$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: yTMT027itl5XKh3sFDtcObJCfxMt/c7q3YLJ8bNunBg= Subject key identifier: 91:7C:EA:07:9E:9E:8E:72:C6:9F:32:45:DA:9E:70:9D:5A:81:4A:BF Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 06C2 Signing time: Tue 04 Nov 2025 22:13:20 +0000 Manifest this update: Tue 04 Nov 2025 22:13:20 +0000 Manifest next update: Tue 11 Nov 2025 22:13:20 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: xGw1Iq4GCxASJXoY9v1Te94BEBEVwAmLghgkCOdco7w=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: xv4JOTBWCpuFMP+OVuJZ707b0iFlDSezqXisZkWjHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Nov 4 22:13:20 2025 GMT Not After : Nov 11 22:13:20 2025 GMT Subject: CN=690a7a80-aa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:56:78:da:27:50:30:17:f8:b6:ea:f6:85: 10:dd:97:43:df:2e:cf:e9:68:e9:69:ac:86:d0:3e: 19:e9:5e:3a:d0:53:8f:94:4c:9c:47:47:5f:fe:a7: 11:45:b6:a8:eb:5a:25:af:2e:88:ef:63:8d:aa:0c: ae:89:66:e8:7f:1b:57:d0:ff:f3:35:f6:ba:6e:c3: 94:6f:60:ae:df:2e:64:a9:29:f8:4f:03:b5:fb:0a: 3c:d8:8c:d8:0b:ba:3c:11:a6:6e:c1:f4:ca:30:74: 80:45:96:4b:f8:43:8f:d4:31:18:9e:b2:23:07:ed: c2:ee:ab:23:8a:ab:d0:10:75:fb:d7:fe:0a:53:d3: 79:a3:8e:36:7c:7f:7b:c5:12:5d:9c:64:d3:50:8d: 7d:b4:24:1c:b3:4d:a8:d9:8f:76:fb:a9:e4:89:8b: 20:8d:49:8f:6e:9d:36:4e:63:5e:fb:f7:b9:76:22: 36:cf:64:ab:64:83:92:f1:8f:a7:d4:57:9a:1e:e1: 70:9d:39:5d:db:60:8c:d1:53:cc:b9:47:f6:69:ce: 0b:5e:b4:32:1d:0c:c5:fb:0a:78:86:7b:0f:5a:ff: c4:08:8a:6f:17:4d:d8:d6:fc:c8:2b:47:78:62:c5: a7:02:9a:b8:a6:08:f4:16:b3:d6:45:11:0e:47:74: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:EA:07:9E:9E:8E:72:C6:9F:32:45:DA:9E:70:9D:5A:81:4A:BF X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:de:a6:56:db:96:1e:94:12:d2:c2:bf:d6:da:c6:d5:74:ba: 8a:75:af:76:9b:15:34:59:08:e5:49:ef:b8:f2:db:ad:ba:2e: 5a:bb:2b:28:bc:f0:76:58:86:54:9f:53:2f:3b:06:51:b5:2f: 0b:72:1b:21:50:ed:cb:2d:4e:59:7f:d2:cb:3f:d1:20:01:22: 03:dd:59:07:3f:f4:01:35:cc:e5:c6:58:15:ee:31:d3:6c:d9: b6:46:6c:25:05:f1:53:88:51:95:8e:9b:67:26:1e:d1:6c:a3: b7:4a:8b:61:60:98:8f:a9:e6:fe:80:a8:b6:5b:c3:37:ee:d0: e5:6a:c0:79:74:ae:25:91:85:70:90:88:28:42:b3:cc:7d:4f: 87:88:23:4e:89:bb:71:12:60:9e:70:eb:ac:96:74:5c:ea:7d: 23:ce:22:e4:10:91:56:3b:f3:06:2f:e0:3a:fe:88:68:ca:d1: 36:62:51:b5:b0:3a:b3:c1:65:f9:df:58:a2:92:24:4f:58:e4: ef:a0:d7:d8:1b:fc:57:de:27:14:4a:a4:29:e1:2f:ee:00:58: cc:28:65:53:14:c6:eb:4a:36:55:50:a0:9f:2c:0e:c3:0e:24: 24:1b:1a:af:26:86:de:bb:e2:ca:57:17:33:92:5e:02:1b:7c: 7d:87:65:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUxMTA0MjIxMzIwWhcNMjUxMTExMjIxMzIwWjAYMRYwFAYD VQQDEw02OTBhN2E4MC1hYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqlWeNonUDAX+Lbq9oUQ3ZdD3y7P6WjpaayG0D4Z6V460FOPlEycR0df/qcR Rbao61olry6I72ONqgyuiWbofxtX0P/zNfa6bsOUb2Cu3y5kqSn4TwO1+wo82IzY C7o8EaZuwfTKMHSARZZL+EOP1DEYnrIjB+3C7qsjiqvQEHX71/4KU9N5o442fH97 xRJdnGTTUI19tCQcs02o2Y92+6nkiYsgjUmPbp02TmNe+/e5diI2z2SrZIOS8Y+n 1FeaHuFwnTld22CM0VPMuUf2ac4LXrQyHQzF+wp4hnsPWv/ECIpvF03Y1vzIK0d4 YsWnApq4pgj0FrPWRREOR3RGvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF86gee no5yxp8yRdqecJ1agUq/MB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy3qZW25YelBLSwr/W2sbVdLqKda92mxU0WQjlSe+48tutui5auyso vPB2WIZUn1MvOwZRtS8LchshUO3LLU5Zf9LLP9EgASID3VkHP/QBNczlxlgV7jHT bNm2RmwlBfFTiFGVjptnJh7RbKO3SothYJiPqeb+gKi2W8M37tDlasB5dK4lkYVw kIgoQrPMfU+HiCNOibtxEmCecOuslnRc6n0jziLkEJFWO/MGL+A6/ohoytE2YlG1 sDqzwWX531iikiRPWOTvoNfYG/xX3icUSqQp4S/uAFjMKGVTFMbrSjZVUKCfLA7D DiQkGxqvJobeu+LKVxczkl4CG3x9h2VH -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:18 2025 by rpki-client