:66:df:ae:b9:cc:76:76:93:11:81:d1:06: 26:a7:6c:d0:fe:d6:bc:1b:22:a2:8f:8f:0e:03:64: 91:70:98:76:c9:ab:77:0e:b9:a3:0a:0d:0e:c1:ed: 1b:89:46:a6:2d:d3:7d:a0:80:db:53:8b:96:9a:35: 76:e7:92:f1:32:cc:2a:fb:a5:e8:5c:bf:3d:69:b8: 24:c8:f1:36:d9:47:2b:63:1c:11:b4:fb:79:5d:de: 97:62:17:42:b7:ec:55:88:f3:f6:a8:9b:64:35:3e: 8d:4f:84:a1:33:e2:a4:4f:25:0c:d1:90:6c:d4:c5: 59:82:85:8d:9d:a7:28:7b:87:85:3a:51:cd:19:ab: d9:73:42:db:85:fb:65:8e:c6:70:d7:3e:43:29:12: 91:0d:95:53:29:81:4d:ca:b4:19:f1:57:4c:1c:ae: 54:0d:b4:91:98:ac:af:62:61:4d:34:d0:b2:44:30: 0d:70:4a:9a:55:e6:a1:9e:13:08:c0:dc:f5:7d:43: 4e:50:6b:f1:57:71:b7:e5:51:29:16:0b:ad:01:ec: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6B:CF:FA:D1:23:50:E6:AE:6B:CC:50:8E:4D:72:69:1A:68:A1:BC X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:40:f3:8a:c6:28:06:8a:c9:f6:57:4c:07:bb:a9:b1:33:93: 48:33:7b:df:a8:58:f4:9f:49:a6:48:08:d8:d7:e3:6a:12:10: 3b:0a:65:1d:49:34:5a:66:3c:6b:7c:7d:31:85:b0:6d:87:31: fa:f5:e0:ab:dd:03:ca:72:54:2d:1e:d4:6e:a2:0d:98:1f:d2: 5b:8d:a9:d1:78:b8:32:9f:c4:00:e0:75:a7:b5:01:31:58:f4: 0d:75:30:56:36:1c:c1:5a:1d:73:fe:75:99:36:e6:fc:9e:0a: 8c:ee:32:6a:ba:12:ce:8f:10:55:0f:b7:1b:33:91:ce:75:07: 27:b3:4f:7e:5d:19:5d:ac:d8:91:54:94:54:5e:29:32:0b:28: 18:3c:f3:36:7a:d5:fe:74:c1:04:5d:ab:85:5c:0a:2c:42:31: 06:01:b4:62:8d:34:e5:b7:b7:56:31:5a:9d:96:61:16:21:3f: 1b:5e:b9:b9:bd:b5:29:5c:a1:c1:a3:0e:00:d9:4f:ff:02:ab: bb:af:d9:04:78:16:d7:e6:e9:8b:ba:e3:bf:51:4b:25:ca:40: 37:de:bf:89:e8:eb:33:e5:02:32:d1:c6:fd:c1:cb:be:4a:f4: 39:a6:76:7b:cc:1f:bf:f3:f0:5d:d8:d3:e3:bb:a6:fb:13:58: 16:cc:9e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVEODQxMTAvBgNVBAUTKDk0OUI2NDdBNUY4Qzc5RjZEQTRBRTM2RDlFMDBDNDRF MDJBOUE3QTQwHhcNMjUxMTA1MDQwMDA3WhcNMjUxMTEyMDQwMDA3WjAYMRYwFAYD VQQDEw02OTBhY2JjOC00NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvmi7OTLoB+Hc3Cc1hx46W8FBEcDVuCRzYrhEC50m8QuSZMtt8tvyl+vrdD2 zsFm3665zHZ2kxGB0QYmp2zQ/ta8GyKij48OA2SRcJh2yat3DrmjCg0Owe0biUam LdN9oIDbU4uWmjV255LxMswq+6XoXL89abgkyPE22UcrYxwRtPt5Xd6XYhdCt+xV iPP2qJtkNT6NT4ShM+KkTyUM0ZBs1MVZgoWNnacoe4eFOlHNGavZc0LbhftljsZw 1z5DKRKRDZVTKYFNyrQZ8VdMHK5UDbSRmKyvYmFNNNCyRDANcEqaVeahnhMIwNz1 fUNOUGvxV3G35VEpFgutAex7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtrz/rR I1DmrmvMUI5NcmkaaKG8MB8GA1UdIwQYMBaAFJSbZHpfjHn22krjbZ4AxE4Cqaek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ4NC9GODA2OTQzQzg2 QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVmYmFTdU50bmdERVRnS3Bw NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ4NC9GODA2OTQzQzg2QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVm YmFTdU50bmdERVRnS3BwNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaQPOKxigGisn2V0wHu6mxM5NIM3vfqFj0n0mmSAjY1+NqEhA7CmUd STRaZjxrfH0xhbBthzH69eCr3QPKclQtHtRuog2YH9JbjanReLgyn8QA4HWntQEx WPQNdTBWNhzBWh1z/nWZNub8ngqM7jJquhLOjxBVD7cbM5HOdQcns09+XRldrNiR VJRUXikyCygYPPM2etX+dMEEXauFXAosQjEGAbRijTTlt7dWMVqdlmEWIT8bXrm5 vbUpXKHBow4A2U//Aqu7r9kEeBbX5umLuuO/UUslykA33r+J6Osz5QIy0cb9wcu+ SvQ5pnZ7zB+/8/Bd2NPju6b7E1gWzJ6Z -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:22 2025 by rpki-client