$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: JSv840zwSJE2gACRTyBb3EV5iIQRqz/q4b9DESwRQNU= Subject key identifier: B8:8E:C5:20:A5:30:C1:BF:29:45:1D:6E:2A:09:91:AE:47:C5:F6:5B Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 0115 Signing time: Mon 03 Nov 2025 04:52:36 +0000 Manifest this update: Mon 03 Nov 2025 04:52:35 +0000 Manifest next update: Mon 10 Nov 2025 04:52:35 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: PSBI968iqpNrbkOzXyCAgqrO7ll+7UOiCiieaxAMG1o=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: eq/kGWgomEiw4pMKrPya4BqnBXJsYemvIJbRjqP6JSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Nov 3 04:52:35 2025 GMT Not After : Nov 10 04:52:35 2025 GMT Subject: CN=69083513-e4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4e:f6:07:f4:43:90:aa:a5:ba:e3:f4:45:7e: 51:9a:d6:3f:58:c7:6e:71:0b:a1:be:e3:30:cf:01: 90:d3:8b:79:9f:13:71:f3:7b:1a:69:b6:ed:78:87: 7b:b7:55:f3:cb:ec:bd:5f:a9:7b:67:d6:dc:0f:36: 36:6e:ca:ad:a3:ae:45:9e:5a:02:7a:1c:42:19:87: e1:72:30:28:0f:bd:c4:fd:e1:9d:0e:7d:cf:e6:ab: 75:9d:5a:ec:0e:06:28:4f:e4:39:48:52:03:13:8e: c0:4f:97:52:21:da:d5:d8:68:18:8c:14:8c:09:dc: a5:28:d9:2e:ed:8d:8d:93:40:e0:b6:15:68:ed:50: 1b:2a:9a:c1:5e:74:73:f5:36:2c:45:2a:b8:5a:eb: b1:55:fe:e4:4a:8a:3d:d2:84:26:e7:43:1b:17:bf: c6:8f:30:31:e2:d5:50:22:f7:95:71:0f:1d:fa:c7: 3c:3a:0d:91:d6:d8:ef:39:15:74:8a:62:8e:f0:71: b9:fe:82:c9:61:91:bf:ea:ee:f5:50:fb:e9:7f:40: 6f:a7:8f:df:4e:6c:87:b9:8f:a8:4c:c4:46:04:4e: b9:c2:71:fa:62:11:8c:58:be:d8:c5:90:4d:5c:f4: 71:0d:20:92:22:06:b6:59:79:18:cf:09:2d:9f:d6: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:C5:20:A5:30:C1:BF:29:45:1D:6E:2A:09:91:AE:47:C5:F6:5B X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f5:b6:1d:d1:09:4f:37:eb:d6:10:39:bc:0a:34:a8:e5:d6: 5f:53:25:0e:09:73:12:7e:3c:da:da:2c:f8:4d:e6:8a:84:c9: 2a:08:dd:b1:36:b6:4a:de:15:7f:83:b7:3a:c4:b8:f1:4b:0e: 68:14:3c:48:fa:42:b5:99:eb:e9:78:c2:8c:f1:1a:5b:4a:26: 35:a2:0c:8b:0e:5c:df:96:61:02:69:cb:ec:8e:78:4b:4a:d4: 78:9b:65:22:75:c1:dd:8a:43:07:8b:07:8e:35:12:ef:bf:8a: e0:c4:a2:96:0e:45:2e:92:eb:e8:0c:54:5c:d9:02:67:e3:77: f1:37:d9:90:a5:72:df:ac:e9:54:1f:1a:5c:0d:66:96:2c:68: 7e:76:8b:a9:92:60:f0:ad:36:21:a2:66:7b:59:44:68:66:dd: 53:eb:c6:22:f2:70:12:6e:91:3d:d4:b5:1e:e9:3b:5c:f6:a0: 6b:b4:d3:2e:45:da:77:5b:88:cb:69:6d:42:ff:8f:c7:f6:76: e2:c9:f3:c2:b4:42:a6:6b:b9:23:8f:b4:1e:41:94:c4:f8:3f: cb:71:fd:ac:b0:20:30:16:91:d6:2f:8f:86:0c:cd:3d:0f:79: 85:5a:ca:e8:79:ac:cf:8a:d2:75:2f:02:4b:6b:65:e9:8c:7f: 10:d6:97:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUxMTAzMDQ1MjM1WhcNMjUxMTEwMDQ1MjM1WjAYMRYwFAYD VQQDEw02OTA4MzUxMy1lNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6U72B/RDkKqluuP0RX5RmtY/WMducQuhvuMwzwGQ04t5nxNx83saabbteId7 t1Xzy+y9X6l7Z9bcDzY2bsqto65FnloCehxCGYfhcjAoD73E/eGdDn3P5qt1nVrs DgYoT+Q5SFIDE47AT5dSIdrV2GgYjBSMCdylKNku7Y2Nk0DgthVo7VAbKprBXnRz 9TYsRSq4WuuxVf7kSoo90oQm50MbF7/GjzAx4tVQIveVcQ8d+sc8Og2R1tjvORV0 imKO8HG5/oLJYZG/6u71UPvpf0Bvp4/fTmyHuY+oTMRGBE65wnH6YhGMWL7YxZBN XPRxDSCSIga2WXkYzwktn9ZGGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiOxSCl MMG/KUUdbioJka5HxfZbMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd9bYd0QlPN+vWEDm8CjSo5dZfUyUOCXMSfjza2iz4TeaKhMkqCN2x NrZK3hV/g7c6xLjxSw5oFDxI+kK1mevpeMKM8RpbSiY1ogyLDlzflmECacvsjnhL StR4m2UidcHdikMHiweONRLvv4rgxKKWDkUukuvoDFRc2QJn43fxN9mQpXLfrOlU HxpcDWaWLGh+doupkmDwrTYhomZ7WURoZt1T68Yi8nASbpE91LUe6Ttc9qBrtNMu Rdp3W4jLaW1C/4/H9nbiyfPCtEKma7kjj7QeQZTE+D/Lcf2ssCAwFpHWL4+GDM09 D3mFWsroeazPitJ1LwJLa2XpjH8Q1pea -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:58 2025 by rpki-client